Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/eUeAvm73-2L5UqqKdbnJ3M6g16M.roa
File: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (raw, json)
Hash identifier: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=
Subject key identifier: 79:47:80:BE:6E:F7:FB:62:F9:52:AA:8A:75:B9:C9:DC:CE:A0:D7:A3
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 019421B1EB306DE020BCE90728532D1E7690
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/eUeAvm73-2L5UqqKdbnJ3M6g16M.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39657
IP address blocks: 81.30.16.0/20 maxlen: 20
81.30.20.0/24 maxlen: 24
81.93.32.0/20 maxlen: 24
81.93.32.0/21 maxlen: 21
81.93.32.0/22 maxlen: 24
81.93.36.0/22 maxlen: 24
81.93.40.0/21 maxlen: 21
81.93.40.0/22 maxlen: 24
81.93.44.0/22 maxlen: 24
93.88.32.0/20 maxlen: 24
93.88.32.0/22 maxlen: 24
93.88.36.0/22 maxlen: 24
93.88.40.0/22 maxlen: 24
93.88.44.0/22 maxlen: 24
185.63.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:eb:30:6d:e0:20:bc:e9:07:28:53:2d:1e:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794780be6ef7fb62f952aa8a75b9c9dccea0d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:73:d5:d6:fa:f1:05:ba:c9:79:59:00:99:
a7:ad:fd:d8:9c:91:30:dd:d5:ea:b4:35:8f:32:31:
ea:d3:51:44:9a:8a:a7:ea:76:93:bc:c7:fe:9a:25:
e9:5e:de:1f:09:dc:66:5c:85:85:34:17:3e:07:08:
31:6a:0a:95:96:4f:6c:3f:9f:74:0e:c4:15:0a:7f:
67:97:8a:b5:91:b2:fe:16:2d:e2:96:e4:60:71:ee:
82:27:0d:6b:33:1b:71:b9:5d:46:3e:65:86:8b:7d:
35:e6:59:61:70:5e:53:f1:b1:99:48:12:40:4a:4e:
71:40:a1:1b:48:65:71:5f:39:54:ef:89:41:cd:22:
13:f0:b6:ca:a7:9f:ba:d3:01:14:9d:14:7f:20:3d:
50:5b:5e:df:0a:9f:97:33:03:6f:a7:ad:c4:18:fa:
12:cc:04:d7:c8:58:50:a9:af:79:1d:58:df:f2:59:
f0:75:e3:13:d1:be:94:2b:00:af:42:bd:cc:75:ca:
10:a3:7b:cb:4e:83:f4:88:69:7f:f2:5e:26:c3:b9:
e4:58:2a:bf:a9:48:9b:33:57:06:42:95:e1:8d:a5:
c4:c4:d3:97:80:7c:3a:11:28:ee:bc:69:1f:70:69:
34:b4:87:02:b9:c4:da:a3:59:20:25:aa:c3:81:c7:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:80:BE:6E:F7:FB:62:F9:52:AA:8A:75:B9:C9:DC:CE:A0:D7:A3
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/eUeAvm73-2L5UqqKdbnJ3M6g16M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.16.0/20
81.93.32.0/20
93.88.32.0/20
185.63.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:64:3f:49:8a:fc:93:00:27:b9:39:0f:e3:27:64:77:a0:c0:
6c:bd:13:50:db:ea:ce:5d:4d:d6:06:17:79:d0:50:4c:17:b3:
4c:36:9a:79:36:f9:3c:99:49:3a:43:a9:6d:54:8d:bb:86:70:
26:74:07:cc:f7:f3:85:64:33:78:13:fc:21:a6:84:cf:0d:18:
a1:75:0d:5a:9e:01:e5:4d:dd:06:ca:f0:af:55:4c:bc:c3:fa:
60:71:ea:42:b3:a4:b9:2f:15:0a:1b:66:d9:c2:20:35:03:43:
41:8e:00:2f:c2:00:dd:8f:d7:b1:d8:33:a1:2e:94:d6:86:6c:
21:e3:d1:5e:c3:83:e5:a3:18:7d:76:c0:b6:c9:1f:e8:96:75:
59:16:f9:fb:b0:88:3f:65:60:aa:ee:c7:0f:67:f8:f0:05:26:
88:95:e5:54:4a:bf:bb:c2:3b:fb:aa:17:dd:d7:e4:eb:5f:87:
e3:1e:a2:58:18:d1:7f:54:43:76:ec:2e:e7:9b:1d:d1:ff:77:
88:ef:10:0b:d1:dd:93:89:be:7a:ec:d1:81:6f:04:c3:cf:0d:
f5:23:8f:40:ad:a8:c0:5b:79:96:34:ed:06:e6:83:e9:7d:cb:
8b:24:1e:65:7f:53:a6:ae:34:bb:80:69:02:0c:5f:42:e3:e3:
b3:1e:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net