Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa
File: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (raw, json)
Hash identifier: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=
Subject key identifier: 9C:26:A1:7F:9B:6B:11:7B:75:2E:5E:06:C4:D0:48:95:02:72:16:84
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019424B3A853393F4B120F3F579494D103F2
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 62.102.148.0/23 maxlen: 23
62.102.151.0/24 maxlen: 24
78.108.48.0/20 maxlen: 20
91.190.136.0/21 maxlen: 21
176.56.240.0/20 maxlen: 20
185.170.180.0/22 maxlen: 22
185.204.144.0/22 maxlen: 22
2a00:1520::/32 maxlen: 32
2a02:2490::/32 maxlen: 32
2a0b:b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:53:39:3f:4b:12:0f:3f:57:94:94:d1:03:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c26a17f9b6b117b752e5e06c4d0489502721684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:e0:49:58:28:72:bd:22:90:e1:14:ec:e4:
63:37:0e:a5:5d:1a:ff:8b:4c:77:aa:ff:72:39:4b:
27:ba:03:0a:c3:67:bd:55:3d:b8:32:f3:0b:a8:c6:
95:09:3c:80:0c:6b:a2:95:79:92:9c:8d:95:86:9e:
73:01:77:42:18:92:29:7b:09:0c:ac:98:7d:3b:00:
b3:ed:fc:65:66:48:10:06:39:c8:9c:c3:d6:d4:48:
ad:64:4a:db:51:3d:d4:03:0b:62:0b:21:47:90:fc:
29:5e:f2:63:b6:aa:cd:c3:5d:ef:05:97:91:ae:50:
44:f8:00:2b:d6:32:ac:3c:fa:10:a2:4b:99:b8:ba:
f9:32:f2:4c:ca:b5:ab:68:f4:df:95:fd:89:40:5e:
f3:56:08:42:51:1b:73:ed:df:64:36:3a:8f:b7:90:
01:cc:a0:a5:29:84:5b:fe:08:ed:f0:76:03:97:a8:
18:ee:9c:58:7b:2e:dd:cf:5e:d7:18:22:a3:ca:cb:
85:61:59:e4:e1:f7:d6:d8:81:00:3a:b6:fa:03:7b:
66:ae:7c:bd:a6:8d:cd:28:ec:7a:9a:88:d9:91:e9:
48:af:fb:90:af:ea:f0:48:ac:64:09:7b:75:0f:6f:
e0:48:21:60:d3:d2:de:8f:66:e8:86:e9:11:15:13:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:A1:7F:9B:6B:11:7B:75:2E:5E:06:C4:D0:48:95:02:72:16:84
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.148.0/23
62.102.151.0/24
78.108.48.0/20
91.190.136.0/21
176.56.240.0/20
185.170.180.0/22
185.204.144.0/22
IPv6:
2a00:1520::/32
2a02:2490::/32
2a0b:b40::/29
Signature Algorithm: sha256WithRSAEncryption
15:7b:91:a5:67:66:d7:6f:47:5e:a5:aa:56:9b:ee:05:ef:c0:
c4:f1:73:5a:88:4e:bb:24:81:2e:37:9d:72:6f:d3:ea:6c:34:
4b:19:d9:52:20:00:eb:26:b4:37:11:67:87:03:b1:84:c2:07:
af:7b:ba:34:ad:75:ca:64:4b:e3:a1:2d:cc:3b:ab:1f:e1:d1:
fd:07:5b:f9:f8:2c:fc:5c:e8:f1:63:61:f3:25:84:6f:17:c8:
c8:66:1e:68:d9:2b:51:4a:a9:11:f0:07:5c:d7:f3:a6:8f:65:
dc:9f:03:8a:4d:13:b9:46:b3:46:48:c8:0e:f9:51:92:37:d9:
42:7b:8d:71:cc:4b:bb:e3:14:7f:91:49:fe:78:d9:94:42:ea:
00:52:6e:5d:82:2f:26:d9:1b:fe:49:b5:78:f4:91:e4:96:78:
aa:84:c2:01:7b:b7:5d:02:da:62:59:c6:28:72:54:5b:e9:39:
c7:7e:fa:d3:50:58:89:5e:34:d1:66:cd:c8:63:4b:94:95:00:
97:39:69:57:22:71:dc:22:b1:42:21:6c:b8:fb:54:07:1e:8b:
2f:4f:6d:68:5d:14:a3:5f:01:20:85:71:ca:6f:93:77:7e:f7:
c9:84:a9:21:db:42:c7:40:51:ec:c9:a3:a9:96:ed:49:57:cc:
a3:e7:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net