Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/IEg_1HpNrFBExrV7xW7WGP5U4jU.roa
File: IEg_1HpNrFBExrV7xW7WGP5U4jU.roa (raw, json)
Hash identifier: AVV2kSADJ5P/k7ghn4wGQAaXQszKA91miOe/RYa+DG8=
Subject key identifier: 20:48:3F:D4:7A:4D:AC:50:44:C6:B5:7B:C5:6E:D6:18:FE:54:E2:35
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 0194228E3AB0800781597BCF1DB14F2F7E19
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/IEg_1HpNrFBExrV7xW7WGP5U4jU.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12479
IP address blocks: 62.32.128.0/19 maxlen: 24
62.32.160.0/19 maxlen: 24
62.32.192.0/20 maxlen: 24
62.32.208.0/20 maxlen: 24
62.32.224.0/19 maxlen: 24
83.231.0.0/17 maxlen: 17
83.231.0.0/19 maxlen: 24
83.231.40.0/24 maxlen: 24
83.231.41.0/24 maxlen: 24
83.231.42.0/24 maxlen: 24
83.231.48.0/21 maxlen: 24
83.231.56.0/21 maxlen: 24
83.231.64.0/18 maxlen: 24
185.124.28.0/22 maxlen: 24
212.169.128.0/17 maxlen: 24
213.143.32.0/19 maxlen: 19
213.143.32.0/24 maxlen: 24
213.143.44.0/22 maxlen: 24
213.143.48.0/22 maxlen: 24
213.143.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:b0:80:07:81:59:7b:cf:1d:b1:4f:2f:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20483fd47a4dac5044c6b57bc56ed618fe54e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:0b:cc:54:ef:1a:a0:47:dc:8a:9f:d4:51:
cf:36:fe:72:e3:e1:39:fa:69:ae:1d:11:12:65:f2:
69:6e:d1:3b:90:11:5c:fe:eb:e8:45:db:67:10:53:
74:88:bf:be:fc:61:55:b2:58:92:c5:46:c7:59:6b:
5f:b0:2e:ff:02:40:b1:ea:48:a3:e4:e3:37:17:3a:
f5:d9:c2:05:58:5c:90:90:b3:ed:4f:9d:b9:d0:07:
f6:a0:0b:a2:1d:55:d3:bd:c8:4d:22:a6:56:31:f6:
43:84:94:62:95:5b:cf:1e:cc:a5:ce:be:f7:4d:88:
9f:96:01:c2:b3:be:bb:a7:82:05:49:5f:53:fb:30:
ca:be:d6:7c:0a:34:35:f0:cd:5d:77:b4:c1:ed:66:
27:d0:01:3b:02:7a:90:0d:97:0a:b2:05:74:3e:81:
19:61:7e:10:a6:4b:1e:da:b2:c6:31:95:be:34:06:
9b:ae:9f:ba:36:42:3c:fa:f1:b9:33:0e:87:23:f0:
3d:6a:18:5d:06:0e:b2:58:75:0e:cf:26:67:77:40:
6c:f3:52:99:67:f4:43:d1:fa:c9:af:e9:32:e4:b6:
6c:24:7f:9b:39:0a:9a:a8:25:00:1e:3c:31:68:f2:
59:1c:d3:d0:c6:82:f2:de:58:ee:01:5b:fa:0a:a1:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:3F:D4:7A:4D:AC:50:44:C6:B5:7B:C5:6E:D6:18:FE:54:E2:35
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/IEg_1HpNrFBExrV7xW7WGP5U4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.128.0/17
83.231.0.0/17
185.124.28.0/22
212.169.128.0/17
213.143.32.0/19
Signature Algorithm: sha256WithRSAEncryption
64:1b:28:2c:fc:dc:a0:47:22:72:60:5e:f1:e1:ed:b4:8a:f6:
11:e1:b3:0f:88:85:b7:b7:d8:80:b5:97:00:be:45:ec:db:24:
3f:c3:be:07:f7:54:ce:b9:85:f2:9f:47:12:0d:4a:b9:cf:f9:
4a:26:0b:02:ce:89:b1:95:e6:b8:89:69:d9:43:29:4a:3e:72:
c5:67:b8:b9:57:22:6c:6f:d1:78:2a:4d:8d:51:2c:df:4d:9d:
38:31:91:a0:a1:21:3e:54:18:34:d8:e3:2c:a8:73:c1:2c:4e:
36:6b:bf:c2:90:08:e5:56:70:ff:74:ac:7f:fa:35:8e:f2:74:
06:8e:6c:57:f7:4c:5b:61:7c:7a:1e:f1:c7:17:26:b4:58:14:
19:e1:fa:34:8d:41:01:af:fd:87:27:ff:97:9b:c4:02:77:72:
6c:b9:05:f2:48:6f:a5:e1:f5:f6:76:89:cc:46:a1:d8:a7:8a:
44:8a:80:71:6d:4d:61:a1:43:bd:ab:92:c9:af:2d:3d:ba:c6:
d4:ed:8a:0c:a2:a1:e3:59:94:86:64:07:f5:aa:80:c8:78:89:
90:b4:83:d2:d0:39:1f:ef:cf:38:81:07:6c:c6:4f:9c:1b:ba:
b3:3f:31:e1:5e:70:8c:50:1b:52:4f:64:89:90:59:b7:ef:7c:
73:49:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:33 2025 by rpki-client on console.sobornost.net