Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/UmI6d2m9R3iczzZVeRe1gk47NKM.roa
File: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (raw, json)
Hash identifier: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=
Subject key identifier: 52:62:3A:77:69:BD:47:78:9C:CF:36:55:79:17:B5:82:4E:3B:34:A3
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019426D9C5582029EF916F0917832CF8531B
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/UmI6d2m9R3iczzZVeRe1gk47NKM.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35393
IP address blocks: 84.246.224.0/21 maxlen: 24
92.39.240.0/20 maxlen: 24
94.247.24.0/21 maxlen: 24
185.111.228.0/22 maxlen: 24
185.158.44.0/22 maxlen: 24
188.208.198.0/23 maxlen: 24
2a02:23e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c5:58:20:29:ef:91:6f:09:17:83:2c:f8:53:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52623a7769bd47789ccf36557917b5824e3b34a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:2f:60:a7:20:f1:9b:ff:bc:39:d5:f6:27:
3c:65:83:37:9d:75:c6:d7:2d:ff:0e:45:8c:c0:e7:
3b:74:80:60:b4:5c:7a:af:15:1f:c9:f5:fa:c4:98:
ac:aa:63:1e:31:7f:ee:dc:72:7e:1d:62:28:85:e1:
ab:1f:ef:47:ce:43:a5:64:40:4d:80:9d:60:23:f1:
70:5b:cd:a7:07:55:08:18:de:a1:b1:d5:86:ff:1a:
2f:08:a6:06:be:2d:f3:95:e0:03:5b:0b:f4:92:8b:
26:dd:2a:7d:62:43:c5:fb:b8:05:b9:62:ea:d9:26:
ce:77:32:89:2a:2c:39:0d:b3:18:32:5e:7f:1a:80:
13:37:4b:2e:8f:19:e3:31:6e:d1:42:94:39:5d:b2:
51:45:e6:07:43:d7:ea:3f:da:0c:7a:eb:25:80:da:
99:e7:fa:e1:0f:ba:e3:c3:0b:e8:88:49:b4:73:0a:
63:1f:ec:fa:91:2e:f5:2b:45:71:be:55:2b:85:b2:
d5:33:10:f2:8b:1d:13:d6:2d:c8:51:7d:52:93:00:
c2:34:1c:a6:ed:25:79:e1:fb:66:af:00:db:f9:49:
dc:fd:58:2d:2b:37:38:53:d4:9a:bf:8e:bc:eb:01:
57:c8:1d:1a:e5:bf:1d:59:e1:3d:4c:a9:1d:f0:8e:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:3A:77:69:BD:47:78:9C:CF:36:55:79:17:B5:82:4E:3B:34:A3
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/UmI6d2m9R3iczzZVeRe1gk47NKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.224.0/21
92.39.240.0/20
94.247.24.0/21
185.111.228.0/22
185.158.44.0/22
188.208.198.0/23
IPv6:
2a02:23e0::/32
Signature Algorithm: sha256WithRSAEncryption
42:7a:0c:12:ab:36:b1:62:00:c2:08:26:b7:34:2f:46:0b:ca:
72:59:0c:77:83:3a:3d:c8:ee:1d:69:6b:c2:e7:49:b2:32:7b:
ce:20:49:49:a0:1a:3f:f3:9c:c9:04:da:eb:72:78:2a:1a:d6:
02:68:20:29:79:9d:81:f1:c2:63:50:6d:c1:90:27:c6:ae:63:
67:e6:e0:10:76:c4:20:cd:f8:fc:f9:a9:20:25:8e:a9:84:bb:
88:95:85:4b:12:c1:e1:10:71:75:87:7d:9b:93:f3:f5:b6:51:
5d:ba:67:89:84:03:ad:5e:4c:d0:fb:f0:10:06:7b:c6:a7:dd:
d6:70:c3:dd:02:30:9a:32:26:4c:4f:e6:db:50:2f:99:2c:de:
b1:fc:54:23:73:43:ce:f8:94:13:c4:b6:d1:4c:52:88:a2:a1:
d4:8f:27:e8:f7:6a:12:4c:3e:9a:e1:b7:6b:43:9b:16:a5:c6:
9f:aa:57:51:77:95:bc:86:6f:b3:ff:a9:b1:d6:55:6d:d4:f6:
1c:aa:cc:03:66:90:c9:c9:b2:b0:43:a8:e6:18:ea:dc:f8:88:
14:fc:1f:4a:fa:6f:ed:ae:7c:57:de:47:15:4c:47:40:0c:c9:
05:b9:e1:82:f4:77:6b:25:b8:ba:4a:4b:18:d8:6c:9f:60:16:
b5:71:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net