Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1XbIXlsc12j6nm66ObHlANu1FxM.roa
File: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (raw, json)
Hash identifier: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=
Subject key identifier: D5:76:C8:5E:5B:1C:D7:68:FA:9E:6E:BA:39:B1:E5:00:DB:B5:17:13
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019421445430AA282C1DEEC72832A795EC41
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1XbIXlsc12j6nm66ObHlANu1FxM.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60192
IP address blocks: 95.105.80.0/22 maxlen: 22
95.105.80.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.81.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.82.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.32.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
185.162.33.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.34.0/24 maxlen: 24
185.162.35.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:54:30:aa:28:2c:1d:ee:c7:28:32:a7:95:ec:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d576c85e5b1cd768fa9e6eba39b1e500dbb51713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:91:e5:13:60:12:d2:67:f5:67:61:6d:3c:
94:bd:68:b5:09:d7:14:ca:b9:89:ba:8d:7e:68:0a:
d3:db:10:55:d0:47:67:92:c0:49:87:2f:2a:57:8b:
26:ed:d8:84:bb:67:17:4d:3d:fc:7c:d7:f5:fe:35:
71:c0:0f:4e:dd:cc:ba:55:00:22:7a:7b:10:3a:50:
1a:5e:ee:00:2a:b0:0d:d3:79:82:27:40:c8:6d:4b:
a0:01:3e:ce:d4:21:04:59:a3:18:2f:ca:06:f3:17:
c6:59:ff:b2:11:c0:d6:a8:c6:d0:b1:95:00:bc:e4:
2a:15:c4:69:fc:1c:2f:8e:13:c6:8e:3b:84:25:23:
cc:8b:67:3d:e7:03:b1:b6:7b:89:4a:d6:4c:fc:68:
57:99:11:2a:4e:00:8d:44:1b:92:39:3d:8c:09:e2:
99:35:51:49:40:ce:06:49:09:b7:36:a3:25:e2:d3:
06:0e:26:a2:3e:38:32:d3:68:ec:46:05:77:92:7e:
b3:5f:3d:9e:11:63:4e:74:43:7c:c7:7f:6f:ac:e9:
20:5e:21:b9:4e:8e:64:18:84:b6:54:e5:61:f0:a8:
c5:53:5d:2e:16:6a:79:c8:f5:60:04:31:f9:a3:21:
82:5d:8a:95:3b:d7:bc:c5:2e:aa:1b:cc:80:80:ef:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:C8:5E:5B:1C:D7:68:FA:9E:6E:BA:39:B1:E5:00:DB:B5:17:13
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1XbIXlsc12j6nm66ObHlANu1FxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.105.80.0/22
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:81:b6:1c:2b:63:ea:cf:83:91:04:78:73:af:5d:bf:f0:66:
f9:5c:70:92:d5:b2:54:5c:d6:44:4c:e8:de:b3:98:59:0c:ae:
53:46:41:c5:34:9b:68:e3:f8:7f:5e:e0:34:11:d1:cb:e8:bb:
b7:99:61:ba:fe:72:a5:2a:fc:b5:0e:5b:7a:58:d5:2f:10:f5:
5b:a0:b4:e1:34:b3:85:b0:b8:40:d4:e6:df:72:f5:5f:e6:09:
3d:ff:4d:5f:36:9f:09:8d:2b:b9:aa:b0:b1:08:be:d2:bf:62:
be:68:da:23:20:6e:bc:f9:61:0c:c1:04:4b:df:73:e5:14:fe:
18:8a:ab:e7:87:fd:4a:46:d6:49:b4:77:b9:34:cf:53:61:e1:
21:2c:a0:72:97:d4:b6:34:37:23:1b:f0:49:54:4c:03:cf:1d:
d6:68:f9:f5:15:25:e7:d6:ee:da:42:fd:46:d3:fe:80:40:33:
41:e6:d2:07:1b:fa:ac:ce:cb:d2:1a:1c:c4:7b:9f:fb:d7:12:
2e:eb:59:01:f4:8d:3a:b9:41:cd:03:7c:f8:32:5b:15:2b:ed:
f7:c0:0d:28:27:af:1f:d1:a0:73:08:4e:d8:6d:39:4e:c5:13:
75:7a:0b:c7:4a:31:fe:67:8f:7f:1c:75:85:4d:2a:89:40:a9:
c8:0e:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net