Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/8oT7fOBgdsUIIWZBhypDTwG_INQ.roa
File: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (raw, json)
Hash identifier: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=
Subject key identifier: F2:84:FB:7C:E0:60:76:C5:08:21:66:41:87:2A:43:4F:01:BF:20:D4
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 0194266A0E4F5D06C4BE7ED9F9C6E1306F16
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/8oT7fOBgdsUIIWZBhypDTwG_INQ.roa
Signing time: Thu 02 Jan 2025 09:47:52 +0000
ROA not before: Thu 02 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39570
IP address blocks: 93.188.0.0/24 maxlen: 24
93.188.1.0/24 maxlen: 24
93.188.2.0/23 maxlen: 23
93.188.4.0/22 maxlen: 22
194.9.94.0/23 maxlen: 23
2a02:250::/33 maxlen: 33
2a02:250:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:0e:4f:5d:06:c4:be:7e:d9:f9:c6:e1:30:6f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 2 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f284fb7ce06076c508216641872a434f01bf20d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:84:3f:e6:21:0d:59:ba:6d:ed:c5:7b:d0:
6d:db:d5:88:d7:ba:11:4f:e6:b2:c5:4d:61:c1:09:
b5:c4:46:fe:44:2f:aa:2b:d7:ed:92:f6:f3:bf:ae:
ce:4e:a6:e6:fd:25:b8:d3:d5:a9:7f:59:51:f8:ac:
84:d3:7e:d5:ad:77:9b:35:ff:56:fa:d6:9f:e3:fd:
44:26:98:9e:49:f4:8c:22:97:c1:87:af:0e:32:9a:
d6:3e:d8:8f:09:a9:0e:f6:1e:4a:76:01:c3:26:40:
7f:a0:20:d2:d0:ff:3b:ad:a3:aa:8f:ed:7a:d6:c8:
66:34:bb:1d:fa:c8:f6:9b:ad:15:2c:9d:e4:c8:43:
b2:0e:c6:71:a8:1c:dd:0d:e4:d5:e2:13:35:ce:58:
f0:c6:c4:4a:7b:bb:41:43:9c:ce:6e:d2:6a:9a:88:
6c:b2:44:b8:1f:52:09:e5:98:be:e1:ff:e1:95:7c:
9f:c2:0e:70:f9:42:5f:39:23:ec:16:47:75:48:92:
3d:5e:fc:d7:da:35:15:68:6e:20:fb:e0:74:50:0a:
9a:c3:56:62:19:8c:91:d0:64:f9:6b:c6:0b:eb:2e:
af:5c:c0:ed:dc:1a:60:04:be:2b:33:42:80:fb:22:
86:57:fd:39:28:19:1b:ae:ce:05:5d:8d:dc:0d:4b:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:FB:7C:E0:60:76:C5:08:21:66:41:87:2A:43:4F:01:BF:20:D4
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/8oT7fOBgdsUIIWZBhypDTwG_INQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.0.0/21
194.9.94.0/23
IPv6:
2a02:250::/33
2a02:250:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
31:aa:a1:62:6d:38:56:ab:01:8f:1d:53:82:96:3a:b7:23:95:
e0:3e:e0:f4:b2:42:99:2f:cd:0a:06:c1:a0:94:32:b3:6b:fc:
9e:f3:02:84:33:7b:0c:d4:d0:38:c1:8f:fc:1a:11:d6:19:51:
a1:38:3b:d0:bb:60:ba:e5:4c:43:48:13:13:a2:9e:f8:0c:68:
6d:f2:fa:2a:16:37:80:6e:70:bd:33:6b:03:8a:4e:7d:8b:e8:
73:18:d2:48:30:10:1f:10:72:18:59:57:04:33:17:30:d4:b6:
67:9e:dc:e6:de:bd:07:e3:22:e9:99:8d:72:dd:cd:91:2d:c1:
1f:df:22:11:ca:7c:71:b5:35:b5:48:71:12:79:5b:82:96:1b:
de:ef:f8:fb:82:9c:79:be:88:d4:88:1a:fb:70:d6:43:8e:bd:
65:73:cd:27:6a:0b:e5:30:5f:ca:44:9e:b5:d5:5c:22:63:96:
89:82:b8:67:10:75:c8:eb:d6:f9:f1:15:95:e5:71:67:94:9d:
46:8a:c9:e3:ca:5b:99:5f:3c:47:e6:0e:df:99:17:e2:5b:9e:
05:02:a7:3f:35:a9:b4:c4:34:42:97:c7:c6:c9:00:64:02:c1:
a0:70:43:01:02:88:a6:7b:bc:d1:6f:3e:9e:00:45:de:89:d6:
d7:f8:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net