Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa
File: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (raw, json)
Hash identifier: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=
Subject key identifier: 30:29:3F:C2:37:0D:5A:99:41:97:C5:EE:43:E4:3E:B5:76:8E:3D:D8
Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial: 019425FD9E39EC0E1E5BEB53101E4BA107AE
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39812
IP address blocks: 5.44.0.0/20 maxlen: 20
78.139.64.0/19 maxlen: 19
78.139.96.0/21 maxlen: 21
78.139.104.0/21 maxlen: 21
78.139.112.0/21 maxlen: 21
78.139.120.0/21 maxlen: 21
89.107.112.0/21 maxlen: 21
109.202.32.0/19 maxlen: 19
130.255.32.0/19 maxlen: 19
185.12.252.0/22 maxlen: 22
185.106.56.0/22 maxlen: 22
185.137.160.0/23 maxlen: 23
185.137.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9e:39:ec:0e:1e:5b:eb:53:10:1e:4b:a1:07:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30293fc2370d5a994197c5ee43e43eb5768e3dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:b1:48:d7:5a:8b:a3:45:86:a9:48:cb:de:
98:d9:08:6e:aa:16:41:26:d3:be:a2:2e:f0:09:1b:
65:88:9b:a6:fe:ea:9a:be:37:9c:c6:82:96:4d:f9:
ef:ee:da:48:58:17:f0:d1:04:e8:8c:da:0e:a2:52:
6b:03:fd:8b:29:cd:1d:ab:98:51:77:08:46:a6:de:
d8:40:04:e1:50:a2:bd:ed:de:45:e1:f2:b3:53:af:
78:20:07:ee:8a:f2:fb:96:8f:bf:74:5e:29:a0:bc:
72:11:e0:61:b5:2d:64:51:6a:60:35:b0:d5:2b:20:
14:5a:b8:d3:90:e9:06:b5:42:40:1b:ad:c5:4e:e1:
fd:c9:38:27:f6:6f:99:51:f5:f4:87:82:ad:bd:d6:
44:c7:68:f5:1f:2e:83:32:99:38:5c:5b:e2:06:49:
4f:de:96:39:97:8e:1a:f3:a7:8c:67:47:66:ef:73:
9f:f1:c9:ee:9f:a3:82:d2:31:e5:1a:39:9a:9f:27:
98:aa:3e:90:b8:69:d4:1b:93:71:e6:2d:35:a9:a1:
38:20:bd:b0:f6:9e:5c:90:03:34:58:2c:0e:4d:43:
a8:46:b3:f0:fd:bf:5d:b9:2a:ff:55:2b:ea:36:db:
a4:75:24:b6:21:95:2b:b5:3c:7b:70:b0:12:d0:78:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:29:3F:C2:37:0D:5A:99:41:97:C5:EE:43:E4:3E:B5:76:8E:3D:D8
X509v3 Authority Key Identifier:
keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.0.0/20
78.139.64.0/18
89.107.112.0/21
109.202.32.0/19
130.255.32.0/19
185.12.252.0/22
185.106.56.0/22
185.137.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b5:e5:fa:8b:6a:93:75:0f:c0:ca:a3:f4:04:e9:e2:0f:e6:
4b:0a:d9:ec:95:ff:f0:54:24:c9:10:53:29:20:11:50:f5:9d:
74:2c:3a:ac:15:31:d1:84:bf:1c:26:a4:50:0d:81:12:96:7d:
83:35:70:2d:58:ce:2a:5e:59:64:fc:eb:08:e7:d5:b2:b6:7b:
8e:63:1c:3f:86:65:8a:4c:91:e5:2a:82:10:ef:d7:bf:dd:bb:
5d:9c:95:98:05:e0:61:86:db:b8:8b:ae:d4:5f:32:15:f8:41:
e1:1a:ae:f5:b6:31:9e:5d:7d:56:4d:80:f2:2e:93:ac:30:f9:
e6:4a:8f:d9:c1:af:d5:a5:81:5e:9a:15:07:c6:90:24:d4:21:
ff:56:31:62:85:74:a5:48:f1:45:db:ff:cd:31:f8:38:fd:06:
83:fc:d9:88:df:66:df:02:c4:a9:a9:b6:f7:2a:32:1a:67:fb:
e5:b6:e7:d2:67:3b:ca:96:03:93:0b:2c:aa:bb:77:51:2a:32:
bd:48:74:5e:57:34:65:af:c8:4c:6a:42:b8:67:cd:8e:94:42:
c3:ae:85:7e:40:cb:ad:2f:d8:ba:9d:b0:cd:8c:b8:78:e3:6c:
69:00:6c:68:d5:00:8f:bc:2b:49:75:4b:c3:ad:65:78:d4:0d:
7d:d1:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net