Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F22dqci9sETpBxI71_zF8Iz2jLY.roa
File: F22dqci9sETpBxI71_zF8Iz2jLY.roa (raw, json)
Hash identifier: u1ifxP2pZLgjnEg+EL5SHToHcyGG9LmZXTUGx5mHKTM=
Subject key identifier: 17:6D:9D:A9:C8:BD:B0:44:E9:07:12:3B:D7:FC:C5:F0:8C:F6:8C:B6
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 0194282321D6E547571DC76009A58BD26CEE
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F22dqci9sETpBxI71_zF8Iz2jLY.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51691
IP address blocks: 37.16.96.0/20 maxlen: 23
37.16.112.0/20 maxlen: 20
178.213.232.0/21 maxlen: 21
178.213.239.0/24 maxlen: 24
2a00:4cc1::/32 maxlen: 48
2a00:4cc1:2501::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:21:d6:e5:47:57:1d:c7:60:09:a5:8b:d2:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176d9da9c8bdb044e907123bd7fcc5f08cf68cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:4d:75:62:e0:d9:fc:11:90:87:ab:2c:0f:
87:04:ea:c7:46:92:87:eb:9d:f7:c3:84:8e:ce:c7:
fb:40:99:5b:4b:4f:8c:85:1d:2d:e0:76:20:59:7e:
0a:5b:00:10:d2:2f:82:5c:40:12:54:8b:d3:5d:b2:
cd:d3:d9:56:0c:e6:84:e0:44:23:1f:7b:d9:ba:c8:
cb:bb:cd:b2:3f:f8:8d:d4:05:45:b9:00:eb:4c:ee:
5a:71:85:54:a5:77:3e:b2:32:bb:75:85:8c:78:44:
17:56:56:a0:4d:b0:71:0a:b3:e5:a0:c0:05:d9:ad:
0f:65:ac:5f:7c:44:c0:c5:4e:ae:08:e4:7f:02:ee:
8b:fe:05:5b:57:33:91:36:b1:99:32:3a:27:5b:36:
ec:47:fb:9b:f9:3f:a2:12:a2:a4:d1:a0:db:1a:9c:
b8:0c:37:72:87:77:c0:fb:9a:bf:51:c7:01:d1:6c:
ba:32:84:74:04:3e:f6:1e:07:26:f6:17:31:b0:ff:
80:fc:a4:76:ef:31:4a:57:68:f7:02:2d:ff:cf:14:
5b:de:78:24:47:7b:b6:38:59:1e:d3:09:f4:6d:63:
41:59:be:ff:37:82:a4:66:e8:74:82:88:a5:23:0d:
1f:52:a6:48:57:3c:ef:7d:be:cb:a9:26:9c:fc:63:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:9D:A9:C8:BD:B0:44:E9:07:12:3B:D7:FC:C5:F0:8C:F6:8C:B6
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F22dqci9sETpBxI71_zF8Iz2jLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/19
178.213.232.0/21
IPv6:
2a00:4cc1::/32
Signature Algorithm: sha256WithRSAEncryption
16:63:b1:67:61:86:7d:ca:48:38:10:cc:33:a3:df:82:2f:7c:
c8:3f:9b:a2:57:7a:77:55:98:71:a8:31:96:ef:7d:9b:18:1d:
b0:c4:18:d7:2d:a8:25:eb:6e:af:30:2c:11:e3:8c:52:93:4c:
17:52:9b:5c:e0:b3:1c:65:60:99:9d:10:99:90:4b:08:b5:3c:
cd:d2:d0:85:27:a9:99:ec:c3:80:55:24:b1:61:ec:6c:c7:f7:
01:a5:9c:1e:a5:ec:1e:0a:3b:73:47:f0:86:c3:03:ab:c0:f0:
81:b8:7d:fb:c0:0d:64:08:32:28:63:1f:6d:ae:16:eb:dc:da:
1f:d2:de:7f:d3:2f:24:b3:72:7c:dc:43:de:43:5f:e9:17:da:
a6:a7:77:f0:fb:05:92:2c:ac:84:d3:da:81:ba:69:f4:db:0e:
df:b6:31:a1:66:7e:a1:19:93:1c:be:f0:b5:de:68:21:e1:7f:
6c:91:a0:54:61:a7:96:de:00:15:82:03:e5:d0:b2:f8:f7:0b:
f8:ef:af:7a:a1:64:b1:95:01:97:5c:4b:69:ba:f8:94:f7:fe:
ec:87:d8:23:e1:78:b1:06:31:a6:ea:e2:66:1b:3f:19:88:36:
7b:f4:1a:30:cc:8a:54:1d:89:3a:c4:bb:fe:a6:23:45:6d:db:
8e:be:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net