Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/aSlfyLBw9tgMgXUQzZob6GMDMuM.roa
File: aSlfyLBw9tgMgXUQzZob6GMDMuM.roa (raw, json)
Hash identifier: DQ6riuAx/+y5wvPOEmkDzdZnToFJiPSBUt3sxo+9O3s=
Subject key identifier: 69:29:5F:C8:B0:70:F6:D8:0C:81:75:10:CD:9A:1B:E8:63:03:32:E3
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 019574C5DF92F3C5FA6A479EFE279C30F19A
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/aSlfyLBw9tgMgXUQzZob6GMDMuM.roa
Signing time: Sat 08 Mar 2025 08:01:19 +0000
ROA not before: Sat 08 Mar 2025 08:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200044
IP address blocks: 89.249.16.0/20 maxlen: 24
89.249.31.0/24 maxlen: 24
93.158.192.0/21 maxlen: 21
93.158.192.0/22 maxlen: 22
93.158.192.0/23 maxlen: 23
93.158.192.0/24 maxlen: 24
93.158.193.0/24 maxlen: 24
93.158.194.0/23 maxlen: 23
93.158.194.0/24 maxlen: 24
93.158.195.0/24 maxlen: 24
93.158.196.0/24 maxlen: 24
93.158.197.0/24 maxlen: 24
93.158.198.0/23 maxlen: 23
93.158.198.0/24 maxlen: 24
93.158.199.0/24 maxlen: 24
109.238.240.0/20 maxlen: 24
109.238.246.0/24 maxlen: 24
185.159.64.0/22 maxlen: 24
185.159.64.0/24 maxlen: 24
194.156.28.0/22 maxlen: 22
194.156.28.0/24 maxlen: 24
2a00:eb8::/32 maxlen: 32
2a0d:380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:c5:df:92:f3:c5:fa:6a:47:9e:fe:27:9c:30:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Mar 8 08:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69295fc8b070f6d80c817510cd9a1be8630332e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:1b:0c:f3:a7:47:18:4a:9b:0a:61:9b:a8:
5a:dd:10:77:38:17:cb:3f:db:d8:51:8b:48:52:eb:
e7:b2:a6:00:36:ae:ef:3a:09:64:cc:f2:cd:cd:48:
7c:8c:6d:3e:f3:67:bc:30:57:12:66:2f:f6:9c:f1:
1e:25:17:52:0a:ac:6e:cb:9a:b3:9f:79:30:ac:22:
62:f6:58:71:1f:a6:5e:9a:a8:4f:14:dc:a7:28:c4:
8a:01:9d:69:9f:f2:9c:80:e3:29:bb:2c:64:75:ba:
2e:14:31:f7:ee:72:3c:79:ed:4a:93:1d:d5:0d:58:
dc:7f:26:39:ad:ec:2e:31:66:e8:70:51:e2:9d:a4:
ec:2e:0e:03:32:97:09:38:39:05:49:29:c5:f4:0d:
6c:29:52:93:7f:3a:af:64:88:3f:2f:07:10:62:9b:
2d:2a:c7:dd:3b:5e:50:38:7a:a9:ea:ca:35:f9:1f:
a1:6a:5e:30:46:bc:f0:7e:58:5f:26:63:6a:b4:72:
9a:99:4d:36:17:0a:a6:24:5c:8a:6a:32:d3:5f:e6:
95:89:7c:f4:f1:ab:ec:68:1a:38:68:73:33:50:de:
92:f1:d6:b1:d1:11:d9:c3:e1:32:c1:b3:17:1f:6a:
d0:35:30:6c:9f:29:ef:c0:67:a7:33:27:85:e6:cf:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:5F:C8:B0:70:F6:D8:0C:81:75:10:CD:9A:1B:E8:63:03:32:E3
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/aSlfyLBw9tgMgXUQzZob6GMDMuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.16.0/20
93.158.192.0/21
109.238.240.0/20
185.159.64.0/22
194.156.28.0/22
IPv6:
2a00:eb8::/32
2a0d:380::/29
Signature Algorithm: sha256WithRSAEncryption
2a:51:4a:6e:2a:4e:3f:0a:53:9e:cc:23:f8:b0:b2:6e:b5:9c:
7f:da:97:72:90:36:59:0c:12:d5:e0:b0:9b:35:a4:6f:90:8b:
51:35:79:bc:81:43:ac:96:13:8e:48:f7:79:71:d3:a7:2b:7d:
ee:11:53:67:07:28:97:a7:67:b0:a8:28:43:43:d2:3a:66:2e:
27:b9:91:7d:bf:f4:4d:41:85:63:f4:21:48:de:0c:a5:9d:35:
da:48:c7:23:20:5c:18:7d:99:9e:aa:a7:f6:e3:76:78:d8:ac:
a1:f3:81:1f:24:df:57:d7:6a:7a:c1:56:47:7e:c9:ff:6b:47:
38:5d:48:26:c0:dc:f2:67:8e:ed:cd:40:0d:a1:08:25:39:93:
de:48:55:d9:91:f7:f1:e6:f7:c2:8b:17:4d:f4:b3:76:8a:05:
bb:78:ad:dd:0a:84:8c:0d:38:19:70:3a:2a:48:72:56:0b:cd:
59:e8:d4:0c:ea:e7:33:e0:8b:5e:1d:cd:01:55:93:b2:0c:ba:
e2:6a:30:e6:a1:89:fa:44:47:c0:32:30:1f:fb:da:14:0a:b4:
cb:48:f4:65:32:21:dd:38:20:14:c9:db:37:61:2b:ca:33:70:
ef:c3:1e:31:1b:ac:42:83:59:68:ed:f4:58:2a:0d:22:e9:24:
e0:85:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net