Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/gHq9MWf0hbMmILKUMKXWOxVNz_8.roa
File: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (raw, json)
Hash identifier: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=
Subject key identifier: 80:7A:BD:31:67:F4:85:B3:26:20:B2:94:30:A5:D6:3B:15:4D:CF:FF
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0194228E40E3EBCF246DA1E05D374B8DDE9B
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/gHq9MWf0hbMmILKUMKXWOxVNz_8.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57424
IP address blocks: 149.62.48.0/24 maxlen: 24
149.62.49.0/24 maxlen: 24
149.62.50.0/24 maxlen: 24
149.62.51.0/24 maxlen: 24
149.62.52.0/24 maxlen: 24
149.62.53.0/24 maxlen: 24
149.62.54.0/24 maxlen: 24
149.62.55.0/24 maxlen: 24
185.77.204.0/24 maxlen: 24
185.77.205.0/24 maxlen: 24
185.77.206.0/24 maxlen: 24
185.77.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:40:e3:eb:cf:24:6d:a1:e0:5d:37:4b:8d:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=807abd3167f485b32620b29430a5d63b154dcfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:70:9f:d1:f2:22:6c:07:8d:74:d2:07:17:
60:1f:d0:76:33:af:71:33:52:d8:c1:3c:3c:9c:61:
c2:4d:c9:fc:20:49:6f:b3:4f:ba:86:e8:1b:bf:eb:
fb:3c:fb:60:ad:c0:fb:7d:51:9c:99:3b:0a:8e:b2:
da:9b:a2:cd:94:2e:f8:d7:1f:66:40:60:6f:b4:0b:
5b:5f:17:4e:6c:da:3f:f1:8d:8c:fc:b6:2a:24:99:
e1:49:10:5a:be:98:38:85:9e:09:eb:e5:8c:3e:9b:
8b:e9:ad:38:ee:c2:1e:6b:8e:3f:be:af:bd:7f:7d:
0a:db:d5:61:f9:fc:a9:04:31:76:05:70:6b:aa:9c:
a6:aa:79:58:02:64:c3:83:4c:77:a9:8c:cb:7b:ba:
78:9e:a7:a2:ee:51:d7:2c:e9:50:1c:1e:d3:53:21:
05:cb:c3:04:46:23:63:4d:a1:8f:bc:f0:1c:e4:e6:
58:97:6d:83:be:62:ea:a6:03:b4:38:17:da:e8:be:
f6:86:67:0d:1f:be:76:8a:8e:64:a4:48:9b:2b:e6:
ec:47:99:20:a6:8f:36:c7:a8:f7:1a:1e:96:da:fa:
1d:31:f2:7d:b0:98:4a:8e:74:3f:a0:59:b9:28:e2:
3e:02:f3:e5:19:28:16:dd:21:2e:aa:aa:e7:03:62:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:BD:31:67:F4:85:B3:26:20:B2:94:30:A5:D6:3B:15:4D:CF:FF
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/gHq9MWf0hbMmILKUMKXWOxVNz_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.48.0/21
185.77.204.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d2:6e:c2:a4:db:de:7d:42:76:7a:ae:61:a0:af:9c:59:73:
74:a1:32:31:b0:6b:c1:07:d9:f0:b6:ff:9a:81:c6:33:94:b0:
bd:10:61:60:95:85:12:41:c4:41:76:38:46:26:f9:44:36:54:
aa:b8:db:42:79:dc:16:c7:e5:80:9d:be:ca:bf:d1:af:f9:52:
50:5f:7e:4a:93:40:8d:cc:69:e2:c3:f4:90:99:fb:9c:69:b6:
9a:bf:0d:ce:88:27:95:e5:a0:2c:cc:62:a7:a3:57:e2:ee:12:
80:5d:ce:2d:b1:65:d0:c1:c2:dc:80:02:60:8d:92:cb:f6:be:
cf:bf:4b:14:5f:38:da:28:7d:47:1e:f8:7d:aa:6f:b1:b9:fa:
50:e7:39:c2:59:5a:a6:3d:68:99:01:dc:44:79:c0:97:aa:db:
1c:4a:09:dd:06:e2:ab:5a:79:e9:bf:82:f5:d5:81:ed:5f:1a:
99:0e:3e:e7:c9:a1:d9:bf:37:b7:f8:38:9d:4a:f1:91:8e:f7:
c7:44:9e:5c:2d:63:d5:f9:20:1c:ed:92:e5:dd:52:6c:f3:2d:
d5:6f:cd:ff:c7:4d:9f:5a:0b:37:9c:27:23:7d:a5:f2:70:70:
0b:a9:05:e1:d7:31:4d:5e:4d:43:85:51:69:41:f0:cb:9e:5f:
c0:44:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net