Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa
File: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (raw, json)
Hash identifier: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=
Subject key identifier: 2E:55:C5:C2:7D:82:A7:EA:33:E7:FC:24:A1:5E:21:9C:E8:E9:66:17
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019426D9B7CE730628A84FAF936E84E77D13
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 82.150.63.0/24 maxlen: 24
212.92.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b7:ce:73:06:28:a8:4f:af:93:6e:84:e7:7d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e55c5c27d82a7ea33e7fc24a15e219ce8e96617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:eb:f1:de:e0:da:32:3f:66:7b:ba:c8:63:
e0:48:7a:c6:88:1e:ed:0a:1c:72:d3:69:08:96:2b:
38:40:da:0e:fc:21:e2:99:c0:48:a7:e2:f4:01:ae:
dd:b5:d9:03:47:55:f3:a1:01:28:28:55:f3:55:4c:
69:5d:33:24:b7:a7:45:cc:54:fc:76:40:21:9e:59:
ce:38:2f:07:5a:73:a4:8e:6e:f3:04:3d:eb:37:76:
ee:f3:ae:38:d9:93:6e:7e:d8:09:61:e2:e9:0d:a3:
e7:52:36:b8:56:c5:02:46:03:95:7a:1d:77:ce:94:
02:97:ba:ca:2d:26:e1:f0:a5:39:bd:26:50:9a:d0:
b9:f0:10:9f:b3:76:99:f2:91:0d:af:5f:8b:ab:13:
54:5a:b1:0b:a9:11:64:22:ba:88:17:b0:37:97:5b:
00:b1:45:ec:d2:6d:3c:ae:b4:28:85:7b:5b:22:56:
b2:9f:ba:84:2a:4f:fe:21:92:ce:a2:e4:fa:7e:4f:
06:22:43:47:c4:57:a8:e1:3f:70:84:f8:c1:78:e0:
05:6e:3f:25:4f:df:f3:3d:8b:dd:d7:d2:8b:3b:9c:
0d:59:2b:63:b2:e3:f3:f8:89:b3:a9:52:2f:15:e6:
fd:9d:b0:f8:3d:e2:87:6e:32:f6:36:da:98:90:ee:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:C5:C2:7D:82:A7:EA:33:E7:FC:24:A1:5E:21:9C:E8:E9:66:17
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.63.0/24
212.92.23.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f7:1f:fe:b6:5e:19:e5:b4:00:24:46:0c:b9:fe:6f:e8:1f:
ce:10:d9:06:a8:a2:f0:c7:d5:ef:38:61:41:50:cf:a2:33:d4:
8a:e1:48:27:ab:41:78:3d:0e:e7:fb:d9:4c:f8:a7:14:16:c8:
41:3f:9d:f2:e7:9a:e3:0d:84:8c:0f:8f:53:fe:5b:ae:3a:19:
72:32:e5:c8:07:fe:86:94:0f:b6:33:ff:c0:f6:84:b6:2b:1f:
e5:59:a0:2c:d9:d8:1c:18:20:d3:d8:4d:8b:37:4b:4e:8e:9e:
ef:18:7d:70:d8:15:61:95:5b:36:52:8f:65:f9:36:c5:a0:9a:
24:64:fc:9f:bf:e0:f7:20:b8:0f:38:b6:03:93:90:6a:f7:85:
66:76:76:c5:d7:82:09:e0:d2:57:e7:92:f9:ea:46:eb:7c:c4:
f9:2b:d0:9b:1c:61:fd:d8:42:ec:62:0e:d7:8c:14:36:da:57:
46:ea:6f:7d:49:23:d3:45:04:1d:df:c7:1d:58:c2:45:24:ec:
41:56:e7:07:3e:15:8d:53:89:65:94:36:15:57:76:1a:60:ca:
d8:44:2f:b4:2e:f3:f2:04:fc:9f:a3:62:4f:ff:16:5a:77:13:
ae:98:e4:07:ef:1b:f7:ef:ee:72:ba:7f:10:17:43:bc:9f:5c:
00:90:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net