Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/DkAig3sreL5BEr4m7B4017Dqunc.roa
File: DkAig3sreL5BEr4m7B4017Dqunc.roa (raw, json)
Hash identifier: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=
Subject key identifier: 0E:40:22:83:7B:2B:78:BE:41:12:BE:26:EC:1E:34:D7:B0:EA:BA:77
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 0194FC3AD90E449D16906173F73D06703ED3
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/DkAig3sreL5BEr4m7B4017Dqunc.roa
Signing time: Wed 12 Feb 2025 22:15:02 +0000
ROA not before: Wed 12 Feb 2025 22:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13172
IP address blocks: 91.211.232.0/24 maxlen: 24
91.211.234.0/24 maxlen: 24
91.211.235.0/24 maxlen: 24
185.108.188.0/24 maxlen: 24
185.108.191.0/24 maxlen: 24
195.225.127.0/24 maxlen: 24
2a03:d180::/32 maxlen: 32
2a03:d180:fffe::/48 maxlen: 48
2a03:d180:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fc:3a:d9:0e:44:9d:16:90:61:73:f7:3d:06:70:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Feb 12 22:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e4022837b2b78be4112be26ec1e34d7b0eaba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:ad:f1:74:5f:b5:9e:ab:b0:05:ee:40:8c:
d8:02:f2:20:63:70:69:ca:47:ae:72:0c:13:a7:36:
a0:54:34:0b:66:c0:1d:67:4e:b2:6f:d6:f1:b3:99:
9a:4d:c1:10:b2:8b:e4:73:9d:22:73:96:ea:8f:d5:
31:46:6f:73:ba:55:45:2b:c6:a6:37:1d:45:7a:49:
3d:3c:57:72:64:75:ca:6b:6f:7c:fa:00:ac:8f:f8:
b6:51:7f:74:06:63:96:ab:f2:f8:b2:ba:59:3b:64:
c3:3d:6c:5d:89:97:90:7c:f6:e7:cd:b1:35:b3:f4:
82:4e:22:ae:57:70:31:87:84:4e:07:e4:1b:42:f8:
82:3e:e9:11:13:00:a1:81:e0:3e:89:2c:02:71:48:
b3:34:be:b1:58:5b:e0:b6:21:4a:05:37:cd:38:d6:
9b:db:00:fc:05:fa:fb:62:79:55:d5:a5:93:55:c7:
0a:ae:fc:fd:d0:58:6c:12:c9:b8:36:ec:16:d8:c5:
11:78:ca:86:9a:7a:40:ba:23:4b:3e:e1:70:8e:ff:
ef:73:ff:b5:01:86:e2:9e:5e:d2:57:84:e3:49:a5:
a9:7c:91:84:99:4e:8e:cc:e6:1a:be:03:2e:3b:fe:
cc:4b:60:8b:b5:fe:95:c7:be:7d:6a:d8:40:26:5f:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:22:83:7B:2B:78:BE:41:12:BE:26:EC:1E:34:D7:B0:EA:BA:77
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/DkAig3sreL5BEr4m7B4017Dqunc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.232.0/24
91.211.234.0/23
185.108.188.0/24
185.108.191.0/24
195.225.127.0/24
IPv6:
2a03:d180::/32
Signature Algorithm: sha256WithRSAEncryption
aa:b5:99:e5:15:28:ce:7e:4c:7b:01:36:a0:98:7c:18:32:b3:
41:70:4e:6e:23:b0:72:eb:52:04:bd:57:80:33:12:f9:f6:e1:
25:6d:d2:17:31:2f:1a:2b:1c:75:2d:a1:8e:bb:c0:4e:5d:d1:
28:0d:86:5c:61:b8:95:4d:4e:74:83:f8:a6:7c:1d:66:85:2d:
eb:c0:88:d7:cc:fa:fe:af:8a:3c:b6:10:f7:86:ce:60:23:80:
84:03:66:68:09:74:64:d0:9c:c6:6e:9b:e0:c1:a6:49:7d:89:
28:79:1f:a2:e9:58:e9:18:db:f6:b4:be:51:80:fd:8e:cd:3a:
f7:44:e4:88:2c:17:77:c1:61:ad:b8:d7:72:02:52:f9:0f:9f:
8b:03:af:48:33:ac:ba:2d:c8:03:c7:62:0e:d0:ee:d7:43:c6:
04:3d:73:b9:51:d8:49:ae:fd:fd:2d:dd:bd:59:7c:d7:0c:8e:
6c:f9:39:c2:02:97:d7:b4:db:1b:61:2d:92:b6:d0:06:34:dc:
69:99:60:13:37:36:20:82:bb:81:ac:d2:b2:85:37:40:28:ed:
8f:2b:0d:db:59:40:e8:c6:d1:f1:50:d4:54:7c:5d:d6:d7:d4:
12:6a:32:ac:88:92:65:c3:27:5a:1b:f4:a7:13:3d:37:55:47:
40:bf:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:33 2025 by rpki-client on console.sobornost.net