Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/puvubvKJAYg7r6mXBIAyb_AGzB8.roa
File: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (raw, json)
Hash identifier: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=
Subject key identifier: A6:EB:EE:6E:F2:89:01:88:3B:AF:A9:97:04:80:32:6F:F0:06:CC:1F
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 01946EB692A1D44AD37804D1EAFF7C9AA059
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/puvubvKJAYg7r6mXBIAyb_AGzB8.roa
Signing time: Thu 16 Jan 2025 10:44:06 +0000
ROA not before: Thu 16 Jan 2025 10:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 45.84.52.0/22 maxlen: 22
62.68.77.0/24 maxlen: 24
62.106.73.0/24 maxlen: 24
77.75.228.0/24 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
91.242.224.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
152.89.197.0/24 maxlen: 24
185.182.107.0/24 maxlen: 24
194.247.36.0/24 maxlen: 24
212.6.47.0/24 maxlen: 24
2a0c:7140::/29 maxlen: 29
2a0e:9780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:b6:92:a1:d4:4a:d3:78:04:d1:ea:ff:7c:9a:a0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Jan 16 10:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6ebee6ef28901883bafa9970480326ff006cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:b9:a0:e9:18:ae:cd:7d:0b:10:87:e1:66:
9d:1c:03:79:3e:9c:b3:d1:b5:9a:0a:f0:2a:7d:db:
90:88:f8:aa:38:f5:f8:76:c2:65:64:b4:0f:36:a9:
9d:88:53:18:b3:5e:06:f3:97:8b:32:a9:e2:cf:3b:
9c:a7:c8:c7:4c:6f:2c:34:0c:93:99:28:2e:96:f3:
da:b7:fd:fe:cd:d4:a7:b0:ff:1f:44:bd:54:19:5a:
7b:10:2c:59:ae:a6:fc:43:03:47:3e:61:29:c0:60:
bf:6b:3c:48:de:1b:41:d1:02:f1:74:81:0e:b6:a0:
cc:3e:79:e4:40:b8:ae:d6:6e:81:9f:c4:77:c9:23:
c8:fa:3b:83:85:13:a2:d1:ff:d9:7b:29:f4:38:45:
1f:34:b6:5b:31:1d:79:2c:49:f9:97:5a:a8:2a:3d:
ed:ab:50:9c:a9:60:0b:3a:fb:44:94:aa:3d:9c:91:
a2:0d:70:9b:bf:e0:95:3d:60:31:8b:d7:6e:1a:b9:
1c:09:6e:47:0a:e9:bc:60:fe:2e:4d:7f:07:26:5e:
e2:13:b7:70:ab:a4:92:b1:b7:a5:f6:56:a3:e0:b1:
35:f8:17:c2:3b:ba:1a:2b:ad:62:23:19:79:c3:c4:
f4:6b:03:6a:9b:06:b0:a2:a2:68:9a:64:91:5f:7b:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:EE:6E:F2:89:01:88:3B:AF:A9:97:04:80:32:6F:F0:06:CC:1F
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/puvubvKJAYg7r6mXBIAyb_AGzB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.68.77.0/24
62.106.73.0/24
77.75.228.0/24
91.211.64.0/22
91.238.63.0/24
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
152.89.197.0/24
185.182.107.0/24
194.247.36.0/24
212.6.47.0/24
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
12:c1:69:de:32:3b:1e:97:91:f7:49:38:d4:cd:ce:6a:0b:47:
38:d4:af:1e:a0:3a:a5:1b:3d:c7:53:a6:b1:34:92:53:dc:60:
90:54:2d:10:c2:97:ec:53:29:64:aa:a6:a7:eb:55:4c:ee:fd:
7a:7d:39:01:82:dc:e4:17:7b:c0:4a:91:b6:71:85:6a:c2:d2:
6c:16:83:84:8e:c4:9c:9d:3f:5f:ff:8b:45:a6:0d:52:c2:1e:
80:ff:8c:5d:bb:ee:e5:fe:4c:58:eb:f2:9d:32:96:dc:24:cb:
7e:7c:22:d2:e3:3e:f1:32:75:0b:bc:41:a1:25:d2:4b:ca:b7:
28:52:9e:e5:05:b6:0b:45:18:1b:7a:88:df:b2:a0:18:46:10:
1e:9c:d3:62:27:9b:fa:45:c9:cf:11:3a:1c:8c:45:d3:ec:e6:
1a:c2:4d:3e:8a:6a:47:54:36:fb:0a:10:16:b0:aa:87:38:b0:
62:3c:54:34:58:1f:d3:cc:3f:6f:f0:c4:3d:a6:33:87:3b:57:
8d:23:02:59:16:bd:92:17:93:6e:08:a9:48:9c:f0:d8:7c:e4:
9b:0a:ad:a6:f6:d7:50:4d:24:3e:e1:a3:c2:0b:45:92:c9:4a:
64:ab:ed:02:dd:f0:0b:71:95:1d:0c:5c:8e:39:f4:69:c2:32:
31:44:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net