Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/G_jnTl1eK7xC8O1O2yZluiFVS1E.roa
File: G_jnTl1eK7xC8O1O2yZluiFVS1E.roa (raw, json)
Hash identifier: Lw3iw81MOo/oRf5CsuBGGW+csNRrpzDvPpdhaPVhcv0=
Subject key identifier: 1B:F8:E7:4E:5D:5E:2B:BC:42:F0:ED:4E:DB:26:65:BA:21:55:4B:51
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019425213F3D3524F3530B469EB193B6E010
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/G_jnTl1eK7xC8O1O2yZluiFVS1E.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3f:3d:35:24:f3:53:0b:46:9e:b1:93:b6:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf8e74e5d5e2bbc42f0ed4edb2665ba21554b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:d1:07:7e:10:d0:31:c0:dd:cc:37:45:f8:
dd:d1:e4:f6:c4:39:c1:ff:5e:9c:2b:8b:4a:98:8a:
ed:4a:6e:e7:0b:ba:ed:9b:3a:1c:d8:7e:af:50:0f:
cc:82:cf:c2:be:10:38:2b:26:3b:a7:89:22:db:03:
4e:0c:ab:ea:9d:4f:04:f3:f4:50:6f:49:77:e3:8d:
19:a9:36:7d:5c:98:c3:50:c6:69:98:75:3b:bf:06:
5a:1f:13:6c:73:10:c2:ba:01:f6:1b:5a:91:2b:74:
16:1c:0a:fb:82:5d:fe:32:bc:bc:e7:7a:ef:07:d2:
c0:9c:2e:f8:d8:b9:0f:9d:b1:97:5e:f8:76:fc:41:
63:b8:6a:29:7b:67:6e:48:0d:ea:fd:b3:50:8e:8c:
62:e8:2e:e2:70:1e:52:fb:fb:ac:ff:83:46:a5:34:
cb:e8:38:eb:4a:66:9e:2b:2e:17:ec:61:ee:40:81:
ec:43:c8:57:be:72:a3:18:c2:92:71:fa:41:32:26:
ba:0b:ef:b0:cc:35:b9:1f:8d:51:fc:03:c0:92:06:
fd:ea:ee:63:c0:70:b5:ac:b4:97:ce:60:68:b7:af:
27:ad:15:a8:b4:2b:7c:20:9e:4f:17:e3:ef:8c:81:
18:40:80:aa:a1:c9:bc:8f:e9:20:3a:48:3d:d8:d4:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:E7:4E:5D:5E:2B:BC:42:F0:ED:4E:DB:26:65:BA:21:55:4B:51
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/G_jnTl1eK7xC8O1O2yZluiFVS1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
80.252.120.0/22
103.110.208.0/22
109.224.248.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.138.0/24
195.167.181.0-195.167.182.255
209.42.4.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
43:aa:28:ea:78:3d:d3:2f:5b:68:f9:1f:a6:44:02:8d:f1:84:
f4:64:bb:04:93:4c:c3:12:b0:ef:78:60:c7:3a:03:18:55:93:
73:8d:73:a8:27:48:a2:ef:25:21:4a:bf:1a:17:24:56:d3:48:
11:96:84:fd:3e:86:3d:a3:8e:d4:f6:2f:e9:b2:ed:3b:6d:e0:
2c:5f:33:23:c8:b2:80:60:8b:7b:f6:bc:f5:41:2a:4e:ca:2c:
32:bb:0e:11:37:bf:1d:97:83:94:12:7e:46:ab:c5:53:c4:80:
dd:fa:c4:67:94:a0:2c:cc:8c:e7:a8:b3:7b:96:d6:44:7f:34:
58:53:6a:e3:fd:61:3e:b1:38:67:45:16:5f:fd:cc:1d:5e:c0:
31:a2:1c:5c:9a:5d:3c:bb:24:4c:fb:53:f3:1b:3a:b6:46:06:
e4:8c:8d:78:51:66:98:54:2c:ec:ea:aa:07:21:8f:b3:2f:37:
0a:d4:07:68:ca:7b:7e:e7:b9:35:43:2f:39:d2:be:c5:5d:70:
59:91:32:64:ef:bb:bf:39:c0:3b:41:d2:49:89:35:b4:01:49:
b7:2b:9d:cb:86:de:68:ac:f4:2c:98:7a:85:de:47:be:43:bf:
9f:52:cf:37:0d:60:4b:0e:a0:78:7d:76:61:f1:da:74:10:71:
dc:04:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:09 2025 by rpki-client on console.sobornost.net