Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/FEZEft80jliOlkGyEwySyBAkmWo.roa
File: FEZEft80jliOlkGyEwySyBAkmWo.roa (raw, json)
Hash identifier: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=
Subject key identifier: 14:46:44:7E:DF:34:8E:58:8E:96:41:B2:13:0C:92:C8:10:24:99:6A
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0196104CC91B189013BD73F5722A8069CCAB
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/FEZEft80jliOlkGyEwySyBAkmWo.roa
Signing time: Mon 07 Apr 2025 12:49:49 +0000
ROA not before: Mon 07 Apr 2025 12:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61060
IP address blocks: 37.44.8.0/21 maxlen: 21
45.66.112.0/22 maxlen: 22
185.144.4.0/22 maxlen: 22
185.144.5.0/24 maxlen: 24
185.172.160.0/22 maxlen: 22
2a10:40::/32 maxlen: 32
2a10:41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:4c:c9:1b:18:90:13:bd:73:f5:72:2a:80:69:cc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Apr 7 12:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1446447edf348e588e9641b2130c92c81024996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:a0:ee:98:03:1c:5f:64:c4:e8:45:5d:57:
02:41:41:5c:e4:cc:f4:e7:02:8d:6f:0a:2b:96:1b:
71:1b:36:da:bc:59:ab:89:4e:10:c9:e8:ff:8c:94:
bf:3e:2a:71:4f:a7:02:73:77:70:da:c4:2b:33:4c:
99:6c:5f:22:77:15:2b:69:3f:50:94:6e:d5:a5:72:
e1:bd:5a:e8:33:6d:06:b5:eb:b4:ac:72:3d:20:a3:
df:ee:08:0e:7b:a9:29:77:00:cd:f6:5f:1e:81:3f:
69:e3:86:7e:48:08:88:fe:f7:aa:f5:01:da:bd:d2:
e7:5f:31:ce:9d:06:e5:b7:f5:89:98:e9:5d:4b:ed:
ca:b6:b9:dc:c3:d6:e7:4d:c7:a9:0c:cc:70:50:dc:
89:07:26:c1:25:fe:f9:20:b4:7b:85:56:07:6a:8b:
fe:e4:bf:27:34:b9:b4:96:53:97:f4:3e:3d:aa:5f:
e1:13:f9:7f:8a:2e:4f:86:55:ce:5b:4b:c7:b3:3e:
f7:0c:b8:28:b9:de:50:80:0a:02:0b:37:aa:f6:64:
b6:90:4f:10:5e:a6:4e:7b:69:fd:93:67:0a:21:44:
15:db:cd:ce:ea:3a:21:41:2b:c7:76:ea:d8:96:b9:
23:d6:62:18:b8:36:5c:43:72:43:48:d7:57:f7:4e:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:44:7E:DF:34:8E:58:8E:96:41:B2:13:0C:92:C8:10:24:99:6A
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/FEZEft80jliOlkGyEwySyBAkmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.8.0/21
45.66.112.0/22
185.144.4.0/22
185.172.160.0/22
IPv6:
2a10:40::/31
Signature Algorithm: sha256WithRSAEncryption
6e:e3:4b:41:78:93:40:49:9c:60:d2:d2:e5:a3:27:1a:07:04:
5b:7e:43:52:d6:9e:06:b8:40:2d:5d:78:5e:1e:d6:b5:a0:9b:
c9:93:a9:19:94:cb:c8:bc:ae:eb:1b:f3:7d:09:55:d2:c9:97:
4d:03:a8:d5:62:94:52:81:ce:b0:94:5c:06:42:b6:9d:1e:ab:
5b:31:e1:fc:37:0d:7d:20:bb:d2:bf:28:89:d5:fa:7c:35:0f:
a7:0a:0c:2b:6a:c8:e8:61:ac:43:59:17:58:5e:1e:db:7c:b2:
a3:23:88:dd:83:a6:55:ed:e4:f1:91:96:d8:c5:e2:d4:f4:8b:
e1:88:f2:58:06:24:24:50:0a:ba:db:90:fa:86:03:7c:71:4d:
31:9d:3e:41:f7:8a:92:3e:9d:74:24:c1:79:b9:1d:6d:3a:e1:
6f:9f:9b:1c:6b:f8:9c:87:f6:17:2e:54:24:60:a8:ec:fb:a9:
c0:7e:79:d1:07:91:e4:c5:a9:50:8a:cb:a2:20:b1:5f:03:be:
1c:7a:b4:81:19:95:06:e9:30:5e:a3:86:d0:6a:0b:1d:a0:92:
4a:79:7d:21:2e:24:53:35:83:ee:a0:11:f5:9b:8a:6e:ff:77:
65:a3:6c:a8:e4:0c:fc:12:ce:7d:ac:a9:91:63:7c:86:60:fc:
b8:47:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net