Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/DParUqo8DE87ESuzisophBH8ysw.roa
File: DParUqo8DE87ESuzisophBH8ysw.roa (raw, json)
Hash identifier: SP+jpEqMGlaWP68HJd98HBu5bs/EHf5ieFYZ3roDP+s=
Subject key identifier: 0C:F6:AB:52:AA:3C:0C:4F:3B:11:2B:B3:8A:CA:29:84:11:FC:CA:CC
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 01950CFFC270872290222D1D5ABA64F5415C
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/DParUqo8DE87ESuzisophBH8ysw.roa
Signing time: Sun 16 Feb 2025 04:24:02 +0000
ROA not before: Sun 16 Feb 2025 04:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 24
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 48
2a0e:5b00:412::/48 maxlen: 48
2a0e:5b00:420::/48 maxlen: 48
2a0e:5b00:500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0c:ff:c2:70:87:22:90:22:2d:1d:5a:ba:64:f5:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Feb 16 04:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf6ab52aa3c0c4f3b112bb38aca298411fccacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:29:eb:65:cb:dc:ae:c5:46:34:3a:ce:90:
85:a3:ba:c7:92:0f:81:89:ec:81:40:dc:bd:3b:c2:
7b:92:7a:c1:c2:67:37:4c:3f:2c:ec:e5:18:82:c7:
16:9b:f4:78:47:de:4a:b4:db:2a:53:70:c5:95:e0:
ea:a8:17:6f:b5:6c:e9:34:0c:40:7e:34:ef:68:dd:
73:87:fb:c8:b2:1b:03:40:78:89:da:c9:5b:53:b7:
f1:7a:8f:48:6e:7f:de:17:1d:f0:d5:79:ea:d4:75:
50:a3:da:e0:0e:d0:37:e0:2a:4c:49:cc:cd:c6:7b:
04:35:a1:ba:66:48:fa:89:b1:4a:1b:80:9f:c6:a8:
5c:b8:94:82:cb:d2:5b:b2:5f:41:c5:f0:49:05:e9:
29:1f:7b:ed:85:13:bb:10:ae:38:71:33:94:4b:50:
4a:45:44:9f:a1:5e:77:87:5c:06:66:f3:4f:75:0b:
96:c5:bb:f1:d2:f5:50:ad:43:e4:02:34:4d:96:d4:
6b:85:4d:99:5f:d5:b6:05:21:ca:c2:6c:eb:98:94:
f5:cb:f2:9e:fd:28:8a:9b:9a:17:b9:f1:54:1b:03:
02:46:8b:85:ea:f3:5b:d8:c6:6b:bc:f1:4d:be:c5:
5e:a9:22:b8:2c:3c:a5:f5:37:d3:5f:11:84:7f:48:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:AB:52:AA:3C:0C:4F:3B:11:2B:B3:8A:CA:29:84:11:FC:CA:CC
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/DParUqo8DE87ESuzisophBH8ysw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
49:e6:d7:82:dd:66:12:14:47:dd:2c:87:b1:84:77:d6:4a:19:
97:ee:de:db:26:11:6d:27:d2:78:66:18:01:55:a7:04:a8:42:
10:e6:85:1e:d0:37:50:3f:d3:3b:d7:e0:c8:43:af:f0:41:d4:
b8:78:60:ee:57:be:d5:ca:8b:75:0e:52:f3:ee:dc:5d:b2:da:
6b:ef:17:18:88:c4:7f:e8:a5:2c:a0:3b:1b:68:66:f5:50:96:
ed:c1:76:19:d3:51:62:ce:4b:2f:0e:6c:c1:ef:64:06:3a:f7:
0f:c0:07:ae:cb:b8:43:64:6b:13:ab:31:19:6a:44:a5:54:72:
6b:52:fb:d2:11:c0:d6:ba:3d:f1:0e:99:9f:fc:74:8a:80:21:
e3:01:73:76:23:cd:2d:f9:78:6c:f7:64:9b:a2:29:76:fb:5d:
cb:c3:87:a8:5d:aa:fb:48:4c:b4:05:4a:6c:9e:91:31:34:16:
55:ce:43:45:a3:18:a0:d6:21:72:dd:85:cf:10:ae:fb:45:4c:
72:cd:d6:6d:30:76:dc:86:b1:e5:82:77:82:bd:1a:44:4f:a6:
52:78:55:5f:54:7d:50:41:e8:fa:4d:d9:70:c3:c3:3d:18:9c:
80:f8:69:8e:30:7d:fb:fc:d2:b0:b2:47:f5:70:23:4e:78:25:
76:8e:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:55 2025 by rpki-client on console.sobornost.net