Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/6jmBqQ69ucquob5LYoU8XO0aoaM.roa
File: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (raw, json)
Hash identifier: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=
Subject key identifier: EA:39:81:A9:0E:BD:B9:CA:AE:A1:BE:4B:62:85:3C:5C:ED:1A:A1:A3
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01941F8C54815023C5D39F912198D2FD3DAA
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/6jmBqQ69ucquob5LYoU8XO0aoaM.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15426
IP address blocks: 89.255.17.0/24 maxlen: 24
185.157.60.0/24 maxlen: 24
185.157.61.0/24 maxlen: 24
185.157.62.0/24 maxlen: 24
185.157.63.0/24 maxlen: 24
217.67.239.0/24 maxlen: 24
2a03:1a00::/32 maxlen: 32
2a07:a380::/29 maxlen: 29
2a0a:1880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:81:50:23:c5:d3:9f:91:21:98:d2:fd:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea3981a90ebdb9caaea1be4b62853c5ced1aa1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:83:38:23:12:6c:3f:81:9b:71:b9:25:4d:
25:77:82:f9:51:60:3f:99:5b:fa:d1:b5:1d:f6:53:
c4:ef:5b:3c:a6:5a:4d:25:76:14:81:47:83:d1:d5:
55:de:ae:b2:b5:0b:3a:ed:4a:c5:6b:0e:59:fd:d9:
54:61:b2:55:08:fb:8f:05:ba:6f:42:a1:bb:e2:c2:
3e:06:80:ae:d1:96:4d:6b:80:e0:81:70:04:92:1c:
e6:59:c5:7d:87:d7:f5:2d:26:54:15:39:a3:50:5d:
73:b4:bb:7b:e1:78:6f:29:07:4c:47:23:9e:5a:54:
1a:8f:fd:a4:da:81:4b:10:11:df:c9:d9:f4:95:36:
ac:5f:a3:f0:f4:65:f4:95:a9:69:c6:ea:aa:95:04:
bb:bb:a3:64:bf:64:a5:45:e4:49:1d:11:1d:b8:74:
6a:49:ab:8c:64:21:52:99:91:2b:89:f8:fe:15:d2:
1f:b9:a6:83:97:6a:3e:39:3a:e7:34:86:66:90:56:
73:cc:23:ed:0a:1e:e2:91:76:bd:2d:8e:fc:44:0f:
51:29:98:47:9f:de:26:28:ca:ae:51:50:2e:d4:ba:
64:03:28:5d:89:e8:34:fc:c0:a4:d8:29:57:44:63:
12:6d:2d:cc:63:e7:d0:f5:53:be:24:f3:a0:93:57:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:81:A9:0E:BD:B9:CA:AE:A1:BE:4B:62:85:3C:5C:ED:1A:A1:A3
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/6jmBqQ69ucquob5LYoU8XO0aoaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.17.0/24
185.157.60.0/22
217.67.239.0/24
IPv6:
2a03:1a00::/32
2a07:a380::/29
2a0a:1880::/29
Signature Algorithm: sha256WithRSAEncryption
38:aa:ab:47:3d:60:44:de:ca:d3:7e:76:d4:af:04:e3:04:8a:
a1:02:86:9f:5d:6f:cc:6f:0e:f2:d3:42:8f:9d:28:26:99:25:
fe:c3:6c:a0:77:22:89:7d:26:1a:8f:0e:e4:23:1d:9f:1e:5f:
a2:e7:98:a4:46:52:71:77:a8:6b:50:e5:13:17:5d:8d:5c:89:
61:4d:ba:7b:e9:da:90:5e:61:08:b5:bc:d3:8f:8c:ee:44:04:
f2:c4:c3:58:ba:25:7c:2a:d4:a3:eb:27:31:50:ed:c9:5d:99:
d1:72:3e:93:ed:b4:59:41:98:4b:4d:29:11:a3:90:f9:88:23:
15:d7:43:ab:fe:39:e4:18:28:23:7a:d4:aa:fd:9f:26:dd:bf:
aa:a1:86:f2:07:f7:7b:fa:f6:15:a2:08:0c:f5:6d:5c:ff:bf:
12:ff:c5:2e:64:05:04:1c:7d:21:50:c9:7b:db:5e:c0:77:93:
4a:b0:d7:62:68:22:76:70:cb:19:2c:70:64:bb:11:8d:3a:dd:
2b:db:55:bf:0c:04:db:38:3f:4b:0e:f5:dc:3c:23:23:30:0a:
45:23:87:99:37:2b:51:fa:5a:5d:23:d6:3d:3a:71:6f:97:c6:
d2:0b:86:8a:51:e7:4f:f1:2b:fa:e0:83:40:9f:20:36:9e:4e:
39:0f:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net