Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa
File: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (raw, json)
Hash identifier: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=
Subject key identifier: AF:D1:65:11:57:4A:DA:4C:46:3E:13:4F:A3:FF:8F:15:95:F3:E4:78
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019424B3C03E972255AAC0174E8C390E2CCB
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41360
IP address blocks: 31.128.180.0/23 maxlen: 23
31.128.180.0/24 maxlen: 24
31.128.181.0/24 maxlen: 24
91.192.44.0/22 maxlen: 22
91.192.44.0/23 maxlen: 23
91.192.44.0/24 maxlen: 24
91.192.45.0/24 maxlen: 24
91.192.46.0/23 maxlen: 23
91.192.46.0/24 maxlen: 24
91.192.47.0/24 maxlen: 24
91.217.66.0/23 maxlen: 23
91.217.66.0/24 maxlen: 24
91.217.67.0/24 maxlen: 24
194.9.14.0/23 maxlen: 23
194.9.14.0/24 maxlen: 24
194.9.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c0:3e:97:22:55:aa:c0:17:4e:8c:39:0e:2c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afd16511574ada4c463e134fa3ff8f1595f3e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:6a:05:a1:f4:77:b4:05:12:a2:0a:6f:1f:
f7:2b:96:49:07:d4:e3:7e:c8:87:0d:9d:d0:51:4d:
6d:44:b0:20:10:d8:57:f2:63:4c:0c:ac:f0:77:f4:
3d:ec:93:bd:6b:55:6c:1a:c0:b8:7a:08:21:d4:36:
68:d1:de:9b:f8:ca:ea:96:1d:4f:9d:62:52:4c:a2:
1d:34:76:8c:6e:b6:4d:22:ce:cf:30:3e:5a:d2:4c:
63:b6:a3:36:7f:93:c7:0e:01:c8:6d:dd:b0:ea:c2:
88:6d:d7:ea:38:36:68:73:61:74:63:51:ea:7b:f4:
55:bb:77:1f:28:cc:0b:b9:1f:c3:c2:b1:65:28:a0:
c2:7e:20:84:aa:e4:85:b3:ac:f8:f7:96:13:31:13:
53:b1:f8:ac:9b:98:a6:54:50:5b:81:53:f9:5f:c1:
85:4e:17:13:7d:9d:73:7d:60:24:25:f4:90:7e:ef:
16:7f:32:ad:a3:c5:df:a8:55:bc:f5:1e:ff:87:a0:
39:8e:67:14:2c:c6:ec:e6:be:c1:38:85:ed:a3:4e:
d5:6b:e9:ec:b5:07:15:8a:8d:d1:1d:0b:2f:4d:f8:
86:7c:48:39:56:33:0f:49:09:db:74:54:0e:be:4a:
d3:6b:38:04:d8:7d:97:08:05:f0:bf:14:11:25:04:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:65:11:57:4A:DA:4C:46:3E:13:4F:A3:FF:8F:15:95:F3:E4:78
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.180.0/23
91.192.44.0/22
91.217.66.0/23
194.9.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:59:c4:92:29:17:7f:9a:8b:d6:2b:e1:f2:bf:d4:43:10:54:
39:16:bd:c8:7e:e9:16:f7:2b:f5:1a:bb:16:10:95:7d:22:fe:
0b:a1:83:0a:c4:6f:82:30:9b:8c:02:1d:8a:86:1b:08:fc:69:
e3:78:2b:f2:49:13:3e:57:f8:bd:6e:84:42:ac:f3:a8:4e:fb:
8b:3b:dd:1c:f2:74:1d:b5:81:e6:a0:6c:aa:67:61:79:fb:7d:
d4:1f:25:d9:b4:f9:36:32:c7:7b:40:39:04:b4:f3:7a:a2:3a:
2f:d4:e9:f2:6f:c2:c7:ec:6a:25:a3:d0:d1:51:dc:47:3c:e7:
23:2c:f5:d5:47:1a:63:de:ad:42:61:3a:6b:c5:d3:f3:e5:aa:
5f:71:b9:21:04:40:d6:44:1d:e3:f5:3b:3e:b3:85:09:4c:c1:
7f:a3:b6:c6:b1:3f:ce:b2:16:8c:68:c9:52:79:73:60:e4:fb:
c6:30:46:1f:85:91:f2:32:e5:e1:ec:3b:fb:14:46:14:0d:f4:
be:f0:cd:8d:89:23:e9:41:27:36:cd:d2:0f:e7:c5:79:b1:01:
09:8c:9c:6c:aa:32:24:50:94:15:c3:de:5a:48:28:43:d4:03:
42:dd:1f:9d:7d:bc:ff:11:91:3c:fb:24:ef:5f:5d:15:80:45:
3f:67:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net