Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa
File: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (raw, json)
Hash identifier: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=
Subject key identifier: 02:2A:A4:7B:AB:C0:76:34:83:65:77:3B:FF:1F:B6:CE:D2:F6:1C:C3
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 01942143AA7EDB04C0E5A6D67D3C8D803358
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50090
IP address blocks: 217.74.24.0/24 maxlen: 24
217.74.25.0/24 maxlen: 24
217.74.26.0/24 maxlen: 24
217.74.27.0/24 maxlen: 24
217.74.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:aa:7e:db:04:c0:e5:a6:d6:7d:3c:8d:80:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=022aa47babc076348365773bff1fb6ced2f61cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:ad:ee:a0:e5:41:46:51:a0:a6:45:8f:f3:
d3:3d:7d:01:5f:f2:d6:a5:b9:43:27:ed:ce:b3:d1:
b9:8a:f1:04:4a:4d:7b:d5:69:ec:70:1d:65:9c:cb:
61:2e:d9:0e:81:6d:b1:58:7d:79:53:84:79:35:37:
6f:ae:d0:a1:d5:92:69:be:ab:98:63:9f:74:df:9f:
1a:7e:ea:a8:3f:22:75:e1:5c:ff:b1:1c:ce:a3:c5:
dd:2c:f1:fd:b7:85:ed:af:ed:de:16:bb:c2:15:4b:
39:4e:c1:94:2a:38:7f:d8:09:54:78:a1:38:9e:c6:
d3:d7:99:fc:6e:45:5c:92:34:1f:b7:f8:db:ef:cd:
df:86:28:1a:aa:81:18:23:21:72:cd:9f:9c:f6:69:
0e:88:9b:1d:bc:33:39:8c:0e:79:e7:75:6d:10:6c:
e4:a9:cb:ed:b8:b6:ef:9b:8c:0d:ea:29:bf:e4:c5:
9e:77:f3:c5:19:af:f1:12:38:54:d6:2c:50:f2:b4:
47:ba:d4:8f:cb:fe:16:39:b6:2d:2e:c9:a1:ef:0e:
99:19:57:ab:6e:40:08:f6:7e:b4:51:46:3c:5f:1b:
3c:56:d7:f9:31:83:ba:82:2c:bf:46:75:2e:d7:c8:
19:44:f7:cd:93:78:bb:85:a4:a6:1f:57:cd:cc:ca:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:A4:7B:AB:C0:76:34:83:65:77:3B:FF:1F:B6:CE:D2:F6:1C:C3
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.24.0-217.74.28.255
Signature Algorithm: sha256WithRSAEncryption
8b:3b:95:78:8b:fa:ff:cd:73:36:f5:06:c0:61:ae:1e:9d:0c:
d5:b8:15:c4:0e:2c:7a:62:89:83:e2:23:57:df:fd:34:93:51:
b3:fe:7d:0f:36:8b:8e:c3:91:f8:5e:86:a2:11:0c:b6:57:d8:
1e:f2:2d:36:40:03:67:02:fb:34:14:e0:72:fa:0f:c2:e0:cb:
82:25:45:74:90:af:6e:44:7b:04:06:5d:24:10:c6:9e:a1:90:
a5:80:a4:2d:8a:43:be:7c:f7:7b:3d:00:cf:d4:9a:1d:d4:78:
10:fe:4c:8e:80:45:7b:1e:32:8a:e2:48:eb:ae:bb:0b:0d:f2:
7e:cb:c9:d1:74:e4:cc:52:79:db:2a:de:32:cc:a7:23:89:6b:
d2:3f:82:c8:6f:bb:8a:8b:c1:a3:33:59:a9:8b:2e:3a:aa:6b:
82:63:f2:68:0c:b4:20:78:30:61:95:ef:45:b1:1e:96:90:f0:
ba:1d:1c:ec:69:f5:d5:9e:35:b1:e9:3b:1d:17:01:f2:08:c1:
92:1c:77:c0:2b:7f:cf:8e:59:51:0b:b3:70:04:68:78:f4:2f:
e0:d3:15:be:0a:dc:44:5e:d3:04:18:cf:58:2d:cb:8e:6d:b4:
02:8b:41:cc:82:87:62:d8:24:8b:4b:ac:da:0b:ea:6d:f2:fd:
3a:95:48:28
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhQ6p+2wTA5abWfTyNgDNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjUxOGM0MjZjZmM0MDgyZmI5MmVjNzQwZDdjM2M3ODgy
NTU2M2IwHhcNMjUwMTAxMDk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjJhYTQ3YmFiYzA3NjM0ODM2NTc3M2JmZjFmYjZjZWQyZjYxY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZSt7qDlQUZRoKZFj/PTPX0BX/LW
pblDJ+3Os9G5ivEESk171WnscB1lnMthLtkOgW2xWH15U4R5NTdvrtCh1ZJpvquY
Y590358afuqoPyJ14Vz/sRzOo8XdLPH9t4Xtr+3eFrvCFUs5TsGUKjh/2AlUeKE4
nsbT15n8bkVckjQft/jb783fhigaqoEYIyFyzZ+c9mkOiJsdvDM5jA5553VtEGzk
qcvtuLbvm4wN6im/5MWed/PFGa/xEjhU1ixQ8rRHutSPy/4WObYtLsmh7w6ZGVer
bkAI9n60UUY8Xxs8Vtf5MYO6giy/RnUu18gZRPfNk3i7haSmH1fNzMpq1wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAIqpHurwHY0g2V3O/8fts7S9hzDMB8GA1UdIwQY
MBaAFO1lGMQmz8QIL7kux0DXw8eIJVY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYt
MDViM2I5NzA5ZjA5LzEvQWlxa2U2dkFkalNEWlhjN194LTJ6dEwySE1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYtMDViM2I5NzA5ZjA5
LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPZShgD
BADZShwwDQYJKoZIhvcNAQELBQADggEBAIs7lXiL+v/Nczb1BsBhrh6dDNW4FcQO
LHpiiYPiI1ff/TSTUbP+fQ82i47DkfhehqIRDLZX2B7yLTZAA2cC+zQU4HL6D8Lg
y4IlRXSQr25EewQGXSQQxp6hkKWApC2KQ75893s9AM/Umh3UeBD+TI6ARXseMori
SOuuuwsN8n7LydF05MxSedsq3jLMpyOJa9I/gshvu4qLwaMzWamLLjqqa4Jj8mgM
tCB4MGGV70WxHpaQ8LodHOxp9dWeNbHpOx0XAfIIwZIcd8Arf8+OWVELs3AEaHj0
L+DTFb4K3ERe0wQYz1gty45ttAKLQcyCh2LYJItLrNoL6m3y/TqVSCg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net