Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/lJago70cI_xvyZhFfsg3Aw9OGeM.roa
File: lJago70cI_xvyZhFfsg3Aw9OGeM.roa (raw, json)
Hash identifier: fi1kzkQyoRujjlEGa/d9WEUMMxSjDAb7GkNQ5Rq5Cis=
Subject key identifier: 94:96:A0:A3:BD:1C:23:FC:6F:C9:98:45:7E:C8:37:03:0F:4E:19:E3
Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial: 019420D6486FDC3001A68C7C4469A5B837D1
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/lJago70cI_xvyZhFfsg3Aw9OGeM.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202130
IP address blocks: 83.136.144.0/24 maxlen: 24
83.136.145.0/24 maxlen: 24
83.136.146.0/24 maxlen: 24
83.136.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:48:6f:dc:30:01:a6:8c:7c:44:69:a5:b8:37:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9496a0a3bd1c23fc6fc998457ec837030f4e19e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:3c:51:9e:36:5e:99:7b:a9:1b:a4:67:f7:
d6:be:e7:7d:9f:e1:49:ff:68:7f:f3:66:c7:7a:ca:
ee:cb:b0:5d:29:9a:71:d3:26:3c:f3:31:ea:cd:06:
11:3a:e3:57:b9:3e:d6:c7:89:7f:54:03:ae:1e:18:
23:67:c3:03:d4:b7:15:32:12:45:6c:d0:17:2a:2f:
3d:50:fc:b8:0b:f5:a0:d1:04:96:21:a5:81:f5:88:
31:29:f2:2e:c9:2b:da:09:1d:b6:d3:d0:a9:2a:e2:
49:60:85:97:23:c2:68:17:50:be:73:13:69:86:50:
80:68:91:48:b5:32:55:6d:4e:0d:b8:4d:34:7e:b5:
7e:86:9c:80:b2:06:dc:77:e1:82:60:26:b1:43:20:
ff:ed:3f:4e:75:35:cf:61:1c:2e:73:6f:7a:c2:ca:
12:23:4e:97:4a:28:5a:8c:dc:d8:1e:19:36:44:bc:
8a:8b:85:81:70:70:6c:ec:84:4a:a3:3d:af:ed:3e:
18:84:37:74:93:8c:f1:d3:13:65:f5:16:08:3d:00:
5e:c6:cb:96:50:cb:a2:ff:79:69:86:92:83:ad:f0:
f5:42:bc:7e:1d:9b:3f:c1:a5:70:14:35:fa:16:d1:
da:21:24:d8:84:36:a2:af:a6:2c:dd:db:5a:5c:ca:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:A0:A3:BD:1C:23:FC:6F:C9:98:45:7E:C8:37:03:0F:4E:19:E3
X509v3 Authority Key Identifier:
keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/lJago70cI_xvyZhFfsg3Aw9OGeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f6:82:f2:e8:50:e7:32:c5:8f:39:44:1d:1a:31:09:2c:0d:
3c:8a:b2:01:c3:32:41:0d:cb:9c:86:70:ee:30:50:75:f8:97:
81:98:0d:22:76:1a:e8:cc:14:dd:4e:b0:f3:be:b9:11:c2:83:
3e:cd:be:86:54:b2:6f:dd:c1:88:76:9b:0b:37:e0:de:bc:33:
41:ac:64:a5:93:05:5c:5b:6c:f1:15:3b:27:98:77:31:06:7a:
e0:3a:3b:8b:5b:af:1a:c0:50:a0:ce:e3:9f:37:95:d8:7e:00:
08:e4:7d:5b:05:85:17:74:1b:fb:6b:39:a2:02:a6:52:5b:03:
0b:10:ce:aa:40:98:fc:d5:88:18:c8:fd:7d:a3:b5:d9:64:1a:
1a:b7:fb:46:51:8a:5c:3e:ae:e0:2c:7a:98:64:a6:00:50:7e:
77:bf:84:e5:6b:7c:59:dd:00:07:90:f2:a3:46:3b:fe:a8:9a:
45:07:7a:6b:7e:59:16:d4:9b:02:26:c3:80:90:0e:7f:56:6a:
42:a1:d4:85:cc:96:d2:5c:46:85:00:9e:a6:04:17:00:03:24:
2b:2f:15:2e:5e:ba:b0:cc:ad:b6:e5:74:b6:b4:63:20:12:98:
7c:0b:87:f1:6b:74:0e:16:37:67:e1:1f:a2:9c:61:e3:ae:1d:
a9:77:27:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1khv3DABpox8RGmluDfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw
ZGJhMGUwHhcNMjUwMTAxMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk2YTBhM2JkMWMyM2ZjNmZjOTk4NDU3ZWM4MzcwMzBmNGUxOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3s8UZ42Xpl7qRukZ/fWvud9n+FJ
/2h/82bHesruy7BdKZpx0yY88zHqzQYROuNXuT7Wx4l/VAOuHhgjZ8MD1LcVMhJF
bNAXKi89UPy4C/Wg0QSWIaWB9YgxKfIuySvaCR2209CpKuJJYIWXI8JoF1C+cxNp
hlCAaJFItTJVbU4NuE00frV+hpyAsgbcd+GCYCaxQyD/7T9OdTXPYRwuc296wsoS
I06XSihajNzYHhk2RLyKi4WBcHBs7IRKoz2v7T4YhDd0k4zx0xNl9RYIPQBexsuW
UMui/3lphpKDrfD1Qrx+HZs/waVwFDX6FtHaISTYhDair6Ys3dtaXMrXUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSWoKO9HCP8b8mYRX7INwMPThnjMB8GA1UdIwQY
MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct
OTI3ZGQ0NTlhYzVjLzEvbEphZ283MGNJX3h2eVpoRmZzZzNBdzlPR2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj
LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU4iQMA0G
CSqGSIb3DQEBCwUAA4IBAQBj9oLy6FDnMsWPOUQdGjEJLA08irIBwzJBDcuchnDu
MFB1+JeBmA0idhrozBTdTrDzvrkRwoM+zb6GVLJv3cGIdpsLN+DevDNBrGSlkwVc
W2zxFTsnmHcxBnrgOjuLW68awFCgzuOfN5XYfgAI5H1bBYUXdBv7azmiAqZSWwML
EM6qQJj81YgYyP19o7XZZBoat/tGUYpcPq7gLHqYZKYAUH53v4Tla3xZ3QAHkPKj
Rjv+qJpFB3prflkW1JsCJsOAkA5/VmpCodSFzJbSXEaFAJ6mBBcAAyQrLxUuXrqw
zK225XS2tGMgEph8C4fxa3QOFjdn4R+inGHjrh2pdydz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net