Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/c_qSQSef9yQq7ko-zsOrz05POQI.roa
File: c_qSQSef9yQq7ko-zsOrz05POQI.roa (raw, json)
Hash identifier: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=
Subject key identifier: 73:FA:92:41:27:9F:F7:24:2A:EE:4A:3E:CE:C3:AB:CF:4E:4F:39:02
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019423D6A9D00539E88F773D2A6A7904CC69
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/c_qSQSef9yQq7ko-zsOrz05POQI.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30889
IP address blocks: 45.145.124.0/22 maxlen: 24
79.98.96.0/21 maxlen: 24
185.15.128.0/22 maxlen: 24
185.95.120.0/22 maxlen: 24
185.149.8.0/22 maxlen: 24
185.172.16.0/22 maxlen: 24
185.196.248.0/22 maxlen: 24
193.27.194.0/23 maxlen: 24
194.177.32.0/19 maxlen: 24
195.214.240.0/21 maxlen: 24
2a01:6d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a9:d0:05:39:e8:8f:77:3d:2a:6a:79:04:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fa9241279ff7242aee4a3ecec3abcf4e4f3902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:0b:2e:db:24:8d:e1:c5:d8:e3:30:02:16:
d1:cb:1a:25:c1:44:f1:27:60:29:0b:22:24:3d:a1:
12:49:72:c4:de:79:e4:12:2b:ce:ae:cb:26:f0:54:
bb:c5:81:90:87:48:70:ef:3b:d3:b2:90:65:e6:93:
10:98:a5:59:79:dd:12:a2:ad:8a:2c:35:9d:dd:ef:
76:9f:26:26:07:c7:49:2d:1b:f7:b4:69:21:7a:70:
92:91:d7:86:04:b8:a1:46:b0:e9:4b:23:26:6d:45:
05:c5:9a:dc:a2:ba:68:5a:e7:a5:9d:4e:6a:be:5a:
0a:63:0c:b8:79:38:d8:22:a5:25:56:52:2a:77:d2:
e7:c7:71:b5:df:8a:d0:39:bf:49:16:0f:ca:c4:a7:
d6:aa:8e:03:1f:c3:da:db:19:7e:00:d9:38:82:e6:
d2:44:6c:be:2e:fe:ee:19:28:82:c1:11:95:2d:fa:
ba:eb:42:41:ef:a7:2a:5b:06:ff:dc:7f:ef:00:e1:
8c:b7:7f:2e:06:b9:c0:e4:ec:c0:48:37:df:b9:12:
a0:0a:a6:61:9b:58:e1:00:4c:9f:36:82:b3:a9:88:
81:2e:e0:c4:11:f9:e7:22:ae:97:22:c7:2d:8c:c4:
81:b5:55:34:7a:92:3b:ab:ed:d4:4b:32:c3:af:94:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:92:41:27:9F:F7:24:2A:EE:4A:3E:CE:C3:AB:CF:4E:4F:39:02
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/c_qSQSef9yQq7ko-zsOrz05POQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.124.0/22
79.98.96.0/21
185.15.128.0/22
185.95.120.0/22
185.149.8.0/22
185.172.16.0/22
185.196.248.0/22
193.27.194.0/23
194.177.32.0/19
195.214.240.0/21
IPv6:
2a01:6d8::/32
Signature Algorithm: sha256WithRSAEncryption
44:52:97:46:4f:53:28:f6:46:90:1f:33:ae:54:37:bb:b4:6f:
7a:ea:09:18:27:ba:e2:b8:f6:ec:f7:c3:b0:3e:e1:af:47:d9:
57:7f:ae:15:66:56:3d:91:ee:7a:21:51:ef:87:d0:9f:aa:ea:
c2:91:06:80:ad:a8:98:94:15:59:e3:e4:ab:d0:a4:af:a8:b2:
85:56:57:c0:3f:ae:21:74:02:61:a8:e9:a0:21:3d:ad:a8:ea:
70:2a:59:ff:1e:85:34:04:66:2c:2c:07:62:e4:5b:61:2e:06:
0a:40:ed:c2:a7:de:9e:ea:fb:23:4d:eb:bb:c5:a7:ac:50:d4:
01:0b:3f:1d:59:ea:ef:1d:28:7c:bc:d8:77:a0:4b:0d:8b:dc:
1c:f4:64:51:7b:b8:0e:c2:15:f1:b2:ec:59:86:b5:d0:17:fe:
cc:0c:66:55:ef:76:dc:e6:c5:12:c7:e9:5e:e5:f0:bf:d5:fa:
31:0e:c3:ba:b2:9c:06:87:79:27:58:56:9f:7a:b2:05:70:dd:
26:cd:b6:3a:53:85:1c:35:97:74:0d:ef:d9:22:82:7b:ce:ab:
71:21:ad:4b:fc:b3:00:56:ed:6b:4c:0f:99:95:5b:2e:93:00:
ce:85:be:82:ec:70:22:bb:5e:36:77:98:d1:57:43:25:43:86:
fc:3a:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net