Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa
File: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (raw, json)
Hash identifier: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=
Subject key identifier: 81:A5:08:73:D9:C8:78:4A:7C:C4:FA:AF:10:3B:DB:73:79:05:69:87
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0195FBB09AA94697FE5B3ED168011039EDBA
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa
Signing time: Thu 03 Apr 2025 12:46:49 +0000
ROA not before: Thu 03 Apr 2025 12:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 5.182.240.0/22 maxlen: 24
149.3.144.0/21 maxlen: 24
185.77.84.0/22 maxlen: 24
185.205.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:b0:9a:a9:46:97:fe:5b:3e:d1:68:01:10:39:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Apr 3 12:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81a50873d9c8784a7cc4faaf103bdb7379056987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:a4:07:82:6b:1a:8f:3f:3a:71:c1:92:34:
a2:73:6d:10:4f:bd:27:a1:2f:e7:55:d7:fe:8c:23:
a5:f4:de:ee:a9:d8:53:04:b8:9c:ee:32:9b:a0:d6:
e8:4e:a3:45:a2:76:d3:a0:14:a5:78:68:9e:bb:79:
f0:f4:f2:2e:ad:28:3c:42:c4:b6:41:a2:21:1e:57:
6a:87:15:4b:63:ed:a5:91:34:b0:58:77:5e:b9:8a:
12:f8:3b:23:94:b8:c3:f3:ba:82:18:69:f5:7c:09:
95:8f:11:96:59:61:8d:75:a1:49:14:34:21:8b:c3:
f3:f7:e5:9f:cd:14:53:93:02:ca:0b:5d:f6:71:27:
a6:4b:6b:0e:03:1b:48:90:86:43:0f:bb:d6:fb:4e:
ca:73:97:fe:32:7a:bd:4d:ce:3f:7d:ac:ad:9c:bf:
b6:74:76:59:2e:91:fd:a0:c0:12:dc:34:8f:be:98:
9c:85:3d:5f:7e:9a:92:fa:23:69:26:0a:92:c8:e4:
0b:ef:a7:3f:f4:6e:9d:75:d6:d8:27:67:4f:87:67:
73:99:b5:31:2e:45:89:5e:d2:f1:5a:10:ff:87:2c:
b8:31:85:4a:98:02:54:63:9b:c5:4f:41:61:60:b2:
e1:91:1e:aa:6f:21:09:be:63:79:b7:ed:72:aa:84:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:08:73:D9:C8:78:4A:7C:C4:FA:AF:10:3B:DB:73:79:05:69:87
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.240.0/22
149.3.144.0/21
185.77.84.0/22
185.205.40.0/22
Signature Algorithm: sha256WithRSAEncryption
83:d0:55:9a:66:fb:fd:fd:78:d8:14:2e:4f:86:4f:88:aa:1c:
0f:86:cd:f3:59:8c:15:00:04:d4:a4:f5:22:47:86:6f:5b:da:
ad:bd:2e:4e:63:17:89:6d:7e:db:16:07:0b:c7:ca:8c:1f:ee:
6d:8f:e2:1e:fe:46:20:ab:f4:dd:c2:48:a0:15:eb:cd:a6:1f:
85:54:45:77:7e:f5:7d:10:26:e8:cb:fe:32:bf:f3:13:9c:78:
4f:3e:b7:2c:4a:e2:19:e8:15:80:c0:4c:f1:70:05:3a:87:78:
1e:96:b6:46:f2:b3:a8:81:f0:f7:ea:52:c3:fa:dc:f2:84:b9:
c3:ae:32:cb:cc:46:53:b7:84:09:6d:4b:56:c4:57:2c:33:f0:
c5:88:b3:03:95:f5:8d:5f:90:25:62:53:af:41:b5:12:c1:0a:
c9:0e:07:17:f2:6c:09:be:e4:3a:6a:02:ca:c0:e8:5f:71:43:
ab:1f:a7:02:0c:a8:f1:cc:43:4e:2a:a3:68:23:db:87:d4:73:
08:7a:c3:d5:5c:a6:ed:73:e0:5d:8a:94:86:b0:3a:ec:fd:f0:
83:10:ee:1d:75:33:f0:f0:e9:4a:eb:ba:8a:81:bb:7d:f1:77:
b6:c0:e7:93:40:9c:54:92:b8:2f:fc:c9:29:6c:81:35:42:3d:
f0:a8:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net