Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa
File: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (raw, json)
Hash identifier: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=
Subject key identifier: ED:4B:E9:EA:BE:46:B4:BB:43:6E:56:8E:C5:CF:97:6F:84:E7:8A:57
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 0194252136F9C3C39F66D15046D85FD1E11D
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa
Signing time: Thu 02 Jan 2025 03:48:41 +0000
ROA not before: Thu 02 Jan 2025 03:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51373
IP address blocks: 91.218.156.0/22 maxlen: 22
91.218.156.0/24 maxlen: 24
91.218.157.0/24 maxlen: 24
91.218.158.0/24 maxlen: 24
91.218.159.0/24 maxlen: 24
94.24.28.0/24 maxlen: 24
94.24.79.0/24 maxlen: 24
178.251.120.0/24 maxlen: 24
185.44.216.0/22 maxlen: 22
185.44.216.0/24 maxlen: 24
185.44.217.0/24 maxlen: 24
185.44.218.0/24 maxlen: 24
185.44.219.0/24 maxlen: 24
185.80.59.0/24 maxlen: 24
193.33.8.0/23 maxlen: 23
2a04:9a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:36:f9:c3:c3:9f:66:d1:50:46:d8:5f:d1:e1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jan 2 03:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed4be9eabe46b4bb436e568ec5cf976f84e78a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:4c:3a:51:d6:cb:60:e1:c9:08:c6:af:14:
4b:6e:29:1f:71:c2:1f:7d:6b:be:e9:e0:ae:3c:28:
cc:5e:ac:d6:38:91:d9:95:b8:de:38:68:95:2e:02:
30:cf:b4:8b:72:92:4f:07:85:80:94:cc:c3:e9:75:
a2:8e:a2:7a:f1:4e:34:8e:55:dc:ba:55:66:8b:67:
8a:4d:33:ce:3c:43:7b:4e:75:e4:62:d9:02:e4:54:
0c:72:0b:35:a3:b6:e1:be:1c:57:13:e9:07:55:e7:
b7:a0:71:ff:53:34:5f:2a:19:ff:15:14:a1:63:4e:
26:31:9f:8f:50:25:00:df:de:18:6e:2c:08:31:4f:
bd:44:8a:5e:d5:51:3d:8e:24:fd:a3:cb:75:9a:79:
20:a5:70:77:2a:60:d7:a5:58:05:15:17:66:eb:80:
4b:18:ed:78:ab:d0:b0:07:c1:18:b8:ec:43:be:ae:
85:16:df:cd:75:a9:3d:f0:0e:66:6c:96:4c:c8:ff:
e9:7e:c8:2f:b3:a4:58:4d:d3:a6:44:5b:2d:3e:80:
e0:3e:3a:d1:4a:d3:72:a7:cb:3b:c4:aa:2a:44:cc:
24:e9:7b:0c:f7:65:26:c1:ab:6a:63:f4:37:93:0a:
dc:70:df:ac:dd:b9:bf:be:91:cb:af:2a:35:1e:eb:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:E9:EA:BE:46:B4:BB:43:6E:56:8E:C5:CF:97:6F:84:E7:8A:57
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.156.0/22
94.24.28.0/24
94.24.79.0/24
178.251.120.0/24
185.44.216.0/22
185.80.59.0/24
193.33.8.0/23
IPv6:
2a04:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
9d:5b:d9:ad:aa:46:b1:fb:f6:b6:20:5b:ea:a4:b5:8f:a6:09:
69:6d:a7:2c:65:a2:ae:29:e3:a4:bb:72:41:42:2a:a9:b4:49:
dc:a0:8e:ad:a7:3f:05:0a:0d:9f:92:f3:dd:21:75:63:98:a4:
98:84:a1:73:2b:d3:60:6e:d2:0d:6c:d3:5f:52:1d:bc:06:bf:
d0:75:85:0e:01:29:02:6a:12:20:83:e6:06:6d:4b:df:18:9e:
55:cc:ae:3e:65:cd:b6:e1:65:af:70:c4:9d:d2:fa:24:c7:14:
3f:67:60:c7:4d:b9:eb:94:21:9a:0f:f5:cb:90:3d:dc:f1:a1:
14:ca:58:04:87:8d:08:4c:6c:3a:6e:cb:11:da:b5:e5:e6:09:
97:cd:f4:7a:23:13:25:1b:7b:c0:20:f0:58:7d:c0:04:a5:7c:
2b:ff:d9:4e:d2:62:8c:c4:98:0c:2c:04:db:71:20:d9:79:18:
1f:dc:d9:a4:36:cd:1f:6d:eb:4e:d2:2a:0c:20:6a:5e:c8:16:
18:c9:7b:14:be:0e:c8:f0:f5:1a:e4:f7:e8:6b:b3:1d:b5:e5:
f5:2a:39:d6:51:fb:10:97:e3:5f:a9:b4:57:0f:31:59:7a:e4:
e0:98:a3:ef:b8:e5:83:6c:7d:a0:aa:11:fb:8f:e8:18:c0:e9:
1d:e5:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:55 2025 by rpki-client on console.sobornost.net