Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa
File: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (raw, json)
Hash identifier: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=
Subject key identifier: 24:7E:0F:C3:A9:3D:6D:6F:84:5E:98:A9:13:61:B2:68:F9:97:75:3D
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 0194228D7DBB398CE47DC9F2F06BB163AF5E
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47870
IP address blocks: 93.174.168.0/24 maxlen: 24
93.174.169.0/24 maxlen: 24
93.174.170.0/24 maxlen: 24
93.174.171.0/24 maxlen: 24
93.174.172.0/24 maxlen: 24
93.174.173.0/24 maxlen: 24
2a03:f400:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7d:bb:39:8c:e4:7d:c9:f2:f0:6b:b1:63:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=247e0fc3a93d6d6f845e98a91361b268f997753d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:1a:c3:fa:05:88:69:b3:36:fe:5b:ae:3b:
63:b0:a1:b6:13:8b:c6:c2:af:61:4f:00:2c:17:6a:
cf:83:ab:a7:cc:18:5a:61:2d:04:b6:0a:57:ca:85:
b7:51:b7:3a:8b:4e:29:bf:dd:22:37:f1:7e:ba:77:
12:1e:90:8a:35:1b:39:87:0f:f8:ec:04:23:03:57:
7b:4e:50:80:07:b4:65:90:0c:67:3d:f9:81:c2:fb:
40:8a:69:a6:44:d3:52:62:06:66:72:74:1b:52:0e:
97:43:4f:d0:9f:9e:19:95:44:8e:d2:71:36:f4:14:
fa:54:8f:4b:1a:98:94:c0:e1:94:9c:6d:84:af:37:
1e:59:ae:a3:7e:87:ee:cf:be:b1:11:97:79:f8:50:
d1:46:41:14:6a:c7:34:00:76:37:2d:31:d6:fb:fc:
01:0a:ce:69:00:f3:0c:2a:fc:31:39:b3:ee:0b:cf:
7f:aa:70:60:e5:bd:3a:6b:25:a6:97:52:03:99:98:
ca:30:4b:c7:64:37:ed:16:14:76:bf:40:aa:07:35:
d2:57:a9:44:c3:1e:3b:01:72:f7:5d:e2:52:32:92:
18:fd:f8:18:22:50:22:1a:3e:2e:c9:5a:a6:65:62:
af:46:9f:8e:d0:ef:a9:c4:f1:6b:02:e6:99:79:a7:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:0F:C3:A9:3D:6D:6F:84:5E:98:A9:13:61:B2:68:F9:97:75:3D
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.168.0-93.174.173.255
IPv6:
2a03:f400:3::/48
Signature Algorithm: sha256WithRSAEncryption
08:a9:0a:f4:ab:63:e4:ee:89:10:4d:5a:9d:80:34:35:18:25:
7b:1b:4e:b9:b6:9a:0b:d3:74:d5:68:b9:45:4d:d3:88:f3:e7:
9a:82:a9:9b:cf:5d:d1:06:89:2a:c9:e0:6a:03:f0:16:25:1f:
52:0a:55:bc:9f:48:cd:98:46:f1:66:d3:f6:1a:3d:50:7c:60:
c0:cf:b6:be:0c:18:02:60:9a:41:b2:56:09:51:3e:91:d2:82:
df:6a:d5:e4:2b:4e:46:02:90:b4:79:4f:48:f5:3c:e8:a7:dc:
14:f9:1c:b6:c6:e9:02:a1:ca:e8:e0:f2:67:bf:3a:a7:2d:40:
d4:92:55:13:62:88:db:4d:76:4c:20:bf:9f:a1:ff:e8:1f:43:
a0:28:a3:a2:0d:7d:b6:6f:70:ae:03:de:7c:ed:d2:e6:d2:8a:
7d:a4:64:bb:a6:9d:1c:0e:8a:5a:0f:07:30:26:0c:61:db:40:
e3:e4:56:4d:dd:4d:fa:cf:27:fb:61:77:a6:7c:35:25:1e:84:
7e:b1:67:a1:f2:8a:af:23:a0:52:d1:d9:33:90:31:fd:68:a2:
42:ac:9a:cb:c7:b3:48:c9:31:26:03:87:47:95:6f:d9:63:79:
27:fb:98:b8:73:40:40:6b:05:38:ad:dc:eb:66:81:b4:e0:c6:
df:8d:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net