Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/501ahkD4gjr9itS0rHitDULQOJI.roa
File: 501ahkD4gjr9itS0rHitDULQOJI.roa (raw, json)
Hash identifier: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=
Subject key identifier: E7:4D:5A:86:40:F8:82:3A:FD:8A:D4:B4:AC:78:AD:0D:42:D0:38:92
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019427B36F6C311784CF462FEDCDBF4DCF54
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/501ahkD4gjr9itS0rHitDULQOJI.roa
Signing time: Thu 02 Jan 2025 15:47:38 +0000
ROA not before: Thu 02 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 31.14.52.0/24 maxlen: 24
31.214.129.0/24 maxlen: 24
31.214.152.0/24 maxlen: 24
37.156.246.0/24 maxlen: 24
45.139.222.0/24 maxlen: 24
45.145.20.0/24 maxlen: 24
89.45.94.0/24 maxlen: 24
93.113.96.0/24 maxlen: 24
109.230.196.0/24 maxlen: 24
185.111.244.0/24 maxlen: 24
185.111.245.0/24 maxlen: 24
185.111.246.0/24 maxlen: 24
185.111.247.0/24 maxlen: 24
193.53.87.0/24 maxlen: 24
193.53.98.0/24 maxlen: 24
193.53.103.0/24 maxlen: 24
193.53.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:6f:6c:31:17:84:cf:46:2f:ed:cd:bf:4d:cf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jan 2 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e74d5a8640f8823afd8ad4b4ac78ad0d42d03892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:e8:a6:69:c4:8c:b3:a3:4f:68:8f:2e:b3:
d8:d4:8b:8b:6d:32:03:53:b6:b9:d5:51:20:87:cd:
f2:f4:a7:92:37:81:9b:b1:ed:27:f7:fc:d5:27:99:
3e:b9:5b:e4:74:fa:77:88:91:70:57:15:79:d4:b5:
24:81:4d:75:83:cc:32:79:23:b9:67:61:54:87:10:
c4:9f:88:00:5c:0a:59:b0:5e:68:75:a3:f7:81:c9:
4e:e2:b1:e8:b3:73:35:17:e0:03:55:33:3d:55:8d:
3b:a3:55:1d:c0:38:dc:3b:e2:14:3d:49:8d:1e:3a:
f6:39:5c:f2:a2:ea:89:59:61:6a:34:38:55:e5:dc:
76:a8:01:24:f7:c8:58:49:23:a3:de:ca:aa:f6:0c:
af:f2:6a:9c:ea:a3:5a:2a:d4:63:6d:f9:48:27:b3:
a5:93:9d:c4:64:89:65:b7:14:91:0a:e7:34:a6:5a:
05:b4:8e:77:d6:1c:ba:88:27:3b:f2:5e:e9:2c:cf:
b8:7c:c4:f2:4d:0d:fd:ad:e5:9b:6b:27:a6:ca:da:
0a:18:6c:d0:f9:c1:f3:bf:67:8b:c1:02:9a:a1:49:
0c:24:f6:3e:b3:f7:3d:43:62:4e:75:74:27:3d:7e:
c3:de:7b:df:9d:44:c0:b0:e0:32:f1:b1:27:d6:1e:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4D:5A:86:40:F8:82:3A:FD:8A:D4:B4:AC:78:AD:0D:42:D0:38:92
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/501ahkD4gjr9itS0rHitDULQOJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.52.0/24
31.214.129.0/24
31.214.152.0/24
37.156.246.0/24
45.139.222.0/24
45.145.20.0/24
89.45.94.0/24
93.113.96.0/24
109.230.196.0/24
185.111.244.0/22
193.53.87.0/24
193.53.98.0/24
193.53.103.0/24
193.53.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a8:ed:96:cd:d2:ce:b2:5b:4b:78:96:c2:1f:e2:81:b6:92:
ec:0d:fb:ce:3e:76:f3:1d:a6:43:12:04:f7:05:61:16:50:ac:
cb:f0:3a:ff:12:b5:6b:4f:59:17:68:cf:20:b3:c8:f0:53:65:
43:9e:7b:0c:10:77:ca:a7:0f:76:46:39:4b:d9:0f:c0:64:80:
f9:74:f9:d1:83:5e:6a:3f:85:58:f1:fa:bc:ce:4b:63:43:9b:
b6:59:5c:76:3b:95:21:cb:a8:45:9a:ed:19:d8:c9:8f:42:bb:
cf:3d:d8:cd:47:aa:f1:28:d1:d6:a8:11:bf:48:0c:95:31:b9:
13:a9:f0:0a:17:d3:aa:8d:23:a1:00:78:09:31:6f:1d:55:ee:
5f:da:28:fe:18:b0:22:1b:9a:f9:75:dc:ab:f4:9b:af:70:ae:
bf:f0:ee:88:91:da:8b:57:5c:68:38:a3:6d:d3:38:13:89:bd:
18:c2:52:f6:ee:54:ed:69:c7:5c:ed:be:ee:7e:87:30:1b:3b:
6a:fa:39:d3:2b:1d:c0:5d:c6:17:6b:5d:1b:c6:07:ca:cc:a3:
41:1d:82:91:ca:2a:e7:e8:dc:dd:88:f3:a9:c7:0c:30:2f:e5:
2a:c9:9c:c8:24:e4:5e:ee:b4:5b:61:d2:f0:47:71:e2:be:1f:
95:6b:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net