Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa
File: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (raw, json)
Hash identifier: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=
Subject key identifier: 0A:52:79:0F:67:8D:7D:AC:98:6D:3C:7C:82:00:A6:D2:14:6C:3F:B7
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019426D9B43FBF9856149F76B843827BDB66
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42605
IP address blocks: 83.136.72.0/21 maxlen: 24
185.111.192.0/22 maxlen: 24
2a02:b28::/29 maxlen: 29
2a02:b28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b4:3f:bf:98:56:14:9f:76:b8:43:82:7b:db:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a52790f678d7dac986d3c7c8200a6d2146c3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:a9:3e:45:17:c8:08:4c:56:e2:35:66:e8:
d5:3f:9e:75:0c:b5:2b:b4:a4:43:41:50:2c:0d:8e:
d8:f8:2e:5c:e8:8d:25:7d:99:b7:88:b8:e3:60:0d:
8a:10:2c:8a:36:c6:80:2a:9d:56:3d:70:30:d0:c2:
c7:28:03:cb:49:e2:8d:33:7f:60:e0:96:54:13:c9:
cf:09:3b:1a:0d:37:ac:c9:c0:2a:ba:71:03:17:1a:
08:a9:0f:40:62:5f:07:0a:95:5f:21:07:12:b4:e7:
28:fd:af:8b:9a:99:45:13:5a:9e:8a:b8:a1:79:b8:
ae:5d:af:61:3f:e7:9e:3b:06:73:7d:0e:e0:d4:2d:
7c:73:9e:33:3b:58:e5:39:3a:eb:5f:47:79:1f:67:
cb:37:39:60:dd:16:4a:cf:fe:08:2a:12:fa:43:69:
39:0c:04:3b:d3:6e:b3:0d:d4:c3:db:ee:25:71:06:
ac:c4:5e:3b:56:58:5b:7a:da:96:64:75:98:a5:5d:
1c:66:c4:84:a1:99:84:c4:b8:be:99:1d:9d:d1:f2:
d4:87:54:62:7c:03:d5:81:6a:e6:bb:26:fb:57:ee:
a2:6b:35:58:b4:d7:21:64:99:dd:a9:68:bc:46:69:
7e:ff:f0:4c:fb:c7:83:d3:ae:9b:e9:5f:15:35:4f:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:52:79:0F:67:8D:7D:AC:98:6D:3C:7C:82:00:A6:D2:14:6C:3F:B7
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.72.0/21
185.111.192.0/22
IPv6:
2a02:b28::/29
Signature Algorithm: sha256WithRSAEncryption
29:0e:a1:0a:48:8d:1b:91:6f:7a:f0:2b:20:0b:08:7a:40:16:
d8:2a:8a:a4:76:3c:61:d5:9b:58:05:60:e6:4f:19:cf:bb:83:
5f:50:35:63:47:b8:2e:8b:a1:41:1c:5b:82:b2:fe:1c:65:c7:
7b:4a:f7:ab:32:fe:31:94:31:e6:2a:58:f2:48:65:9b:a7:26:
8c:6f:94:b9:1f:23:6b:8a:75:38:54:88:be:c1:55:c8:e6:38:
44:ad:9f:98:46:d2:ea:da:0a:11:64:92:64:53:ef:8a:92:04:
13:ba:bb:68:3d:2e:98:e5:7b:81:b8:ba:7a:75:61:86:8b:07:
52:e4:28:9c:80:a9:a6:44:bc:f3:a2:b0:79:38:83:b2:41:09:
00:5f:9d:1f:ec:03:0e:13:90:ea:e0:ab:f3:aa:07:6a:96:13:
99:d5:ea:7e:2e:5e:cc:f4:42:25:aa:52:40:de:46:61:b9:87:
c2:06:b1:43:6b:c4:8f:b8:ed:8f:07:58:6d:de:ae:c6:b1:93:
80:10:7c:31:2e:b2:a0:59:9f:e7:73:b8:ed:7a:a5:df:31:cd:
f7:2c:55:a0:73:38:3e:bc:15:bc:4f:05:70:1e:e9:c0:a0:b8:
19:ab:6b:e7:82:ee:2b:20:2b:43:f5:b3:ce:d2:76:29:e5:9e:
f2:79:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net