Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/zG080oPzQ7rUD2R7hxV-XMU_OR0.roa
File: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (raw, json)
Hash identifier: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=
Subject key identifier: CC:6D:3C:D2:83:F3:43:BA:D4:0F:64:7B:87:15:7E:5C:C5:3F:39:1D
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019424458AB90350BF45FDF0080E3CF20D5A
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/zG080oPzQ7rUD2R7hxV-XMU_OR0.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206509
IP address blocks: 86.54.164.0/24 maxlen: 24
193.108.169.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8a:b9:03:50:bf:45:fd:f0:08:0e:3c:f2:0d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6d3cd283f343bad40f647b87157e5cc53f391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:b2:b0:fe:76:92:77:99:73:85:47:9f:1c:
fd:58:9e:2b:e2:f4:a9:8a:19:7e:4e:57:89:b5:ec:
bf:fd:90:77:7e:3b:b3:53:41:72:c0:0d:5d:1c:b5:
4d:f9:f1:70:9a:98:55:59:4d:32:6a:da:12:0e:2f:
23:d2:63:84:1c:a9:1f:8f:02:e2:7f:26:c7:c7:ae:
23:13:7b:8d:7f:e7:8c:5a:ad:0f:bc:e7:b3:ff:9b:
bf:e4:8a:76:c9:3c:e5:24:6f:51:bd:a5:3b:b8:38:
b1:fb:62:a8:c5:6e:74:2f:3c:e6:1d:02:99:82:6e:
06:13:b3:aa:25:ef:6c:c5:3a:0c:bc:19:7d:d3:fc:
a3:78:75:99:00:5b:49:ab:f7:79:a3:12:31:9a:c2:
f9:69:12:02:92:a7:65:8b:54:9e:05:66:b9:3d:da:
70:ba:3b:19:d5:96:0e:fe:ac:04:92:7f:b4:bb:bc:
de:30:4b:10:74:f2:1a:87:0a:82:45:14:c1:a2:44:
10:ea:5f:ab:6b:2d:a0:22:92:93:a3:e2:5b:9a:c0:
ad:1c:68:6c:54:29:88:a3:5b:70:f1:7e:57:7c:62:
64:c3:d6:6c:35:e0:3a:59:3e:22:bc:22:4f:5a:38:
44:f1:af:4e:30:b1:8b:69:1d:e6:2b:53:33:7a:43:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6D:3C:D2:83:F3:43:BA:D4:0F:64:7B:87:15:7E:5C:C5:3F:39:1D
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/zG080oPzQ7rUD2R7hxV-XMU_OR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.164.0/24
193.108.169.0/24
194.164.97.0/24
194.164.114.0/24
194.164.181.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:24:61:31:83:23:52:6e:de:7e:bf:13:fb:12:b1:d7:53:27:
1a:ae:5d:d8:f9:8d:89:90:cc:4b:67:67:7b:c2:9d:63:2f:24:
a9:ce:24:11:e3:b6:5a:8b:1d:78:7a:5a:03:12:7a:ce:a0:7a:
63:04:06:96:64:e2:49:27:08:55:81:3f:6c:fd:0a:ee:ee:9c:
69:79:cd:41:98:24:5a:75:16:76:0e:12:cd:37:36:4d:34:19:
2c:f0:c4:24:1c:5c:68:2e:37:2c:69:cb:fd:fa:30:5c:09:5c:
8e:58:02:b7:77:c3:98:c2:63:a0:9d:e9:ec:ff:8d:3b:86:5b:
47:a0:c6:51:e5:a4:37:23:cc:c1:77:0d:8c:a2:3c:56:5e:87:
f1:3d:30:fe:6c:ce:4d:b8:db:8e:14:b5:fc:4d:db:c8:91:ce:
2f:6c:34:4a:11:d9:f0:30:bd:ff:fc:b5:9d:59:37:78:ba:70:
8e:31:e2:f2:df:f0:02:5f:e7:37:e0:16:f9:9e:9d:74:0d:f7:
a8:7e:a7:b4:d0:91:9c:20:3f:65:48:65:fc:d3:f0:93:8c:4e:
7e:4e:35:34:ba:59:ac:fd:d3:16:fc:bd:50:f0:ae:19:e6:b7:
2e:41:2e:3c:47:75:3d:6e:cb:2b:95:a1:65:60:aa:3a:94:59:
2a:f9:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net