Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/czKF2-6j8RypHRLBox57-x4tkrw.roa
File: czKF2-6j8RypHRLBox57-x4tkrw.roa (raw, json)
Hash identifier: dy5xBYyKARM/3MKUIyModICcddBARtrn7eEJhWpmLsE=
Subject key identifier: 73:32:85:DB:EE:A3:F1:1C:A9:1D:12:C1:A3:1E:7B:FB:1E:2D:92:BC
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01962493101919160E471642317C808EB91E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/czKF2-6j8RypHRLBox57-x4tkrw.roa
Signing time: Fri 11 Apr 2025 11:18:59 +0000
ROA not before: Fri 11 Apr 2025 11:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24964
IP address blocks: 82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:93:10:19:19:16:0e:47:16:42:31:7c:80:8e:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 11 11:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733285dbeea3f11ca91d12c1a31e7bfb1e2d92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:75:cd:eb:30:d7:71:4e:2f:8e:4e:32:c3:
f6:54:95:aa:7f:d5:cf:79:3a:a3:d0:78:86:d8:6c:
7c:2f:c9:a8:3e:0b:14:88:bc:78:4e:7a:48:be:84:
b3:b9:e0:71:c6:41:3a:f9:76:0b:0a:7d:40:b0:53:
ca:60:cb:85:cd:77:20:ae:97:1d:54:a7:42:30:57:
9d:b3:0f:69:ae:18:a9:f7:1d:db:68:a3:a0:6e:f7:
5d:78:65:44:3f:0d:29:c6:c6:3c:6b:b4:60:29:d6:
10:a9:5d:fa:8e:ce:79:56:ba:4e:f9:94:29:66:a7:
fb:be:05:a4:db:00:4b:f0:1f:56:02:d7:71:bb:6d:
20:68:b9:9f:2c:10:82:06:7a:74:e0:0e:0c:f5:6b:
c1:0b:ab:33:9b:ea:12:f9:2c:55:1f:e3:9b:b8:65:
b7:ac:bd:ad:5b:8f:aa:ac:f7:e5:da:32:e6:34:f0:
b0:83:73:e7:1b:3f:98:97:c5:05:19:d2:09:ca:48:
5a:a1:00:44:c8:29:94:e5:26:de:0c:88:21:58:97:
be:31:47:36:14:f5:5c:11:eb:8a:6b:3f:8a:82:80:
c8:a0:44:45:4b:40:78:dd:03:56:c2:61:d0:e8:88:
ad:aa:66:4c:3f:ed:b8:e8:ea:4c:ef:1c:a4:83:d6:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:85:DB:EE:A3:F1:1C:A9:1D:12:C1:A3:1E:7B:FB:1E:2D:92:BC
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/czKF2-6j8RypHRLBox57-x4tkrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.126.0/23
195.34.123.0/24
212.91.184.0/22
Signature Algorithm: sha256WithRSAEncryption
82:14:c7:ef:d1:0a:b4:cb:05:46:5b:14:4e:99:a0:dd:2d:3a:
cc:f3:18:16:c2:f9:5c:1b:9e:ec:43:2f:51:1b:b2:b1:dc:02:
7e:87:ae:9c:5c:77:9b:1e:08:62:ef:4f:dc:7c:20:9c:31:af:
ae:24:1b:59:e1:f6:b0:69:d2:fc:d5:f3:09:b5:2f:4a:01:86:
9e:5c:18:57:b0:74:02:56:d3:27:06:a2:0d:d3:3d:4b:21:14:
d5:07:61:09:14:20:8c:c4:a0:51:12:42:5a:46:02:42:8a:39:
23:b3:cb:38:68:a8:6a:a5:9b:f2:9e:21:39:32:fe:4f:cc:77:
87:f4:8c:af:5a:fc:dc:e9:16:a3:bb:3b:89:18:be:c0:46:24:
d4:aa:ad:a7:54:bf:77:80:2a:0a:2e:6b:ec:87:d8:22:ec:c1:
3e:9c:32:a1:88:44:cc:07:fe:4d:f0:3a:35:cc:44:93:32:ef:
07:bf:83:0b:70:37:b3:d3:80:52:98:af:1f:4b:5c:28:02:02:
5f:03:1a:82:8a:2d:8d:15:f2:85:04:7d:04:4b:ed:da:1a:9a:
9e:a7:a3:46:97:34:c8:b3:1d:3f:67:9c:04:29:fa:6a:cb:fa:
95:2d:9d:1e:b5:29:23:33:d2:fd:28:7a:ac:1e:93:65:a0:77:
de:08:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net