Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/L7FYC8e89xGKnty6O1mK_Gb2H5U.roa
File: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (raw, json)
Hash identifier: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=
Subject key identifier: 2F:B1:58:0B:C7:BC:F7:11:8A:9E:DC:BA:3B:59:8A:FC:66:F6:1F:95
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019421444CDF56533F86F1F5EC3139756333
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/L7FYC8e89xGKnty6O1mK_Gb2H5U.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8596
IP address blocks: 82.150.192.0/19 maxlen: 19
185.74.0.0/22 maxlen: 22
2a02:5d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4c:df:56:53:3f:86:f1:f5:ec:31:39:75:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fb1580bc7bcf7118a9edcba3b598afc66f61f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:d4:3a:49:f1:ac:82:13:71:0a:f0:18:c4:
df:b2:0a:56:16:93:35:05:3d:f3:21:a0:12:14:39:
60:19:d3:4c:0c:f5:52:1a:95:60:52:4a:96:8c:3e:
5e:76:86:07:97:35:39:ec:fb:cf:35:14:bc:1c:29:
92:e9:ca:88:c6:08:7a:36:72:f3:92:69:03:e3:00:
6c:14:ad:94:8c:46:7e:40:87:ba:75:cb:00:53:ad:
1b:8f:2b:91:45:ef:9a:67:4b:aa:33:24:7a:01:1c:
4d:1d:d1:22:87:2c:88:dd:0f:04:f8:a2:96:73:5f:
f7:25:23:5b:97:55:2b:31:44:d0:85:8b:c5:a3:8c:
5c:86:5d:33:da:ca:45:bd:f1:93:82:4f:11:b6:70:
ae:1e:5a:e2:51:0e:26:6a:df:dc:37:66:ce:a9:25:
0a:1b:58:27:68:69:f9:3e:af:24:06:dd:41:50:42:
a8:d2:22:90:c1:e3:ec:c0:32:f1:71:51:28:06:32:
89:78:27:76:5a:07:20:50:28:6a:2b:6d:22:7c:e5:
b7:e5:e3:25:68:25:99:ff:f2:f2:e6:52:d0:0b:ad:
8f:76:a3:74:d2:52:50:00:52:5a:46:19:08:0d:63:
61:51:47:5e:7e:19:e8:a5:c9:cc:ed:2a:0e:c2:4a:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:58:0B:C7:BC:F7:11:8A:9E:DC:BA:3B:59:8A:FC:66:F6:1F:95
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/L7FYC8e89xGKnty6O1mK_Gb2H5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.192.0/19
185.74.0.0/22
IPv6:
2a02:5d8::/32
Signature Algorithm: sha256WithRSAEncryption
a4:66:24:7f:54:9b:6f:38:82:9c:4c:45:22:12:77:ed:d9:6b:
11:e9:47:55:d7:bb:61:50:4b:36:61:00:ba:b8:9e:d1:41:db:
b8:7f:8e:ec:6a:22:6d:42:77:e5:e7:b4:f1:48:d8:7c:60:a4:
f7:50:db:3f:31:e5:c7:71:2b:21:d5:fc:15:5c:cf:04:f2:69:
25:f8:ab:8b:57:75:fa:a8:02:8b:14:2e:e4:63:47:6f:6d:14:
4f:71:8e:8a:34:94:7e:c1:1e:25:c2:36:b4:0a:d5:6f:04:b3:
d2:80:68:87:80:f9:dc:59:5a:2d:2c:e8:69:a4:5f:d4:05:ea:
c2:bb:16:b6:9e:9a:b7:31:87:b4:89:33:f4:45:70:90:1b:d4:
b4:b4:d5:f0:61:4f:60:ee:a0:64:e4:f1:b8:11:8e:ec:1b:dd:
0d:4f:3c:17:bc:f5:bc:02:d8:e1:18:cb:6e:e5:77:98:e5:e7:
8b:15:9a:fa:c5:d3:1a:39:b3:01:67:e3:60:97:b8:23:d9:68:
52:c2:2b:b0:2d:e6:f5:af:66:8a:92:79:f3:ce:ef:5c:da:6b:
7e:19:a7:85:55:03:af:48:c5:c2:58:9b:17:f4:ca:e8:18:c7:
8b:a6:ee:82:02:f5:96:70:55:d5:ca:d6:98:c5:93:fc:8f:d7:
29:d0:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net