Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/eXtnT82vLrkQIX6pAwLJMLSD-bg.roa
File: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (raw, json)
Hash identifier: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=
Subject key identifier: 79:7B:67:4F:CD:AF:2E:B9:10:21:7E:A9:03:02:C9:30:B4:83:F9:B8
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019427B5366761DF3D64E2875E96826240FE
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/eXtnT82vLrkQIX6pAwLJMLSD-bg.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12605
IP address blocks: 81.10.128.0/17 maxlen: 17
86.56.128.0/17 maxlen: 17
90.146.0.0/16 maxlen: 16
90.146.0.0/17 maxlen: 17
90.146.128.0/17 maxlen: 17
185.196.156.0/22 maxlen: 22
212.33.32.0/19 maxlen: 19
212.241.64.0/18 maxlen: 18
2a00:cf8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:36:67:61:df:3d:64:e2:87:5e:96:82:62:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=797b674fcdaf2eb910217ea90302c930b483f9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:77:35:7d:43:0a:bb:c5:92:0d:d6:f9:13:
b7:68:ca:43:97:2c:6b:0a:ad:e9:5f:3b:8e:80:d7:
97:a6:61:5f:92:16:89:46:77:81:6b:54:a5:fc:9e:
3a:89:10:35:a0:40:32:a7:31:76:93:26:ec:a3:a9:
24:35:b8:ff:37:8e:d3:68:97:37:74:6f:8c:78:9f:
e5:c5:d1:cc:e0:7c:f6:6d:a6:47:40:2a:25:50:03:
0c:9a:0c:2d:86:ae:8b:1b:9b:34:3e:b9:66:53:19:
d9:e5:1b:a9:aa:a3:e7:c7:77:1e:ba:d3:13:49:3a:
6f:b9:94:55:4b:99:a1:70:de:b6:01:b0:e1:cc:26:
24:2d:7a:cd:81:2f:5a:d6:10:fc:49:8f:ad:da:41:
2e:f4:92:46:28:6b:1e:e1:c4:e4:b0:53:4e:40:6d:
25:01:79:17:5b:28:65:22:a2:8d:6f:a4:e5:98:d8:
b8:96:5e:09:51:83:14:1d:c8:2c:b1:60:f9:e1:c2:
bc:f2:1c:64:c2:bf:9a:cd:b2:0f:e2:1a:8d:f4:45:
5d:de:06:73:d4:50:ee:8c:dc:97:31:87:9c:40:c4:
9f:3d:ca:c6:cd:5f:91:ab:0c:a2:23:05:88:0a:91:
41:01:9b:8c:96:b8:9e:89:ff:1d:4e:b4:1c:77:98:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:67:4F:CD:AF:2E:B9:10:21:7E:A9:03:02:C9:30:B4:83:F9:B8
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/eXtnT82vLrkQIX6pAwLJMLSD-bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.10.128.0/17
86.56.128.0/17
90.146.0.0/16
185.196.156.0/22
212.33.32.0/19
212.241.64.0/18
IPv6:
2a00:cf8::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b4:f6:fe:bd:08:f2:13:0b:8f:04:f3:c7:b5:e7:d7:f5:f7:
be:3c:82:df:a8:e1:d2:33:2a:c5:f1:ae:27:2b:4c:54:3e:10:
39:5e:05:04:eb:46:6e:df:ef:43:e1:3e:a0:52:45:d6:0e:83:
69:2b:23:00:5f:7d:d9:47:03:b5:0e:c3:4d:56:6f:f6:f6:65:
90:ab:2c:3e:f2:94:64:75:12:f2:aa:b0:ce:93:5a:e8:c8:34:
58:f6:a4:eb:d1:15:90:b0:cb:e8:b2:a7:41:77:33:4c:5f:a8:
68:64:be:9f:72:26:50:b2:76:39:5a:14:f8:14:40:fe:46:ea:
9e:c3:2b:95:19:a0:ab:6e:4e:54:4c:d3:af:ce:a6:61:5b:2e:
a1:0c:96:a8:87:a5:92:eb:32:f3:57:13:3e:aa:46:bb:72:d8:
42:a3:52:12:33:db:c0:38:63:b6:f7:5d:e9:04:5c:40:37:70:
24:b6:d4:7a:07:6e:8c:54:0f:e0:75:19:aa:e1:4f:30:f4:af:
f4:ca:6d:65:cc:d2:41:43:f1:61:fa:b5:40:5a:5e:18:82:58:
ed:11:5f:92:c7:b4:05:a5:ad:1d:f6:36:ca:3a:92:bc:5d:91:
77:5f:49:ae:36:4e:a7:81:3e:88:cf:45:45:4a:b6:07:aa:71:
94:96:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net