Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Rp8fxcLKkkldzr9NKHoycDdZmcY.roa
File: Rp8fxcLKkkldzr9NKHoycDdZmcY.roa (raw, json)
Hash identifier: pwYOFujYISzC4oGuTnK76LZ1N3L4Kc4WvVqV0Z88I2Y=
Subject key identifier: 46:9F:1F:C5:C2:CA:92:49:5D:CE:BF:4D:28:7A:32:70:37:59:99:C6
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 019426C17182154FA72C27ECC7ECD432D7DE
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Rp8fxcLKkkldzr9NKHoycDdZmcY.roa
Signing time: Thu 02 Jan 2025 11:23:19 +0000
ROA not before: Thu 02 Jan 2025 11:23:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43843
IP address blocks: 91.142.64.0/21 maxlen: 21
91.142.68.0/24 maxlen: 24
91.142.69.0/24 maxlen: 24
91.142.70.0/24 maxlen: 24
91.142.71.0/24 maxlen: 24
93.94.24.0/21 maxlen: 21
93.94.24.0/24 maxlen: 24
93.94.25.0/24 maxlen: 24
93.94.26.0/24 maxlen: 24
93.94.28.0/24 maxlen: 24
109.69.128.0/21 maxlen: 21
109.69.128.0/24 maxlen: 24
109.69.129.0/24 maxlen: 24
109.69.130.0/24 maxlen: 24
109.69.131.0/24 maxlen: 24
109.69.132.0/24 maxlen: 24
185.74.248.0/22 maxlen: 22
185.74.248.0/24 maxlen: 24
185.74.249.0/24 maxlen: 24
212.78.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:c1:71:82:15:4f:a7:2c:27:ec:c7:ec:d4:32:d7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jan 2 11:23:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=469f1fc5c2ca92495dcebf4d287a3270375999c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:06:41:15:db:c8:62:62:2e:88:d3:ad:1e:
20:5a:f2:53:ce:db:1c:c1:8f:92:96:4e:3c:a9:8f:
1a:c3:cf:06:fa:8d:de:d3:b4:99:54:8a:1f:85:47:
bd:bc:d8:03:a6:aa:6f:6b:f9:84:7d:af:58:57:d8:
58:1e:de:5a:a4:6e:c5:f1:b5:74:4e:ad:5a:d2:32:
65:c4:8f:8b:ce:00:35:0b:60:05:4a:1c:1c:f0:8d:
e0:23:41:f0:4d:41:2e:29:8d:a5:4f:8b:f8:74:c2:
5b:dd:dd:f8:9a:07:90:63:22:b0:3e:7b:28:3f:85:
e8:d3:26:05:c8:b6:c3:e5:29:c6:99:ac:eb:b2:d9:
0d:b3:a9:26:d2:e0:39:3a:01:8b:c4:d7:75:7b:c7:
d4:a3:2a:ae:f9:a4:f9:ab:d0:be:42:97:17:d0:aa:
5e:a0:f8:a4:37:23:64:b3:36:7e:c1:41:1d:67:b7:
3f:d5:9b:4a:7b:5f:9e:be:54:bb:cc:24:bd:64:ca:
46:72:26:74:f4:6b:47:76:29:c9:c1:61:69:b7:b5:
62:b8:af:a5:95:88:3f:ce:a4:0b:bd:74:b7:e4:95:
9c:e0:ae:88:37:f0:3c:21:85:e1:1e:c7:d0:97:d8:
49:5c:87:a8:d2:8a:a1:9c:32:86:76:5b:f1:ce:d2:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9F:1F:C5:C2:CA:92:49:5D:CE:BF:4D:28:7A:32:70:37:59:99:C6
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Rp8fxcLKkkldzr9NKHoycDdZmcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.64.0/21
93.94.24.0/21
109.69.128.0/21
185.74.248.0/22
212.78.31.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5e:3a:da:4c:0d:00:6d:3d:ff:d5:16:fc:94:6a:6c:37:fb:
3e:20:86:79:a8:eb:ae:d4:90:e1:51:a8:18:9f:4a:a9:cc:54:
52:4a:79:fe:c7:5d:33:fc:97:63:6c:dd:ea:6b:3c:c0:17:24:
30:90:4f:e0:5d:95:f8:31:5c:e4:08:f1:70:b3:59:c8:00:70:
2c:5b:52:19:5c:42:8f:2f:eb:e1:fa:f1:46:c3:c1:47:45:93:
6c:f8:01:fe:94:2f:91:bd:6a:dc:f0:08:d9:c8:e0:24:f0:10:
42:9c:b5:65:82:08:cd:10:ea:f5:ad:82:36:80:ad:1f:dc:0a:
69:17:e4:e9:c0:d2:52:08:f3:8b:b7:35:2d:e9:cd:7d:91:29:
48:e1:2d:21:0d:25:3e:b2:3d:cb:9d:11:c0:f9:31:37:8b:ea:
e9:cc:95:4c:ae:5e:79:53:af:0f:03:56:1f:06:7d:b2:02:70:
2f:00:19:bd:67:d6:b1:88:3c:b0:99:d3:15:c8:47:3a:75:74:
87:91:4f:06:06:3a:ce:0b:ee:f4:56:5b:f2:53:eb:f0:cf:f0:
17:65:84:e7:a7:0f:00:03:84:48:d4:5e:93:1f:a2:61:59:66:
de:2c:6f:a6:90:59:45:63:2e:58:37:8c:ec:9a:d0:68:19:e6:
c3:c9:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net