Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PWMi9fca1q3z2smHrKBuv14V_jE.roa
File: PWMi9fca1q3z2smHrKBuv14V_jE.roa (raw, json)
Hash identifier: Yi5b1WklKcoRZUCDlzWfUq3Ht5hT4Kqoj0REWDCcGFw=
Subject key identifier: 3D:63:22:F5:F7:1A:D6:AD:F3:DA:C9:87:AC:A0:6E:BF:5E:15:FE:31
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0196199CC5C9C3A686219FFEBFBEB9572CED
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PWMi9fca1q3z2smHrKBuv14V_jE.roa
Signing time: Wed 09 Apr 2025 08:13:46 +0000
ROA not before: Wed 09 Apr 2025 08:13:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
213.220.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:9c:c5:c9:c3:a6:86:21:9f:fe:bf:be:b9:57:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 9 08:13:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6322f5f71ad6adf3dac987aca06ebf5e15fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:ba:4d:5f:1c:50:2d:21:4f:62:5f:07:9f:
c3:79:96:15:f6:a1:d9:1d:b5:64:c0:9c:79:b5:ce:
f7:fe:d7:a5:bb:0e:a4:11:88:f9:8b:1a:78:94:b1:
15:68:55:45:de:9c:9f:87:bf:a0:88:32:cb:26:c0:
dd:9a:eb:49:40:5f:d9:f6:ee:d7:37:4a:f5:7c:b8:
7c:41:93:8c:fa:e8:9d:83:64:47:c1:2e:29:e4:a2:
24:6d:a8:c5:67:6e:1d:67:c1:55:7a:f2:28:47:70:
7d:eb:84:77:18:a5:11:50:2d:5a:d9:4a:32:ef:bd:
81:19:05:24:92:ac:c7:9f:86:33:57:56:b4:29:ce:
4e:17:a8:69:00:05:f3:9d:93:48:fa:e0:f8:3c:91:
a6:e1:c1:e4:a4:94:ac:29:9b:0e:2e:a0:ef:c8:d1:
e0:f6:8d:72:70:9a:52:43:1a:2f:96:35:37:4b:e2:
48:08:d1:32:a1:3f:8c:a9:47:a8:97:2f:f6:05:02:
1a:69:75:7e:01:3f:bf:99:3c:4c:bf:0d:da:df:4a:
4c:d3:34:e7:1a:0c:ca:46:81:91:69:82:d4:6c:0e:
ca:23:71:92:ef:73:61:3d:1a:7b:67:f8:20:9c:17:
92:42:ea:44:87:4a:5a:9f:d4:ed:9a:48:b8:56:b2:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:22:F5:F7:1A:D6:AD:F3:DA:C9:87:AC:A0:6E:BF:5E:15:FE:31
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PWMi9fca1q3z2smHrKBuv14V_jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.217.0/24
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0/24
213.220.5.0/24
213.220.19.0/24
213.220.58.0-213.220.60.255
213.220.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2b:87:6b:4d:57:38:58:8f:54:71:1b:ef:21:99:bd:b0:43:
71:09:b6:9b:75:b6:aa:f6:d9:fa:30:0f:46:d5:fd:cb:a6:d1:
d6:7c:b4:da:df:d8:84:cb:57:52:58:d6:e7:e9:34:9a:ab:61:
0c:99:96:c1:65:e1:35:10:74:bc:8c:31:d5:c2:16:ae:65:15:
eb:c8:be:b8:68:8c:d7:0d:1d:4d:8e:84:fb:4b:c2:5e:bb:a1:
73:ca:9a:60:02:9c:0c:09:d5:ba:41:40:e5:2a:57:bb:e7:c7:
0e:71:64:3b:33:2b:4b:88:08:31:3b:8e:05:df:57:45:23:30:
b7:c9:74:db:b8:12:f1:6f:c4:1e:01:72:63:c3:80:94:8d:f1:
da:99:4f:2d:d4:44:20:4f:2f:7f:8b:df:d8:2b:31:39:2f:f0:
14:35:8e:30:fa:21:de:fa:fd:fb:04:76:1f:bd:1a:6e:c9:87:
29:71:cf:54:af:15:3d:1d:af:c2:f5:96:db:03:c0:80:0c:28:
7d:91:17:7a:65:ff:a3:d9:f5:b2:4f:83:58:1a:28:3e:85:e5:
1b:70:48:3f:22:13:ab:72:7e:36:87:67:0a:97:be:4b:7c:77:
c9:53:1e:03:13:a5:ba:4a:17:65:f5:7d:1c:7a:eb:00:77:0f:
7c:12:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net