Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/abGEnkiRCC-QdoOIOJ74wLOfNK4.roa
File: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (raw, json)
Hash identifier: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=
Subject key identifier: 69:B1:84:9E:48:91:08:2F:90:76:83:88:38:9E:F8:C0:B3:9F:34:AE
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 01942067D959E68AA2DD47798EE7A5E8825C
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/abGEnkiRCC-QdoOIOJ74wLOfNK4.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43928
IP address blocks: 79.171.136.0/21 maxlen: 21
193.84.130.0/23 maxlen: 23
193.84.140.0/23 maxlen: 23
2a00:c3c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:59:e6:8a:a2:dd:47:79:8e:e7:a5:e8:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b1849e4891082f90768388389ef8c0b39f34ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:1b:3d:07:e6:56:93:2f:9b:ae:e3:e7:98:
84:32:86:2c:22:e4:bc:3f:81:41:89:49:31:0f:f7:
83:6e:33:a8:c3:5e:c3:49:ae:06:e5:a2:1c:19:09:
88:f2:15:79:62:5e:54:1f:c8:ba:d8:4a:1d:14:f7:
ee:2b:80:c7:a8:bc:03:7d:e4:00:69:08:c1:83:6e:
0d:c3:f4:e4:90:08:a7:19:cb:5e:87:4d:24:96:65:
da:66:0e:5f:d9:e2:d7:bd:43:d2:83:ad:70:05:6c:
77:d3:7e:9a:30:6b:f6:50:52:50:e1:d9:6c:8c:81:
e8:e9:4a:2a:f4:69:13:8d:b7:74:19:91:71:c4:11:
b5:59:e1:36:18:64:c2:0e:37:84:90:70:6b:7d:3b:
ca:33:8e:f0:2b:bb:0e:c2:44:67:cb:53:6e:ed:11:
bb:33:c2:18:03:45:96:fc:f9:c5:13:ba:97:7e:4d:
3c:15:81:f3:67:18:39:e7:bf:ea:4f:16:89:14:cb:
09:a7:9e:68:b9:dd:e5:3f:c5:4e:fd:21:8f:01:ff:
c2:fb:ea:f6:26:4f:21:14:42:8f:8e:15:a4:89:54:
35:10:9d:58:b5:5a:32:d0:a7:4b:28:32:f1:37:37:
46:30:9f:3b:33:15:8e:51:12:8b:0a:44:29:38:7d:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:84:9E:48:91:08:2F:90:76:83:88:38:9E:F8:C0:B3:9F:34:AE
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/abGEnkiRCC-QdoOIOJ74wLOfNK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.136.0/21
193.84.130.0/23
193.84.140.0/23
IPv6:
2a00:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:71:0f:09:36:29:d8:28:a0:47:a2:82:6f:c2:ab:b8:3d:44:
1f:5e:0e:af:25:c7:09:81:74:62:f5:5a:30:82:aa:8c:28:09:
5c:d0:09:49:6d:72:7f:57:f8:19:ea:25:5c:e1:4a:d4:11:fe:
40:f4:26:42:f0:fa:50:a5:a6:73:86:9a:f1:18:88:9e:50:7c:
8b:55:3a:cd:b6:82:4c:06:08:9d:d8:59:4e:88:45:4f:78:cc:
48:20:a8:36:5b:78:cf:d3:44:dd:d4:33:22:a7:bf:b8:e9:d6:
34:8b:ce:2e:93:13:9b:59:e3:0d:c4:37:35:ca:d3:94:f8:ad:
68:f2:ed:ab:b5:35:70:8d:3a:81:40:1f:44:9e:83:96:7c:24:
a7:8a:3a:2c:50:21:bb:15:e2:d4:11:66:aa:a2:77:04:0f:e2:
41:52:72:29:f3:0f:33:35:cd:1a:d0:15:95:28:9f:15:8b:79:
60:46:e4:4b:f5:21:ad:51:a0:eb:db:51:cd:77:41:d0:a6:7d:
1e:b8:4d:16:7f:14:b2:3c:0b:fa:27:da:28:a0:58:7c:a3:52:
a7:b3:e2:ef:4c:ba:09:1c:84:ca:6f:31:f4:ab:1a:d8:ec:15:
a7:ab:4b:37:f1:28:74:e8:57:63:98:5a:66:5e:33:b3:4b:92:
be:da:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net