Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Lff8zjDQbK0PyCmg-I9dg4Bjho4.roa
File: Lff8zjDQbK0PyCmg-I9dg4Bjho4.roa (raw, json)
Hash identifier: O3mJIK70s+8S4ZG+QkD6iyD4QBpBFIlP0MujdrDoFAU=
Subject key identifier: 2D:F7:FC:CE:30:D0:6C:AD:0F:C8:29:A0:F8:8F:5D:83:80:63:86:8E
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0193CFF4BB959D98AAC2378B6E22EA54A4DF
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Lff8zjDQbK0PyCmg-I9dg4Bjho4.roa
Signing time: Mon 16 Dec 2024 14:52:22 +0000
ROA not before: Mon 16 Dec 2024 14:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35362
IP address blocks: 5.83.16.0/21 maxlen: 21
37.17.240.0/22 maxlen: 22
62.84.248.0/21 maxlen: 21
95.158.0.0/18 maxlen: 18
146.0.80.0/21 maxlen: 21
185.11.28.0/22 maxlen: 22
2a07:1080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:f4:bb:95:9d:98:aa:c2:37:8b:6e:22:ea:54:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Dec 16 14:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2df7fcce30d06cad0fc829a0f88f5d838063868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:5a:90:e0:20:af:1b:05:53:7a:09:8e:03:
28:00:0e:35:3e:64:6f:a5:74:55:99:fe:c0:b1:24:
20:c4:3d:8a:86:56:3d:42:97:d0:50:55:d8:55:39:
64:7e:ae:10:d5:0a:0f:fa:55:64:c0:05:f3:b1:ec:
2a:a7:11:0c:9f:5b:fa:72:a8:8e:c8:b0:3c:ad:13:
80:5f:80:b7:f3:f9:14:06:43:d9:91:72:d8:40:87:
44:0a:76:d0:62:9b:d5:b3:17:0f:3b:c4:59:07:41:
52:1d:3b:72:21:17:0d:c2:c4:25:cf:46:2c:92:f8:
80:7f:7a:79:b8:9a:15:59:d4:0c:9f:ee:c2:69:02:
62:6f:90:4d:e4:16:13:b1:fb:13:51:32:5f:38:f2:
0d:75:29:c0:7f:58:3e:21:d8:8c:7f:4b:0d:6a:31:
20:ed:36:e2:0d:c6:d6:cc:28:68:2e:ed:81:91:44:
bc:b4:89:9d:12:48:41:f7:7e:a3:d0:ce:a2:0b:19:
6d:77:64:ae:c9:e0:53:3d:37:62:f9:a8:e2:f4:fe:
7a:df:05:50:53:3b:46:89:bb:11:92:7a:ba:90:e9:
71:f1:e9:06:e9:09:e6:97:6e:70:e3:f2:e6:f1:ca:
b0:07:90:4c:7f:c1:93:a3:ea:c5:43:ec:ab:37:5a:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:FC:CE:30:D0:6C:AD:0F:C8:29:A0:F8:8F:5D:83:80:63:86:8E
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Lff8zjDQbK0PyCmg-I9dg4Bjho4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.16.0/21
37.17.240.0/22
62.84.248.0/21
95.158.0.0/18
146.0.80.0/21
185.11.28.0/22
IPv6:
2a07:1080::/29
Signature Algorithm: sha256WithRSAEncryption
a7:7d:a8:c1:e9:2f:b4:e7:ac:52:12:77:43:bb:38:e1:6f:ea:
7f:28:06:93:40:ab:0c:4c:d6:dd:d0:73:99:f1:40:b0:90:c4:
ac:63:d1:d3:56:7c:09:8d:ed:19:3c:24:eb:05:1a:b1:fd:ef:
77:5f:54:be:f7:88:8a:c8:c0:1a:ab:9c:63:77:fe:6a:5a:80:
97:d1:85:21:03:54:4c:d2:82:4b:b5:c8:8b:8a:6b:89:cd:9c:
d8:a6:6b:46:43:ca:c4:e7:f0:b6:6a:0b:d8:f9:81:28:d3:ca:
30:5f:2b:d8:33:f4:ec:7d:19:8e:29:5f:23:a6:03:c3:8e:62:
ff:ab:a7:72:63:0f:38:07:d3:3b:97:4d:bb:26:be:73:16:31:
61:ba:0a:f9:f7:63:b6:22:d6:1d:87:7c:c0:32:ed:75:c8:9f:
c4:04:e6:70:d3:88:6f:06:12:0d:7d:0b:5e:c1:81:10:38:46:
36:57:e6:15:f6:e9:24:13:5d:51:b6:07:37:00:c3:c5:7e:b5:
57:b2:fa:30:85:be:95:6b:9e:98:a2:7c:40:fa:82:0e:cf:c4:
4a:f8:02:da:ec:e3:30:b4:33:02:c2:16:48:27:2e:92:c3:04:
6f:74:02:11:8d:36:12:17:0e:18:d6:a9:65:84:a1:89:d3:3c:
e0:a5:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:36 2024 by rpki-client on console.sobornost.net