Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dgmV7TSY-03loYbB5Fu02GAU8d8.roa
File: dgmV7TSY-03loYbB5Fu02GAU8d8.roa (raw, json)
Hash identifier: Nz/qh00D17aVcfptiPVSHS0PIj3rqyEs68bdhu1+ZdY=
Subject key identifier: 76:09:95:ED:34:98:FB:4D:E5:A1:86:C1:E4:5B:B4:D8:60:14:F1:DF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0195C8E33F359C1D4B119D470FDFCC64F440
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dgmV7TSY-03loYbB5Fu02GAU8d8.roa
Signing time: Mon 24 Mar 2025 16:01:30 +0000
ROA not before: Mon 24 Mar 2025 16:01:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.97.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:e3:3f:35:9c:1d:4b:11:9d:47:0f:df:cc:64:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 24 16:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=760995ed3498fb4de5a186c1e45bb4d86014f1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:1b:de:d3:7b:1f:2b:ce:46:c7:3d:18:2e:
0a:25:be:18:d9:21:51:93:ef:3e:55:15:18:3e:a4:
06:d1:55:a3:5c:8c:39:e9:5a:ec:24:d9:15:d8:5d:
66:cd:1a:3f:7a:7f:c0:2b:a8:74:b0:10:be:d9:6b:
22:f6:e4:ef:c5:4e:6d:cd:16:f9:43:92:3d:3b:f8:
be:d6:ab:c6:80:5f:49:4d:f8:43:d4:8d:7d:04:43:
51:4c:64:50:28:7c:09:51:38:ab:49:38:40:25:c1:
22:eb:e2:92:de:d8:23:81:c2:2d:ea:4a:3f:4e:43:
0c:41:24:dd:6d:c6:18:3f:4e:a3:6c:a6:d5:2b:ae:
d5:d7:66:bf:7a:c8:79:fc:bd:89:08:bb:bb:49:a7:
ab:23:db:10:86:97:cc:62:6b:d7:fc:36:9b:18:c8:
7f:9d:ec:c7:fb:af:f6:11:4b:2f:0b:49:f9:34:c6:
bb:e3:91:43:f6:89:43:96:e5:1d:97:99:67:52:d5:
32:a4:fa:27:a8:14:6c:78:08:f1:d9:11:2c:4b:6e:
3c:6d:1f:d2:fe:59:55:b5:02:fb:67:d2:98:2d:3a:
be:16:10:32:e8:0e:99:ee:53:2e:d8:e7:c1:1e:5e:
10:1c:bb:60:25:eb:51:2a:20:73:9b:a5:d8:7d:61:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:95:ED:34:98:FB:4D:E5:A1:86:C1:E4:5B:B4:D8:60:14:F1:DF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dgmV7TSY-03loYbB5Fu02GAU8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
14.102.234.0/24
45.151.140.0/24
77.111.96.0/22
85.208.10.0/24
94.229.212.0/24
94.229.220.0/24
94.229.223.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
11:89:e9:22:f4:cc:d8:6f:7d:da:4f:10:7c:7b:f3:64:40:4d:
40:57:14:38:9d:6b:3c:ae:e0:54:5a:d1:a2:cb:17:8c:cc:35:
6b:5b:b1:f4:75:d1:80:6f:b9:7b:46:89:4a:49:75:f8:c7:04:
b8:9f:cf:07:3a:94:6c:5f:38:da:4a:a1:cb:b3:0b:fe:dd:23:
82:05:7e:8a:4b:ce:1c:fb:2f:67:eb:80:ef:26:5d:f2:32:8e:
4f:56:c2:14:db:ce:74:01:ae:98:73:21:69:25:0a:7a:0d:45:
e8:b5:d3:de:f2:55:6a:eb:42:f0:11:d7:c8:2a:12:a9:93:da:
05:5f:c7:84:26:7d:2f:e5:4e:d2:e1:10:7d:fc:cf:ed:6a:6f:
93:78:db:7a:fc:6c:f6:5c:5d:87:b0:57:4f:4e:78:04:15:c3:
e4:16:8a:e2:47:d1:d7:9d:c2:f9:3e:f1:a3:13:df:26:73:94:
27:18:d9:7c:ec:8a:21:3d:9c:bf:72:48:6b:99:fa:d3:eb:14:
e7:54:0b:16:06:83:cd:0d:69:77:42:51:3e:14:2c:99:d0:5f:
5e:b3:10:46:40:89:a9:1f:75:ec:17:f1:e9:21:86:d3:f0:da:
9a:be:66:1b:62:2f:1b:9a:5d:e4:75:4c:b7:5c:31:bf:2e:46:
47:c9:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:17:44 2025 by rpki-client on console.sobornost.net