Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa
File: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (raw, json)
Hash identifier: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=
Subject key identifier: 20:B2:FC:06:CC:75:0A:27:65:34:39:CC:3F:30:94:71:2E:54:D8:CA
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0194236A50DBD9C2A99115714B05E4FFBE11
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31122
IP address blocks: 46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/19 maxlen: 19
92.51.208.0/20 maxlen: 20
92.51.240.0/21 maxlen: 21
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:db:d9:c2:a9:91:15:71:4b:05:e4:ff:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b2fc06cc750a27653439cc3f3094712e54d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:a5:bd:b2:9a:7c:0e:a0:0d:55:24:c8:6a:
d8:df:36:49:e2:0d:5f:ac:cb:fa:29:54:dd:d9:63:
ae:a1:85:8a:ee:08:5f:b8:58:5f:51:34:50:17:c4:
d9:a2:00:e7:23:24:4a:95:76:5f:7f:ad:b3:59:0f:
d4:48:58:cc:3e:5c:d6:65:c3:93:06:d1:a2:98:21:
17:85:fd:c3:c3:a0:2c:2f:c7:37:96:bf:58:39:ea:
95:ec:f2:b2:fd:d5:a2:31:2a:14:23:a7:db:b4:10:
0d:c9:6d:71:c5:ba:44:f1:17:c1:37:8f:c4:de:42:
27:be:42:9a:a2:8e:84:37:08:eb:e4:95:a0:11:5e:
e8:73:a6:a1:e8:d2:db:dd:29:46:b8:d8:2f:bd:c0:
74:51:6a:c2:c8:e7:32:6f:eb:33:83:94:c2:4b:36:
de:a1:b4:55:0a:5a:51:9e:7a:d4:0e:b5:08:21:ce:
bb:8f:c9:90:06:60:ff:fd:07:f9:0d:e2:be:4f:b8:
a9:ba:3b:4a:24:66:a1:21:6a:b5:a2:68:0f:a5:16:
ed:dc:be:df:eb:82:96:60:e9:f6:2f:58:d8:ab:a6:
8e:55:3c:90:0a:52:51:d5:54:8d:54:a2:31:d7:bc:
79:27:e0:ae:74:88:dc:15:a8:b9:f5:f0:b8:1d:c1:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:FC:06:CC:75:0A:27:65:34:39:CC:3F:30:94:71:2E:54:D8:CA
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/19
92.51.240.0/21
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
Signature Algorithm: sha256WithRSAEncryption
99:e0:75:59:1c:85:d6:b8:6c:52:6c:37:79:6f:39:28:6e:aa:
c1:c5:da:6b:3b:15:81:13:a0:90:93:1d:55:d3:53:4e:c2:ea:
e6:28:7d:68:8c:56:8d:10:8a:bc:f9:9e:6a:c2:55:a8:ac:bb:
59:8d:86:b5:9e:ed:85:4f:88:a2:ec:ac:f5:94:90:7e:70:63:
9f:f5:13:fb:19:68:b7:4d:6e:29:dd:f6:16:ae:89:46:86:0b:
21:99:f9:b7:2e:cd:39:98:cb:12:71:9b:c0:2f:f6:6e:45:e2:
fd:f2:85:0c:af:5a:9e:69:10:e6:28:7c:db:42:c0:51:b5:c2:
20:6b:1a:02:27:bf:70:d9:e9:00:16:7a:99:a0:eb:96:53:81:
84:f7:7a:a4:73:a3:42:90:8a:20:fc:50:e8:57:3e:2a:e1:c4:
ec:8b:a7:b6:c0:e7:2d:f0:be:fa:be:ba:5d:94:4e:fc:47:fd:
d8:eb:2b:4b:dd:ac:2d:2c:2c:93:13:fc:48:fa:3c:ff:41:5c:
3b:14:6c:b4:d0:8d:bb:fd:42:38:35:b8:79:bf:19:ac:6f:c6:
b3:f4:d6:a7:e8:9d:bb:75:a7:43:95:5d:4e:1b:78:32:c6:4f:
66:f8:9e:02:9f:e9:ca:be:47:c7:19:6f:91:8f:7e:9a:17:4a:
52:8e:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net