Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/piCyct0NVy-piTUDW9-m-zFaGCY.roa
File: piCyct0NVy-piTUDW9-m-zFaGCY.roa (raw, json)
Hash identifier: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=
Subject key identifier: A6:20:B2:72:DD:0D:57:2F:A9:89:35:03:5B:DF:A6:FB:31:5A:18:26
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01953DC5B87E91A5F848BC78EB630CBD9BD4
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/piCyct0NVy-piTUDW9-m-zFaGCY.roa
Signing time: Tue 25 Feb 2025 15:42:02 +0000
ROA not before: Tue 25 Feb 2025 15:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213455
IP address blocks: 82.141.160.0/23 maxlen: 23
91.82.62.0/23 maxlen: 23
91.82.225.0/24 maxlen: 24
91.83.160.0/22 maxlen: 22
194.143.239.0/24 maxlen: 24
213.16.110.0/24 maxlen: 24
2001:1aa1:8::/48 maxlen: 48
2001:1aa1:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:c5:b8:7e:91:a5:f8:48:bc:78:eb:63:0c:bd:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Feb 25 15:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a620b272dd0d572fa98935035bdfa6fb315a1826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:f4:47:53:b0:47:19:76:4c:85:4e:d8:a1:
f3:94:65:ea:ca:ad:2e:13:dc:89:a4:9a:13:4e:17:
db:3c:c5:f9:01:32:25:bc:24:33:c6:dc:45:41:cd:
88:96:8c:ee:77:49:a5:5d:54:82:0c:13:73:3a:42:
69:e4:83:9b:2b:77:0f:95:72:89:e0:18:24:e8:be:
e1:d9:64:2d:de:38:7e:63:57:15:15:5c:ac:04:48:
5e:23:8c:df:da:34:68:9d:c7:6b:e6:d7:9f:47:23:
8b:f8:4d:cd:cb:0b:01:46:44:c3:5a:8d:63:a5:98:
f5:a6:43:78:1f:54:72:2b:b8:74:b9:53:92:c3:37:
6c:9c:91:7f:84:4f:b6:97:2c:b9:1f:e3:d4:ca:bf:
78:a3:a0:f2:a8:80:bc:16:cf:6c:df:5c:82:3e:a7:
20:a1:a6:24:72:fe:8c:fc:a7:0e:00:c7:95:64:d5:
4d:63:ae:0e:52:e3:cf:d3:78:02:60:3f:d2:7a:d9:
e5:40:50:e1:85:5d:39:fe:63:0d:20:4e:38:d2:00:
9d:b6:67:44:44:03:ae:3f:8a:14:67:98:19:dc:63:
39:86:2e:28:0b:ee:92:dc:19:c8:e0:e8:b9:58:65:
b1:32:30:7a:d5:eb:0c:d3:04:84:3d:98:23:74:23:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:20:B2:72:DD:0D:57:2F:A9:89:35:03:5B:DF:A6:FB:31:5A:18:26
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/piCyct0NVy-piTUDW9-m-zFaGCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.160.0/23
91.82.62.0/23
91.82.225.0/24
91.83.160.0/22
194.143.239.0/24
213.16.110.0/24
IPv6:
2001:1aa1:8::/48
2001:1aa1:18::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e5:da:60:0f:6c:79:23:ca:6e:5d:c9:18:f7:8d:e9:4b:cc:
74:04:cd:91:08:8f:24:47:55:30:1b:ae:5f:28:1c:3e:1e:eb:
4d:1f:38:71:e9:9c:7f:9a:99:91:f9:9d:e4:7e:35:c1:a9:fb:
6f:3b:64:a5:a4:d5:3c:f6:2f:fb:d6:8f:42:d7:21:84:50:81:
dd:4f:0e:c1:ca:71:57:11:70:5b:47:ad:2c:41:d5:1f:01:aa:
7a:cf:09:e5:71:51:06:fa:a7:a2:84:8c:a3:a9:0c:82:54:3f:
95:ba:5c:cc:43:ed:81:7b:59:49:d8:07:77:db:a3:de:32:7c:
f4:62:f5:33:25:63:99:86:60:1a:d2:c8:d6:59:9f:70:af:93:
c4:ee:a1:59:fb:22:97:9f:75:9e:49:62:82:54:ec:69:9a:d7:
1a:00:e8:d1:6e:4c:98:fa:33:5e:7b:30:5f:50:b5:4f:4c:72:
b4:0c:e6:3c:8b:1d:41:e6:9e:fc:bb:bc:b5:a5:84:b8:d0:17:
c2:f9:65:eb:06:4f:64:a2:10:ec:c6:13:ef:ec:d0:8c:68:da:
5e:b7:30:cc:15:8f:b3:ab:0e:82:88:e6:a6:c1:1c:7f:d1:be:
f1:35:39:57:ac:cf:17:85:67:26:9c:03:30:2b:79:88:be:4f:
da:d8:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net