Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/5otqJznFN06_a5lb9QnpMCQFqQI.roa
File: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (raw, json)
Hash identifier: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=
Subject key identifier: E6:8B:6A:27:39:C5:37:4E:BF:6B:99:5B:F5:09:E9:30:24:05:A9:02
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019421444AF698B8790AE4E9ABAD15BB5834
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/5otqJznFN06_a5lb9QnpMCQFqQI.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41820
IP address blocks: 31.41.88.0/21 maxlen: 21
31.41.88.0/24 maxlen: 24
31.41.89.0/24 maxlen: 24
31.41.90.0/24 maxlen: 24
31.41.91.0/24 maxlen: 24
31.41.92.0/24 maxlen: 24
31.41.93.0/24 maxlen: 24
31.41.94.0/24 maxlen: 24
31.41.95.0/24 maxlen: 24
91.195.172.0/23 maxlen: 23
91.195.172.0/24 maxlen: 24
91.195.173.0/24 maxlen: 24
176.118.40.0/21 maxlen: 21
176.118.40.0/24 maxlen: 24
176.118.41.0/24 maxlen: 24
176.118.42.0/24 maxlen: 24
176.118.43.0/24 maxlen: 24
176.118.44.0/24 maxlen: 24
176.118.45.0/24 maxlen: 24
176.118.46.0/24 maxlen: 24
176.118.47.0/24 maxlen: 24
193.34.172.0/23 maxlen: 23
193.34.172.0/24 maxlen: 24
193.34.173.0/24 maxlen: 24
194.39.224.0/22 maxlen: 22
194.39.224.0/24 maxlen: 24
194.39.225.0/24 maxlen: 24
194.39.226.0/24 maxlen: 24
194.39.227.0/24 maxlen: 24
2a0f:6680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:f6:98:b8:79:0a:e4:e9:ab:ad:15:bb:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e68b6a2739c5374ebf6b995bf509e9302405a902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:97:aa:a9:95:3d:19:9b:6b:66:ea:ac:95:
36:25:87:10:30:e6:2e:40:76:d5:72:eb:f3:86:56:
6d:92:51:f1:ad:6a:a2:be:6d:ea:9f:ae:40:38:6c:
50:38:fa:65:e7:3d:2f:29:ee:2f:9b:83:46:15:65:
93:a2:b3:eb:1d:9e:ae:4e:51:5b:3c:e9:67:45:34:
25:ac:d1:4a:93:04:4d:21:40:2b:96:cf:ff:3e:f5:
2a:d3:f5:a8:ab:ee:f2:8c:d8:a8:7c:e3:91:8a:9b:
da:fe:2d:74:ca:61:ad:e3:5f:e3:84:d3:4c:ee:af:
1e:8a:40:9c:e4:c1:72:0e:50:94:6a:38:15:77:8c:
3f:55:4d:5d:22:10:f2:ff:e4:8b:76:d1:3b:5a:5d:
9b:99:3c:1d:9a:c6:ca:1e:05:8d:83:64:6c:c0:71:
fc:39:af:b4:45:23:d6:28:c1:c0:57:82:1d:5b:ca:
97:5f:a2:22:99:4b:96:d8:80:d6:a0:0a:0e:4e:f2:
d7:df:fd:c8:71:b3:05:be:3e:c3:7c:a8:37:17:05:
9b:84:4f:27:8a:c4:8d:e5:c9:25:59:4f:4a:cd:bc:
ef:3d:13:cb:d9:7d:b8:ce:3b:03:92:50:15:7a:5a:
7d:4f:a6:1a:1d:90:3b:0f:0e:b8:db:7e:47:e4:d4:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:6A:27:39:C5:37:4E:BF:6B:99:5B:F5:09:E9:30:24:05:A9:02
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/5otqJznFN06_a5lb9QnpMCQFqQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.88.0/21
91.195.172.0/23
176.118.40.0/21
193.34.172.0/23
194.39.224.0/22
IPv6:
2a0f:6680::/29
Signature Algorithm: sha256WithRSAEncryption
68:27:1b:c8:30:56:5c:f9:cd:11:ec:5d:0d:8a:e8:6a:c2:43:
d3:93:bc:c1:ee:57:fc:75:1b:74:c3:9b:9c:de:bf:e3:d2:93:
96:a1:79:34:aa:1f:84:af:3c:eb:5c:de:39:12:67:c3:07:a1:
c8:57:da:e6:51:0b:a5:1a:18:0f:fd:30:af:ee:db:4b:71:da:
2e:fb:69:17:7c:12:5b:db:d2:41:cd:ea:93:3b:07:ab:98:ab:
3e:04:3e:62:98:e7:31:13:8c:c8:39:76:f6:99:ae:f7:9d:2b:
4d:99:d6:21:6c:b8:0b:34:a6:a5:5a:ff:05:0b:7e:17:eb:d0:
7c:cb:83:7a:99:fc:9e:4f:f9:66:e7:f9:8d:b8:f7:e3:73:b2:
df:11:58:7b:25:5f:48:8c:43:75:2e:58:fb:ca:5c:52:cc:e5:
7e:70:7e:d1:8c:2b:7d:c7:64:08:a2:41:46:66:a3:70:f8:8f:
54:be:c7:ab:8c:b3:db:3d:94:0a:79:b1:26:34:a4:89:61:99:
4e:08:f5:fc:c8:1e:e5:4d:13:71:f4:24:73:7f:1c:2d:03:b0:
89:37:a6:a2:91:ea:ff:83:7c:c9:4c:41:33:19:5f:ca:02:52:
10:e8:20:9b:00:69:2e:da:c1:3b:27:27:5d:1c:5a:1f:92:ba:
77:8a:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net