Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/L6BmwALeicC8VgFsadJhZLZOhdw.roa
File: L6BmwALeicC8VgFsadJhZLZOhdw.roa (raw, json)
Hash identifier: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=
Subject key identifier: 2F:A0:66:C0:02:DE:89:C0:BC:56:01:6C:69:D2:61:64:B6:4E:85:DC
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 01942521E885F68BEB553F3202653FA25E1A
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/L6BmwALeicC8VgFsadJhZLZOhdw.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48252
IP address blocks: 94.198.176.0/21 maxlen: 21
94.198.176.0/24 maxlen: 24
94.198.177.0/24 maxlen: 24
94.198.178.0/24 maxlen: 24
94.198.179.0/24 maxlen: 24
94.198.180.0/24 maxlen: 24
94.198.181.0/24 maxlen: 24
94.198.182.0/24 maxlen: 24
94.198.183.0/24 maxlen: 24
185.21.212.0/22 maxlen: 22
185.21.212.0/24 maxlen: 24
185.21.213.0/24 maxlen: 24
185.21.214.0/24 maxlen: 24
185.21.215.0/24 maxlen: 24
2a04:11c0::/29 maxlen: 29
2a04:11c1::/32 maxlen: 32
2a04:11c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e8:85:f6:8b:eb:55:3f:32:02:65:3f:a2:5e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa066c002de89c0bc56016c69d26164b64e85dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:09:62:28:b5:f9:3e:54:c8:6d:f3:ad:82:
02:87:60:dc:cb:b6:42:2b:b6:d3:37:76:61:a2:51:
9a:46:02:f6:ef:78:1d:11:85:a6:bb:94:1c:3c:3b:
bf:96:e5:31:29:46:62:c4:29:15:86:8c:35:54:65:
78:9c:ff:fc:14:52:46:23:1e:c2:8e:2e:c6:0a:de:
52:86:93:50:4d:1d:f5:5d:13:0e:58:53:7c:b5:c1:
d9:39:c2:f0:4b:ff:19:c7:bf:de:08:ad:83:02:4b:
3c:82:a4:8d:ac:38:96:d1:8f:86:22:63:75:af:91:
ac:e7:35:d0:1a:08:1d:04:58:76:2e:7a:90:e5:ac:
a7:68:c7:5b:d1:46:d3:e4:c3:6f:00:86:71:ca:cf:
60:26:13:7d:f0:15:a1:55:57:9f:4a:dc:44:b3:50:
36:6b:a4:7a:4a:aa:34:1f:dd:82:7a:0e:6d:d3:b1:
ab:c9:c6:0a:3a:30:fb:57:b1:60:7b:15:8e:f5:37:
71:98:81:ac:88:11:95:39:db:87:71:d8:40:d5:9d:
5e:e0:71:fe:82:97:45:03:95:ab:ca:fb:ed:a4:7c:
69:cb:fb:a0:a9:7f:5b:07:d6:93:32:e2:77:f2:9f:
96:b1:78:1f:98:21:c2:b2:82:91:84:d2:70:15:62:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:66:C0:02:DE:89:C0:BC:56:01:6C:69:D2:61:64:B6:4E:85:DC
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/L6BmwALeicC8VgFsadJhZLZOhdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.176.0/21
185.21.212.0/22
IPv6:
2a04:11c0::/29
Signature Algorithm: sha256WithRSAEncryption
93:03:3c:93:70:e7:46:93:ee:e6:ac:b2:18:14:5a:6e:18:cf:
43:84:06:fd:17:ac:84:12:2f:4a:71:9b:52:da:45:1e:d5:ca:
ad:91:e2:e7:7a:b2:a6:de:81:be:f5:3d:ff:91:db:0d:de:8e:
f8:71:38:89:0d:47:8c:33:ad:6e:fd:0c:7c:4c:02:5e:2a:e7:
e7:07:06:6b:03:c3:d2:01:9c:59:9e:f4:9c:5b:93:3c:11:6f:
b0:59:66:bd:56:4b:85:0d:30:1b:1b:e1:73:af:3e:db:cc:7f:
69:55:18:2d:fb:c2:58:9b:1a:d4:ff:1d:85:86:01:5f:2b:92:
49:07:7a:cb:b1:52:6b:a3:7b:ce:e6:26:82:8d:5b:d5:44:39:
27:a3:1d:5f:a3:e7:33:0b:c2:fc:7f:3a:44:cc:5a:44:b1:79:
24:97:c6:66:ca:bb:90:bd:d5:c4:15:95:bb:11:d2:35:8d:40:
b6:c6:7b:36:2c:a4:70:4c:c8:24:97:c7:df:15:33:df:ea:3d:
47:08:3d:f2:c2:ae:db:11:8e:e7:e8:6f:85:17:e4:83:dc:0e:
f8:99:e3:9d:94:e0:d6:83:2b:17:6f:d9:19:63:24:9f:6e:4b:
63:be:5a:c1:cc:6c:12:c1:a8:99:62:4d:5c:6d:a8:f8:29:81:
c4:62:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net