Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/XMfgeWsouW7zDItYh1JZ2jjj45k.roa
File: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (raw, json)
Hash identifier: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=
Subject key identifier: 5C:C7:E0:79:6B:28:B9:6E:F3:0C:8B:58:87:52:59:DA:38:E3:E3:99
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C36928D65BBECB24B12EA633A488D
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/XMfgeWsouW7zDItYh1JZ2jjj45k.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202931
IP address blocks: 79.140.173.0/24 maxlen: 24
80.245.93.0/24 maxlen: 24
80.245.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:36:92:8d:65:bb:ec:b2:4b:12:ea:63:3a:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc7e0796b28b96ef30c8b58875259da38e3e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:1a:60:29:d4:b4:56:8d:3b:96:b9:6e:96:
a0:7d:6b:4d:46:46:a3:cb:40:ba:be:c7:6a:05:c9:
fa:75:2c:98:8b:61:1b:fb:6f:b5:ee:a0:70:bd:01:
f5:b0:07:04:55:d3:60:1c:4b:34:64:09:07:cc:bf:
c9:6e:7f:70:19:bc:0d:53:d8:ca:f1:cd:70:7c:58:
dd:7a:99:36:b9:46:da:94:11:8b:d2:5b:c5:ed:63:
60:5b:38:19:b6:c2:d7:b4:3c:17:71:cd:e9:4b:9b:
86:ed:f0:4b:ca:cf:de:8b:89:87:c6:2f:0e:4d:fd:
66:6b:9b:b2:e8:34:99:6f:20:46:d2:a7:73:71:a3:
cb:24:a4:5b:c2:9f:e7:c0:b1:33:a9:85:d2:04:36:
e7:f7:fd:1e:b7:3b:c5:84:18:66:c8:34:68:b7:57:
ed:3f:64:e8:72:fb:52:e0:b8:3b:96:82:95:56:e7:
21:74:d3:11:f5:09:e9:ce:bc:86:e6:7b:9f:9c:05:
bc:44:24:b2:1a:97:62:f1:81:f0:99:30:53:a4:bb:
31:d5:1f:fc:74:ee:56:eb:df:28:6d:a6:7b:e2:04:
4a:c7:27:51:56:3b:0f:32:16:61:48:a9:95:d1:2f:
e3:71:f9:f6:3e:67:be:8b:61:6c:1d:e6:92:55:e7:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:E0:79:6B:28:B9:6E:F3:0C:8B:58:87:52:59:DA:38:E3:E3:99
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/XMfgeWsouW7zDItYh1JZ2jjj45k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.173.0/24
80.245.93.0/24
80.245.95.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9d:de:a7:eb:d8:3a:59:a2:6a:ff:38:26:48:c7:6a:39:56:
d0:3c:dc:a2:72:98:d3:d0:e7:c5:cf:0a:4d:b6:44:24:8e:b9:
5c:2d:7d:e0:30:d2:b0:46:12:fd:00:aa:83:d5:e4:ff:15:54:
91:d3:be:e1:7e:b5:e2:65:0f:7b:24:e1:26:5c:b1:e0:5c:a8:
1b:c0:2e:29:97:10:19:06:cc:7c:99:60:63:48:4f:93:4e:d6:
22:3d:b7:88:42:af:65:cc:48:17:66:c2:ce:32:35:4b:e5:89:
3a:39:58:04:69:16:61:ad:a3:71:ad:64:64:6c:af:4d:89:0b:
31:af:3e:06:09:51:77:c1:7b:c7:87:48:53:d8:40:db:50:7c:
da:ae:3b:b4:fe:ce:ce:6e:f7:06:5d:63:ae:b5:7a:50:51:69:
c3:95:fa:20:13:9a:1b:7d:39:b0:fa:f8:34:a5:9d:44:75:76:
a3:d1:48:2f:0d:60:4b:88:40:cf:e7:4f:ce:6c:0f:a3:5b:66:
c2:c0:2f:9f:29:02:5b:e3:c7:23:46:ae:d4:8b:a4:8f:be:90:
86:2c:46:6e:38:97:c8:ea:44:a1:01:36:65:1c:cb:f2:d8:9b:
53:4b:62:8b:ab:67:a8:d8:34:58:c4:8a:16:3c:13:48:a0:09:
58:f1:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net