Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/G9kyMwWcS8p8oKM_jVsKr46KkCA.roa
File: G9kyMwWcS8p8oKM_jVsKr46KkCA.roa (raw, json)
Hash identifier: v58cL7h9PNX8KV7JDf5chBz/sfdy/p9d8c9Lb1ABEtg=
Subject key identifier: 1B:D9:32:33:05:9C:4B:CA:7C:A0:A3:3F:8D:5B:0A:AF:8E:8A:90:20
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 019428263363CC24E83713FB13D78443F605
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/G9kyMwWcS8p8oKM_jVsKr46KkCA.roa
Signing time: Thu 02 Jan 2025 17:52:59 +0000
ROA not before: Thu 02 Jan 2025 17:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58074
IP address blocks: 193.169.142.0/24 maxlen: 24
194.6.201.0/24 maxlen: 24
195.78.124.0/23 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
195.245.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:33:63:cc:24:e8:37:13:fb:13:d7:84:43:f6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 17:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd93233059c4bca7ca0a33f8d5b0aaf8e8a9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e7:5f:17:22:ff:7e:88:3c:58:06:a5:75:0c:
31:16:16:3f:1d:fc:81:55:e1:80:b3:ae:89:0a:7c:
26:e7:cb:57:3f:88:1d:79:37:25:6d:43:12:8e:2c:
06:9e:ce:c5:08:83:71:14:b6:97:72:0d:49:d7:78:
b3:c3:da:e9:40:02:fa:ba:cc:36:64:43:ab:6d:88:
e6:81:bc:0e:ce:7a:cf:5e:79:2c:e8:db:d4:8f:70:
98:65:2c:88:da:d8:dc:47:b9:45:1f:20:50:8e:fa:
7e:f4:a2:ec:7f:15:2a:db:39:35:87:cc:3c:72:a3:
5f:fa:cf:72:46:1b:3f:05:31:07:a8:96:d7:38:1c:
2c:74:2c:96:ec:ef:e6:00:07:71:63:cc:7a:34:06:
fa:80:bb:60:9e:fb:93:60:89:d5:72:1f:e0:2a:04:
28:17:3f:93:f1:b7:0c:6d:ea:ea:34:6f:39:cb:b4:
90:8f:65:88:5f:f8:e9:9b:04:c8:f2:ce:d9:ef:6b:
b1:c9:b1:af:cd:12:6a:45:5f:e7:8a:a0:ff:6a:b8:
8b:1a:b5:3b:21:a7:6b:91:6b:2b:c4:51:72:a8:9d:
b6:99:65:b9:89:b8:49:b7:13:97:cf:ad:37:e8:f1:
7a:1e:0e:9e:73:69:86:e2:08:ec:09:f2:c1:68:0d:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D9:32:33:05:9C:4B:CA:7C:A0:A3:3F:8D:5B:0A:AF:8E:8A:90:20
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/G9kyMwWcS8p8oKM_jVsKr46KkCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/24
194.6.201.0/24
195.78.124.0/23
195.88.38.0/23
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
40:6e:18:6f:f9:2e:dd:7b:9b:5a:80:00:36:ac:1d:b1:f3:27:
fa:7e:05:45:f8:83:df:18:e9:f2:15:8e:e1:17:18:eb:77:55:
30:98:f0:7e:d4:65:49:13:61:e6:d6:dc:0b:62:c7:d5:83:5b:
b4:f1:03:03:f9:a4:bc:ec:a2:aa:b7:92:a7:27:6f:3b:f8:eb:
a7:ca:9d:15:01:28:57:5c:9d:fd:6a:23:eb:86:d0:13:ce:59:
90:62:b2:6b:dc:ad:8a:4a:51:a2:ff:13:80:ea:01:0d:16:0a:
d2:d9:60:2d:b2:ce:88:78:75:0e:99:5d:95:8f:b3:d0:fe:11:
19:9e:fa:7e:a1:a4:07:83:74:65:67:0c:17:07:cc:0a:69:d6:
3b:4b:cb:e9:4f:57:da:ce:84:2a:b9:80:be:e0:82:46:a4:30:
db:66:a3:62:53:b5:b8:51:1f:bc:73:d7:86:41:c0:b6:f1:7d:
0f:69:f4:0b:eb:02:44:9e:23:a7:80:50:5a:bd:88:a7:a4:3f:
59:8a:cb:1a:37:94:cd:f9:97:f5:1e:28:d4:9b:9c:21:6f:03:
51:be:1e:d3:ef:cc:c5:f9:dd:73:92:e4:79:6c:5c:fb:ad:db:
d1:75:36:32:86:35:e7:f3:1b:04:2f:42:ee:64:5a:af:67:f3:
7f:b4:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:31 2025 by rpki-client on console.sobornost.net