Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/hLpPT363pnl477GGqc5nq4BfcT0.roa
File: hLpPT363pnl477GGqc5nq4BfcT0.roa (raw, json)
Hash identifier: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=
Subject key identifier: 84:BA:4F:4F:7E:B7:A6:79:78:EF:B1:86:A9:CE:67:AB:80:5F:71:3D
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0194266B482935B5D7F0FD6AA6398ADD4E7B
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/hLpPT363pnl477GGqc5nq4BfcT0.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200982
IP address blocks: 81.177.196.0/23 maxlen: 23
213.59.136.0/22 maxlen: 22
213.59.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:48:29:35:b5:d7:f0:fd:6a:a6:39:8a:dd:4e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ba4f4f7eb7a67978efb186a9ce67ab805f713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:8c:04:3e:7f:9d:3a:60:68:61:6a:16:2a:
7e:aa:94:f7:b7:c0:a3:06:5c:73:9f:93:16:59:60:
df:60:0b:c9:57:05:72:81:24:e6:e1:da:84:bb:2a:
47:2e:2b:20:af:7e:96:20:c2:76:f3:c9:10:69:4d:
21:b8:64:02:81:e8:30:dd:a0:e2:7f:0e:64:be:4a:
c4:3a:58:2c:82:12:5f:03:4d:dd:68:46:20:3d:73:
83:a8:e7:a9:fa:87:df:3e:8d:14:22:97:7d:39:e8:
12:ac:9f:8e:a0:a8:df:93:c6:9b:84:27:c9:42:b0:
58:3d:7e:57:2c:54:02:52:c0:c0:5e:99:9e:23:6c:
7d:03:47:96:72:78:90:21:66:00:87:37:d1:f0:cd:
bc:dc:3d:56:51:76:77:16:ca:7f:56:e2:4f:6b:5f:
51:ff:ae:4b:13:ba:63:23:66:36:4c:af:9d:c0:ce:
a6:60:ef:14:0a:07:79:07:c7:d1:51:ab:67:5f:42:
90:d2:f3:51:80:73:e2:91:38:2b:d1:e8:cb:70:9c:
09:84:c5:14:cb:1e:8b:39:d7:a9:c3:10:af:34:5c:
65:41:0c:bf:c6:27:3b:0e:50:f2:28:8f:9c:c3:d5:
fd:e5:3c:37:11:f6:5e:65:1a:15:be:61:0c:de:ee:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:4F:4F:7E:B7:A6:79:78:EF:B1:86:A9:CE:67:AB:80:5F:71:3D
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/hLpPT363pnl477GGqc5nq4BfcT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.196.0/23
213.59.136.0/22
213.59.156.0/23
Signature Algorithm: sha256WithRSAEncryption
51:f4:5c:8c:b7:a3:fe:df:49:f9:bc:5d:60:62:93:b6:eb:da:
31:d1:0c:b2:2a:6e:e8:8f:05:56:95:e1:cc:68:ec:1c:13:1a:
4a:f1:03:5b:59:6c:84:d8:c9:a6:07:38:b1:a1:ba:b5:a9:47:
af:f5:6a:aa:99:f2:1f:77:f5:d1:61:f2:e7:e2:41:b7:9d:ef:
a9:71:ee:66:02:39:3c:e4:43:05:cd:ae:f1:93:e6:13:66:3b:
97:76:96:44:78:4b:3a:05:64:3c:8b:c6:0d:1c:05:c3:e0:f1:
e9:e3:61:8d:25:87:1e:5c:b7:48:84:0a:b3:13:da:b2:b2:21:
5f:16:ca:4f:b3:d3:20:cf:fa:75:6c:dd:ef:24:cf:22:15:79:
f7:fa:8e:22:f7:84:bd:67:e8:74:45:cd:0f:32:ff:13:4d:96:
51:ab:53:cc:44:2b:76:7e:53:8e:22:b4:8d:38:e1:39:80:88:
1c:f2:cc:6f:01:ca:a9:c5:24:9b:0b:75:91:0e:83:f8:e6:ce:
2e:cc:cd:37:19:55:ac:8f:7d:22:0f:9d:d2:30:7a:ee:f6:1e:
dc:e3:ca:4f:f1:61:11:f0:4c:12:8a:01:21:23:55:11:75:b1:
dc:96:f3:a3:57:ba:bc:16:42:1e:f7:25:20:d7:1b:9e:31:01:
5b:16:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net