Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/caB6q_Ryr_klRdHWL-L8xJdTgk0.roa
File: caB6q_Ryr_klRdHWL-L8xJdTgk0.roa (raw, json)
Hash identifier: tM55yqcivoxwAx3oZDBqS1fiWESu6ZK6T6pDbRYISWU=
Subject key identifier: 71:A0:7A:AB:F4:72:AF:F9:25:45:D1:D6:2F:E2:FC:C4:97:53:82:4D
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01946A675E4AA76EFE50C89FF4E827401C14
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/caB6q_Ryr_klRdHWL-L8xJdTgk0.roa
Signing time: Wed 15 Jan 2025 14:39:06 +0000
ROA not before: Wed 15 Jan 2025 14:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42894
IP address blocks: 131.237.0.0/16 maxlen: 24
131.237.8.0/24 maxlen: 24
131.237.32.0/24 maxlen: 24
131.237.70.0/24 maxlen: 24
131.237.71.0/24 maxlen: 24
131.237.72.0/24 maxlen: 24
131.237.73.0/24 maxlen: 24
131.237.74.0/24 maxlen: 24
131.237.77.0/24 maxlen: 24
131.237.78.0/24 maxlen: 24
131.237.83.0/24 maxlen: 24
131.237.84.0/24 maxlen: 24
131.237.96.0/24 maxlen: 24
131.237.163.0/24 maxlen: 24
145.31.0.0/16 maxlen: 24
145.45.0.0/17 maxlen: 24
145.45.0.0/24 maxlen: 24
145.45.48.0/24 maxlen: 24
145.45.110.0/24 maxlen: 24
145.50.0.0/16 maxlen: 24
145.50.37.0/24 maxlen: 24
145.50.39.0/24 maxlen: 24
145.50.105.0/24 maxlen: 24
145.50.233.0/24 maxlen: 24
194.104.116.0/22 maxlen: 24
2a13:e080::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:67:5e:4a:a7:6e:fe:50:c8:9f:f4:e8:27:40:1c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 15 14:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71a07aabf472aff92545d1d62fe2fcc49753824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:51:a6:cc:33:b8:fc:d5:80:c0:cc:71:d5:
32:c1:6e:28:b2:11:27:c6:a2:d0:a5:29:39:80:ef:
d2:d9:0f:c8:f4:41:d4:6d:c0:6a:2c:cd:11:bf:5c:
a8:ee:9a:89:6e:5d:3f:0b:87:7e:29:be:6e:d4:4f:
98:85:38:3f:37:cf:08:05:e0:df:21:18:58:80:73:
11:8e:c0:fd:71:41:3f:7d:7f:7a:e1:71:bd:ae:2c:
80:d5:ec:ad:85:db:1c:12:de:ab:95:09:10:ca:01:
5a:1b:3f:6e:f9:71:88:18:a8:6a:9f:2f:12:97:9b:
d4:b3:00:c8:02:00:94:48:96:5f:54:2f:40:fa:3d:
22:a3:f9:c4:ea:65:49:9c:7f:03:28:b0:84:92:71:
77:d2:ee:66:46:fa:17:aa:32:01:a7:f1:8e:ab:40:
a7:28:f0:10:b1:0a:84:fb:28:da:4a:b3:d1:a7:55:
da:21:b8:f0:60:d6:be:d5:20:20:2f:c1:9c:7b:6c:
29:c3:56:c5:e3:67:00:91:73:27:e0:53:15:75:3f:
a8:c5:1e:4a:50:ab:39:2f:e7:f1:cb:e5:c6:f8:c9:
39:b9:c2:5d:60:d8:a6:ef:fe:5f:29:c7:0d:61:82:
dc:e6:06:f8:a4:35:b1:67:2e:1e:6f:6e:c0:8d:b2:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:7A:AB:F4:72:AF:F9:25:45:D1:D6:2F:E2:FC:C4:97:53:82:4D
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/caB6q_Ryr_klRdHWL-L8xJdTgk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
145.31.0.0/16
145.45.0.0/17
145.50.0.0/16
194.104.116.0/22
IPv6:
2a13:e080::/32
Signature Algorithm: sha256WithRSAEncryption
34:45:cb:3e:6f:2d:c1:ec:82:d6:df:40:7f:ac:e1:57:31:d9:
66:5f:7b:dc:18:b1:e9:f3:fd:24:6e:31:f4:b9:c0:1e:b9:0a:
4e:27:42:6e:7a:61:a8:ee:f7:8f:79:2e:f2:58:2e:fb:38:61:
d0:d4:ff:9d:d1:79:ef:07:71:52:3a:69:79:03:b8:ae:fc:5c:
bc:c1:65:ec:24:61:a5:11:2e:3e:91:53:10:a6:42:d8:09:e9:
4f:39:72:bf:b7:ce:ef:7d:27:d0:57:96:3a:77:a3:e6:67:41:
8c:c3:c1:e2:79:89:69:22:4c:5f:4e:85:43:25:cf:76:31:3c:
52:f3:6a:2d:b9:3e:10:84:7b:fd:4e:2f:14:0d:34:9e:0a:f4:
e8:f4:14:ac:33:46:f4:24:a5:08:c2:b6:15:04:08:9f:a8:cf:
02:8b:71:bf:7f:ee:ae:3b:bc:37:30:94:de:a2:17:9c:6d:f4:
ad:61:c9:e4:96:9f:25:8c:f1:28:c2:fb:67:53:6c:e8:9f:d1:
23:03:56:09:f7:4c:51:8c:9c:89:b1:e2:86:81:fa:df:31:a2:
1c:17:c2:9d:95:a3:6e:fa:e1:be:c8:bd:79:c2:5e:1a:d1:3e:
6a:3c:f7:91:72:2e:ae:c2:08:f5:18:25:c0:5a:f9:c4:5c:32:
f9:d1:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:49:34 2025 by rpki-client on console.sobornost.net