Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa
File: T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa (raw, json)
Hash identifier: LKcOl9u48RGXIFNErzIBt+0+CJzkc3SUSSRAWMDqgFc=
Subject key identifier: 4F:C9:64:BB:48:26:DD:F2:C8:7E:EA:75:A3:F2:06:27:E3:5F:F2:75
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019466977C93F10D9BE9B943A62E4AA88C9D
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa
Signing time: Tue 14 Jan 2025 20:53:11 +0000
ROA not before: Tue 14 Jan 2025 20:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57795
IP address blocks: 23.249.232.0/21 maxlen: 24
37.114.88.0/21 maxlen: 24
64.23.96.0/19 maxlen: 24
64.26.32.0/20 maxlen: 24
83.174.128.0/20 maxlen: 24
93.92.24.0/21 maxlen: 24
149.143.0.0/19 maxlen: 24
185.6.204.0/22 maxlen: 24
185.34.176.0/22 maxlen: 24
185.37.64.0/22 maxlen: 24
185.37.64.0/23 maxlen: 24
185.43.212.0/22 maxlen: 24
185.144.20.0/22 maxlen: 24
185.221.156.0/22 maxlen: 24
185.254.41.0/24 maxlen: 24
185.254.42.0/23 maxlen: 24
2a00:9340::/29 maxlen: 29
2a00:f5e0::/32 maxlen: 32
2a07:36c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:66:97:7c:93:f1:0d:9b:e9:b9:43:a6:2e:4a:a8:8c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Jan 14 20:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc964bb4826ddf2c87eea75a3f20627e35ff275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:ad:bb:fb:a8:47:3b:e7:dd:01:7f:58:6f:
a8:9f:38:a5:8e:b6:2e:1a:fc:2d:d8:dc:33:3f:20:
05:9f:f2:b2:a3:63:94:99:f5:b9:e2:69:b8:c3:d6:
7c:37:35:8b:7b:90:e4:27:75:15:0e:ae:9c:45:f4:
4b:b9:b2:30:de:72:3f:49:ad:8f:d2:ab:c6:e4:f4:
97:1f:28:89:e6:6f:96:c1:1f:96:23:2e:fd:dd:19:
dc:7f:aa:9d:e0:05:ac:a8:80:27:27:e1:b9:1e:b7:
b9:c2:8a:c3:98:04:75:01:be:81:44:ec:0d:06:eb:
f7:01:7f:32:d5:6c:ff:e1:62:2e:aa:33:19:9a:c0:
04:e3:e1:a0:15:e5:94:de:bd:45:b3:14:3a:7d:3b:
9a:20:bd:b6:74:88:b2:85:2d:25:e3:2e:46:4e:44:
60:30:39:81:b0:80:69:af:98:32:01:92:e4:40:55:
c3:c8:86:80:04:db:9a:a9:2a:ff:91:f2:ce:65:a7:
ec:03:86:8b:c1:fd:05:3c:c3:50:56:bd:00:a2:5e:
8f:ce:8b:ae:15:9d:a5:11:25:30:45:a6:a5:66:2c:
ba:bc:84:5b:33:25:db:13:58:10:80:e5:84:dd:8d:
24:96:1e:1a:aa:ad:20:fe:2c:16:9f:49:26:54:92:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:64:BB:48:26:DD:F2:C8:7E:EA:75:A3:F2:06:27:E3:5F:F2:75
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.232.0/21
37.114.88.0/21
64.23.96.0/19
64.26.32.0/20
83.174.128.0/20
93.92.24.0/21
149.143.0.0/19
185.6.204.0/22
185.34.176.0/22
185.37.64.0/22
185.43.212.0/22
185.144.20.0/22
185.221.156.0/22
185.254.41.0-185.254.43.255
IPv6:
2a00:9340::/29
2a00:f5e0::/32
2a07:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:78:93:c5:58:d5:ed:d4:2c:37:f7:4d:95:77:b8:cd:0a:1c:
af:22:60:e0:5f:50:a8:06:09:f7:ee:53:c4:7f:36:d3:21:90:
3f:8b:bb:75:14:b6:64:7a:f6:c9:ab:11:fd:84:34:53:04:00:
73:2a:74:2c:c7:a1:45:87:ad:3a:1d:b5:8a:44:96:90:92:b1:
e8:0a:d5:3f:a2:5d:23:22:a2:76:9d:3a:f1:d9:e1:de:f5:7a:
92:06:30:7a:be:cc:51:c5:e1:30:9a:81:57:20:00:3c:4e:da:
03:34:c9:ad:df:25:7a:07:88:a4:f5:ad:ea:a8:b3:f1:9a:67:
2e:15:01:6e:b9:f9:de:fe:39:01:78:86:ac:17:5c:64:4e:b6:
8b:da:31:a0:38:79:11:73:04:a4:6e:40:de:17:4a:17:cc:c3:
50:46:78:64:5d:63:18:9a:51:a0:eb:c4:bd:0c:80:50:39:c8:
0a:5f:36:99:0a:42:4a:8f:47:16:f9:22:c1:9f:38:e7:23:2e:
6f:41:cc:b8:4c:4b:34:16:29:63:d0:59:58:b5:d5:c9:1c:ed:
7e:f9:42:9e:23:11:cb:57:4a:9a:34:af:dd:9a:93:e2:5b:4f:
ad:43:a9:7c:c7:d4:c7:2d:be:98:52:26:14:6d:e5:19:86:55:
6b:97:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net