Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/cUEqkvOn3Or6KK_gteey-M1immw.roa
File: cUEqkvOn3Or6KK_gteey-M1immw.roa (raw, json)
Hash identifier: NBFmDrlpaQLqY6RSKBmBrpZhLZbGW8F9pK5gAcvo2qA=
Subject key identifier: 71:41:2A:92:F3:A7:DC:EA:FA:28:AF:E0:B5:E7:B2:F8:CD:62:9A:6C
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01961F8D3E2ED1C207C93046EDFE8A3E181B
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/cUEqkvOn3Or6KK_gteey-M1immw.roa
Signing time: Thu 10 Apr 2025 11:54:32 +0000
ROA not before: Thu 10 Apr 2025 11:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.10.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:8d:3e:2e:d1:c2:07:c9:30:46:ed:fe:8a:3e:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 10 11:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71412a92f3a7dceafa28afe0b5e7b2f8cd629a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:bb:f4:12:10:1e:bd:3f:fd:cf:c2:07:8d:
fa:f7:02:7f:2a:43:9f:c4:53:af:93:a1:6c:85:c8:
b6:81:d9:34:89:69:9d:e8:d0:0e:9d:c3:67:4f:6a:
10:35:75:3d:c2:be:00:bd:c4:51:1d:2c:67:87:35:
ba:e7:cd:cf:99:05:4a:6b:af:55:9c:13:f4:7b:26:
00:dd:ca:be:a3:48:f5:a4:4c:2f:7f:c6:a4:a1:0d:
b2:6a:4f:de:09:c6:e0:1b:19:5d:c8:38:5f:a5:e2:
b1:21:3a:32:ea:89:c5:5f:3e:0c:ff:87:25:2d:cf:
1f:bd:0a:d3:a1:bc:84:92:43:3c:78:ad:3a:da:89:
87:f5:c0:23:19:df:c9:3e:91:f1:9e:26:89:e3:a2:
00:e9:1f:16:39:e6:3e:2c:4f:59:2d:f0:3d:17:01:
ae:cd:38:c8:f8:ce:da:61:38:2f:03:34:87:1d:8c:
03:0a:ec:5f:9b:f0:1b:b5:11:af:ac:cc:ca:cc:0a:
03:5b:d5:d6:2f:d3:37:e8:af:88:1b:b5:9e:de:fc:
6a:b1:b5:13:7d:a7:15:5e:9c:7c:6f:d9:78:ca:fa:
70:e2:28:32:72:30:3e:c4:9b:c5:ea:95:3b:4e:fe:
17:39:5e:b7:19:16:20:e3:4f:4e:06:99:ce:5e:8c:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:2A:92:F3:A7:DC:EA:FA:28:AF:E0:B5:E7:B2:F8:CD:62:9A:6C
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/cUEqkvOn3Or6KK_gteey-M1immw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0-84.55.10.255
84.55.18.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2b:a9:b9:3a:c5:cc:2c:a1:d8:dd:bc:b9:e9:2c:d0:fa:bf:
6a:fb:63:42:15:0c:13:a5:76:3d:22:4b:78:0c:9b:0d:d8:33:
ad:25:60:62:2a:8e:cc:d1:80:b7:af:f1:b2:88:2a:b1:6b:20:
b5:31:27:2b:be:b9:25:e5:17:c3:28:8a:cf:97:15:8a:4e:b6:
31:fd:0f:c6:23:21:3d:81:39:5e:f5:3e:98:59:a2:af:ac:a7:
68:e9:c8:01:32:af:fd:5e:52:d1:12:5e:9f:5e:48:45:34:23:
e6:47:7f:4b:32:8e:a2:3e:7d:60:d4:aa:75:aa:25:14:dd:f8:
a7:6e:9e:45:b2:6a:ee:f5:c4:25:c2:f2:29:38:67:7c:ce:6d:
6f:bb:77:55:69:0c:2b:cd:4d:db:50:79:08:34:c1:b7:18:6d:
04:81:5c:66:90:58:80:2b:6e:ca:ae:57:eb:19:ad:95:bd:14:
f7:3d:16:b4:71:9c:4d:b0:7b:7c:7b:5d:92:01:bb:e2:fe:e2:
cf:ec:cc:9d:37:88:05:aa:6b:d9:85:39:5e:16:75:29:5e:5c:
41:2f:e5:31:18:a8:df:51:57:10:0c:79:ca:28:92:06:ce:bb:
92:5f:0f:ce:59:b0:c1:ca:a8:95:7c:0e:d5:63:9b:4c:81:98:
cb:67:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net