Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa
File: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (raw, json)
Hash identifier: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=
Subject key identifier: 4D:FF:BB:91:E8:BA:5B:C1:9B:D7:24:E5:CE:D0:BE:CF:B8:6A:90:63
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 019427479FF709E85DE75E7086EF9AA1EE3A
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47586
IP address blocks: 37.77.108.0/22 maxlen: 24
80.249.204.0/22 maxlen: 24
87.239.0.0/21 maxlen: 24
91.214.56.0/22 maxlen: 24
93.190.16.0/21 maxlen: 24
109.235.184.0/21 maxlen: 24
146.19.211.0/24 maxlen: 24
158.58.128.0/21 maxlen: 24
185.30.116.0/22 maxlen: 24
193.0.148.0/22 maxlen: 24
194.114.128.0/22 maxlen: 24
195.64.156.0/23 maxlen: 24
2a00:b160::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9f:f7:09:e8:5d:e7:5e:70:86:ef:9a:a1:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dffbb91e8ba5bc19bd724e5ced0becfb86a9063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:7a:7a:f8:9b:d9:80:c4:ba:fd:83:66:b5:
90:16:0d:a6:51:f5:59:cf:3d:e2:d9:89:ad:93:1b:
9f:08:12:51:4f:d5:22:29:ef:2e:04:39:c1:d3:3c:
d4:b7:88:e1:f5:8f:86:f6:00:05:4c:47:99:03:44:
be:53:dd:ed:c6:b9:c6:b3:fb:97:03:4f:9f:62:67:
2b:e9:e1:f8:e7:0a:03:61:ed:d3:a1:01:4d:a4:b3:
fc:68:18:76:fd:7f:d9:de:ac:b1:ba:9d:03:13:b1:
dc:0f:7c:3f:7c:47:7c:47:7e:1e:2a:17:e9:da:54:
ba:9e:6c:01:c4:d8:44:07:1c:d4:d5:fe:06:fa:87:
e1:20:40:2d:be:65:f5:d7:69:3f:d7:26:73:74:4f:
07:43:5f:21:16:62:8b:f0:5d:97:6a:03:7f:ab:c0:
90:49:16:43:44:e9:2e:a7:62:61:1b:bb:af:0e:ce:
b0:42:33:ea:ca:9e:97:a8:81:ca:20:b3:04:7d:91:
b2:ab:22:79:a2:27:08:a2:d5:61:f3:5c:fe:4c:7a:
cb:57:71:77:d8:8e:ba:b2:6c:87:90:7f:e2:62:30:
7c:59:13:08:74:fa:0a:0d:27:88:92:5d:15:e6:4e:
ee:51:eb:da:dc:e1:07:3c:de:4c:01:95:ab:18:c4:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:BB:91:E8:BA:5B:C1:9B:D7:24:E5:CE:D0:BE:CF:B8:6A:90:63
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.108.0/22
80.249.204.0/22
87.239.0.0/21
91.214.56.0/22
93.190.16.0/21
109.235.184.0/21
146.19.211.0/24
158.58.128.0/21
185.30.116.0/22
193.0.148.0/22
194.114.128.0/22
195.64.156.0/23
IPv6:
2a00:b160::/32
Signature Algorithm: sha256WithRSAEncryption
ac:a2:63:ce:ca:65:b2:9b:32:69:33:b8:24:32:c8:e6:5d:5d:
90:f4:d7:80:95:59:7b:d6:48:69:fc:29:cf:00:5c:8d:f6:aa:
b1:15:3b:95:eb:2a:3f:4b:78:5f:0b:8b:d5:18:42:21:8b:c3:
fd:c2:9c:d5:24:35:da:85:76:b4:ba:4c:83:77:ed:bf:48:21:
01:c6:53:2d:e0:59:90:bb:f6:05:52:3a:8b:62:0a:e8:36:50:
a8:38:b4:67:ab:2e:b9:99:e3:eb:0e:47:c9:4d:13:aa:cc:32:
a0:d5:70:35:4b:85:c2:3e:cd:8f:63:12:98:de:ef:75:93:8b:
07:f6:47:57:d0:46:3c:2e:d8:41:45:f7:91:e5:df:5b:3e:cc:
98:ca:27:ae:87:7d:35:31:30:49:63:98:35:4a:ba:d1:91:0b:
17:e6:3a:4b:ac:bb:56:83:d0:ed:19:f4:af:51:65:b7:54:25:
92:87:0b:5c:f3:18:48:b2:cd:a5:7b:5c:c9:4b:e8:51:0b:97:
65:8d:23:fc:ac:c4:9a:ff:71:55:22:94:d5:c0:fc:cd:43:fb:
0b:f5:c5:b7:62:1f:18:bc:d8:de:c9:91:b8:fe:44:bc:37:00:
28:2a:86:18:9e:7e:1d:4e:80:c6:01:e2:3f:fd:e9:2c:6e:94:
fd:8e:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net