Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa
File: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (raw, json)
Hash identifier: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=
Subject key identifier: F6:76:02:A5:10:EA:2E:35:E4:3D:6F:F8:C4:0D:E6:6B:C7:57:E2:3A
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01941FFA9CC74C7CDAD01C1EBCCB999B6CC4
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 81.89.224.0/19 maxlen: 24
81.89.246.0/24 maxlen: 24
84.201.64.0/18 maxlen: 24
84.201.65.0/24 maxlen: 24
84.201.66.0/24 maxlen: 24
84.201.73.0/24 maxlen: 24
84.201.98.0/24 maxlen: 24
212.62.64.0/19 maxlen: 24
212.62.67.0/24 maxlen: 24
212.62.68.0/24 maxlen: 24
212.62.72.0/24 maxlen: 24
212.62.85.0/24 maxlen: 24
2a00:1348:10::/48 maxlen: 64
2a00:1348:11::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:c7:4c:7c:da:d0:1c:1e:bc:cb:99:9b:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f67602a510ea2e35e43d6ff8c40de66bc757e23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:2b:4e:18:93:c6:61:99:31:fc:b9:d3:86:
2a:50:0e:54:0a:f6:8a:f1:1c:fe:4e:29:2d:a9:ff:
8d:b6:bc:b3:7f:68:24:d1:d5:a5:a6:47:c5:dd:ea:
d1:df:17:c7:29:4b:68:4b:82:6f:98:b3:ca:92:c2:
4d:64:7f:96:38:88:82:69:cd:0f:7e:31:d7:0a:dc:
f0:2c:89:4f:93:f5:34:83:8a:0a:df:29:3a:20:31:
c1:5d:d6:c1:36:0b:54:10:71:28:26:30:bb:89:4d:
4a:5b:90:40:45:a5:41:33:cf:df:05:19:56:91:8c:
6d:61:c0:13:e6:77:24:be:0f:91:a8:b9:51:2d:c9:
a3:43:cd:7d:05:fe:b8:b2:33:ac:1e:07:50:ac:50:
4a:9e:9f:12:84:c7:5f:87:e7:24:75:f4:c2:50:c0:
86:8a:a3:30:03:00:28:56:89:8f:04:fb:3a:2c:b0:
78:68:6c:4e:1a:cc:0f:19:67:00:47:7c:01:c8:19:
43:94:b3:bc:5d:a8:30:a2:37:94:ff:4a:2a:7a:1a:
2e:58:e3:99:2d:e8:38:7b:98:79:7c:3c:de:ee:ac:
b8:eb:ab:da:2d:be:ec:2d:8c:fc:e2:cc:ed:c5:64:
c1:db:d4:5e:fa:15:71:a0:17:80:98:7d:d1:96:7a:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:02:A5:10:EA:2E:35:E4:3D:6F:F8:C4:0D:E6:6B:C7:57:E2:3A
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/19
84.201.64.0/18
212.62.64.0/19
IPv6:
2a00:1348:10::/47
Signature Algorithm: sha256WithRSAEncryption
5f:1c:48:db:d2:32:a4:a8:c5:e6:ea:6d:94:8a:45:3e:91:2e:
11:63:3b:ea:53:b6:b8:ab:86:0d:32:83:5a:a2:51:92:e5:19:
36:32:94:0c:1c:31:50:8d:7d:ba:d1:91:70:fc:73:ab:7d:cb:
11:be:6c:2f:9d:73:34:21:c6:9a:2e:ae:a6:f3:3d:03:ca:96:
61:2b:33:56:2d:42:00:00:03:06:b6:1b:10:39:90:2c:d9:7f:
f8:83:04:9e:fa:ad:43:56:36:5a:29:e8:af:61:c8:9b:82:8e:
ab:39:03:b7:1c:57:73:e0:11:8d:49:d8:01:39:f1:a0:2d:8c:
78:01:e0:fa:62:63:43:8f:cb:16:38:ee:4e:ee:c3:01:03:8a:
29:21:10:63:fc:01:8d:95:24:1f:a8:18:77:56:4f:8a:72:c5:
c9:9e:28:d0:a4:a3:3e:96:12:47:31:77:0d:aa:3d:26:80:b9:
63:fb:16:bf:16:40:10:24:f4:68:ff:1d:c8:38:4c:50:7c:fb:
ed:90:a9:f2:de:fa:b2:78:b8:88:b7:f4:3f:a3:50:04:29:c1:
76:9e:59:5b:62:5c:ef:94:15:af:0d:04:cc:36:ed:11:20:a8:
53:19:fd:80:d6:a2:59:58:15:6d:1f:97:2e:bb:09:df:94:6b:
4d:fb:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net