Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/vtQbm6_VRhmLRi0RHGDc9fplBTM.roa
File: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (raw, json)
Hash identifier: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=
Subject key identifier: BE:D4:1B:9B:AF:D5:46:19:8B:46:2D:11:1C:60:DC:F5:FA:65:05:33
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0195F572176E2E66E6086C6E8E8F0530FF30
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/vtQbm6_VRhmLRi0RHGDc9fplBTM.roa
Signing time: Wed 02 Apr 2025 07:40:49 +0000
ROA not before: Wed 02 Apr 2025 07:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31148
IP address blocks: 46.219.0.0/16 maxlen: 24
78.159.32.0/19 maxlen: 24
81.95.176.0/20 maxlen: 24
89.252.0.0/18 maxlen: 24
94.76.64.0/18 maxlen: 24
94.76.104.0/24 maxlen: 24
109.251.0.0/16 maxlen: 24
185.124.168.0/22 maxlen: 24
188.231.128.0/17 maxlen: 24
193.24.25.0/24 maxlen: 24
212.22.192.0/19 maxlen: 24
2a00:1228::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:72:17:6e:2e:66:e6:08:6c:6e:8e:8f:05:30:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Apr 2 07:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed41b9bafd546198b462d111c60dcf5fa650533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:82:d8:74:16:19:ba:46:dc:49:96:06:00:
fa:09:2a:80:5e:f0:83:e0:4c:da:10:93:70:2b:be:
a0:12:be:f1:d4:38:99:b9:17:f1:45:71:86:2b:31:
60:fb:9c:f0:c3:fa:f5:46:45:f1:53:1d:72:26:b7:
c1:03:45:70:a3:99:a9:8c:82:33:45:33:12:f6:07:
a0:8f:11:d0:f2:84:37:93:da:65:00:b6:dd:7d:53:
9e:e8:64:88:54:39:92:27:ce:1e:6b:78:f0:75:04:
15:cc:03:07:c9:cf:81:45:47:a7:94:c0:6c:6c:7c:
77:18:66:91:53:0d:32:3e:20:33:e3:9c:4c:4e:70:
2b:b2:96:3b:cb:01:43:f3:98:37:c7:dd:36:c0:46:
9e:a7:db:d7:55:e0:1b:85:7e:59:79:83:2b:23:2c:
c8:14:3a:d4:86:78:14:19:4e:ff:7b:42:da:37:3e:
4e:c4:f9:6f:bb:ab:32:b8:15:40:b9:6f:50:39:ea:
cc:5a:bb:27:bc:fb:be:9b:ea:b0:4e:6f:3f:c5:0d:
a1:29:af:8d:67:76:e8:97:7f:33:16:0a:92:6a:89:
4d:80:23:52:f8:a5:0e:81:b4:4b:36:83:5c:47:4d:
1d:fb:5d:8c:5d:85:65:71:4a:dd:94:f0:24:22:68:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:1B:9B:AF:D5:46:19:8B:46:2D:11:1C:60:DC:F5:FA:65:05:33
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/vtQbm6_VRhmLRi0RHGDc9fplBTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.219.0.0/16
78.159.32.0/19
81.95.176.0/20
89.252.0.0/18
94.76.64.0/18
109.251.0.0/16
185.124.168.0/22
188.231.128.0/17
193.24.25.0/24
212.22.192.0/19
IPv6:
2a00:1228::/32
Signature Algorithm: sha256WithRSAEncryption
4a:7d:66:5d:60:26:06:19:d7:72:ea:2b:79:ad:fe:39:0e:eb:
d0:9f:83:a9:95:bd:11:5f:ae:47:cd:7e:59:ee:7d:92:31:7c:
74:05:ee:b4:49:d7:21:3b:ed:0a:e7:ca:c8:82:79:1f:c0:13:
f5:65:97:41:fd:b5:da:d8:1a:33:be:e8:71:7b:c9:84:44:50:
ea:24:a0:46:34:da:27:00:56:41:61:8b:ca:4d:8a:70:50:4a:
0e:80:52:f7:2e:83:3a:bc:7e:99:fe:00:9f:0b:27:ef:32:24:
2f:7b:97:a7:f3:42:cd:fd:e3:1b:c4:46:b5:ca:9b:1a:ad:9d:
9a:fe:b7:9a:89:27:b1:d1:9e:d7:13:52:c2:69:7f:b3:50:73:
94:ec:b2:b6:a0:9d:88:02:b5:ac:5f:7b:55:ff:6c:58:20:6c:
d3:a8:ca:bf:3c:05:c4:ca:a7:bb:33:f2:6d:43:8a:60:9d:28:
32:ee:21:f5:69:99:e9:9f:08:e5:09:28:69:7c:01:52:94:6a:
18:16:7e:0b:f1:53:90:0d:59:c7:34:f0:61:e8:7b:26:2e:02:
f2:02:bf:ba:d1:bc:e0:3e:a3:13:c5:c0:2b:79:ec:89:29:c9:
af:c9:4d:aa:ce:5d:3b:7a:21:ac:b5:b8:f5:60:6d:a7:9e:2b:
68:ed:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net