Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/kQbp2qzFUZPwkhJafZeDm861YjM.roa
File: kQbp2qzFUZPwkhJafZeDm861YjM.roa (raw, json)
Hash identifier: Fkm5avfRjVcfP/ZhaPCK6QXfyeZa3X+294m6m4o5WkA=
Subject key identifier: 91:06:E9:DA:AC:C5:51:93:F0:92:12:5A:7D:97:83:9B:CE:B5:62:33
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 019424B38153A3D33724A99BECAC463AC718
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/kQbp2qzFUZPwkhJafZeDm861YjM.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43494
IP address blocks: 78.40.2.0/23 maxlen: 23
78.40.4.0/22 maxlen: 22
185.86.236.0/22 maxlen: 24
185.86.236.0/24 maxlen: 24
185.89.244.0/23 maxlen: 23
185.89.246.0/23 maxlen: 23
212.158.176.0/24 maxlen: 24
2a00:a9c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:53:a3:d3:37:24:a9:9b:ec:ac:46:3a:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9106e9daacc55193f092125a7d97839bceb56233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:62:bb:40:92:77:9d:0b:b9:63:7c:af:bb:
31:5a:6e:b0:25:c4:6b:92:77:4e:c5:10:da:ff:a7:
f7:96:a6:b3:b4:44:ab:ea:40:d2:8c:30:60:e5:08:
7f:7c:0f:04:f2:82:a2:b1:6e:c3:85:69:6f:a5:12:
87:1d:fc:89:df:12:83:52:9e:08:4f:14:c4:18:c4:
4c:1c:dd:ef:2b:f9:5f:0f:cd:e5:c3:0b:f7:71:ef:
57:9d:5d:db:c5:b0:28:ee:3b:7b:9b:bf:01:d7:eb:
7e:3f:bf:48:97:a2:48:e8:51:f4:0d:23:11:8b:a9:
ce:4d:6d:14:bc:d6:0b:bd:f7:ba:c4:b3:66:19:ca:
2a:38:3f:9f:3f:d0:1b:d2:49:46:7d:83:06:2e:4d:
75:82:87:da:2c:6b:a6:fa:f8:74:5f:3d:99:e6:b3:
51:df:1f:a9:5e:f2:95:0c:e7:ec:25:c9:1e:b6:71:
b7:62:2b:2d:f2:26:2c:24:9f:64:c7:d1:67:3b:59:
95:01:73:59:77:97:24:35:3a:17:71:52:51:71:ed:
0b:f8:a7:57:62:b0:d6:4e:80:2a:d3:6c:a3:ee:bc:
b8:98:e7:ec:ec:05:54:29:cb:04:fe:38:a7:bd:64:
2a:43:ec:0e:9b:01:f4:9a:21:4a:fa:7e:93:71:44:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:E9:DA:AC:C5:51:93:F0:92:12:5A:7D:97:83:9B:CE:B5:62:33
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/kQbp2qzFUZPwkhJafZeDm861YjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.2.0-78.40.7.255
185.86.236.0/22
185.89.244.0/22
212.158.176.0/24
IPv6:
2a00:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:f7:3d:e9:1c:50:ed:c3:04:44:a3:d0:ca:34:5f:7f:c0:83:
46:e6:5c:5e:94:b0:72:c5:94:ff:73:fd:e5:27:81:84:0c:57:
49:a6:44:55:38:d2:e0:c7:84:49:32:2a:1e:bb:17:ef:44:df:
d3:36:7c:a4:52:e9:4f:34:0b:9f:f6:30:85:aa:34:ed:ca:b8:
31:bf:f5:3d:d5:91:c0:15:2a:91:93:38:0c:9a:b8:69:83:90:
5d:5e:f8:b6:a9:e5:69:61:6f:52:05:19:bc:45:8a:42:0e:06:
2a:90:41:ad:6d:59:93:07:ce:7b:ed:bd:76:83:3a:16:f8:2a:
7f:13:a0:4e:d2:e5:79:7f:b0:c3:a2:15:53:7a:a6:79:6e:03:
0f:2d:ed:08:f8:0a:c0:94:10:7d:93:da:2a:18:a2:fa:d3:b4:
4f:d1:29:dc:df:0e:94:77:e9:01:ec:89:1e:4c:65:c1:8b:7d:
39:a6:4c:0a:0c:f4:10:7b:56:ed:d3:35:a5:32:17:82:48:2b:
37:36:9a:5e:6c:63:6b:55:64:fd:90:b1:09:62:bd:00:57:1d:
9e:d2:f5:19:31:b5:9e:a0:38:d8:af:88:1b:6b:b8:d1:35:90:
46:71:26:f9:e9:71:e8:0c:83:a1:f7:d1:74:27:63:6e:5a:f5:
03:5c:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net