Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa
File: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (raw, json)
Hash identifier: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=
Subject key identifier: 7D:AD:99:2C:9B:61:41:2D:1C:63:19:54:E9:A6:52:F1:B3:10:14:CB
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0194DAF0442F655C9552EE24F26A536385AC
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa
Signing time: Thu 06 Feb 2025 11:06:06 +0000
ROA not before: Thu 06 Feb 2025 11:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31275
IP address blocks: 83.220.64.0/19 maxlen: 19
83.220.64.0/24 maxlen: 24
83.220.65.0/24 maxlen: 24
83.220.66.0/24 maxlen: 24
83.220.67.0/24 maxlen: 24
83.220.68.0/24 maxlen: 24
83.220.69.0/24 maxlen: 24
83.220.70.0/24 maxlen: 24
83.220.71.0/24 maxlen: 24
83.220.72.0/24 maxlen: 24
83.220.73.0/24 maxlen: 24
83.220.74.0/24 maxlen: 24
83.220.75.0/24 maxlen: 24
83.220.76.0/24 maxlen: 24
83.220.77.0/24 maxlen: 24
83.220.78.0/24 maxlen: 24
83.220.79.0/24 maxlen: 24
83.220.80.0/24 maxlen: 24
83.220.81.0/24 maxlen: 24
83.220.82.0/24 maxlen: 24
83.220.83.0/24 maxlen: 24
83.220.84.0/24 maxlen: 24
83.220.85.0/24 maxlen: 24
83.220.86.0/24 maxlen: 24
83.220.87.0/24 maxlen: 24
83.220.88.0/24 maxlen: 24
83.220.89.0/24 maxlen: 24
83.220.90.0/24 maxlen: 24
83.220.91.0/24 maxlen: 24
83.220.92.0/24 maxlen: 24
83.220.93.0/24 maxlen: 24
83.220.94.0/24 maxlen: 24
83.220.95.0/24 maxlen: 24
93.93.172.0/22 maxlen: 22
2a04:e380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f0:44:2f:65:5c:95:52:ee:24:f2:6a:53:63:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Feb 6 11:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dad992c9b61412d1c631954e9a652f1b31014cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:5a:e3:5a:ee:f1:e0:a8:2c:9c:10:70:39:
5f:e0:11:27:f9:dd:76:39:32:3c:60:39:e8:ba:9c:
51:7c:1e:03:2d:48:f0:78:1e:76:f7:41:f2:54:6d:
9a:7d:93:3d:46:5e:fd:d9:3a:db:3d:75:06:cd:8b:
6d:e9:43:ca:7b:f9:f1:7f:87:4a:d5:7d:a0:f8:21:
88:84:c5:b7:03:c7:87:3d:28:ab:07:c8:34:db:6d:
64:75:fb:5a:17:be:49:54:4d:6d:33:0e:b2:43:96:
e2:ec:9f:db:e4:cf:30:32:21:98:8f:1a:11:52:24:
89:c9:6f:45:4e:58:a0:3c:05:76:7c:2d:e7:fa:b6:
67:b7:88:ef:45:a2:9a:13:8b:7d:c1:9a:13:2d:68:
ad:35:9c:15:e0:57:d1:e7:18:68:91:0a:ed:3a:62:
55:08:93:ff:68:c1:c2:58:b8:eb:23:94:28:9b:65:
1d:29:25:cd:7d:bc:30:87:4a:00:ec:e4:6e:a2:8e:
dd:48:24:16:fd:f3:5a:86:b9:51:2f:63:1f:5d:c8:
87:bf:27:da:96:da:d9:58:bd:56:ff:12:d6:78:94:
a9:99:b3:36:94:a9:37:5e:a7:29:20:a8:bd:a1:ab:
33:1a:61:47:7a:b4:5e:0e:8a:62:e8:c5:29:20:2d:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:99:2C:9B:61:41:2D:1C:63:19:54:E9:A6:52:F1:B3:10:14:CB
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.64.0/19
93.93.172.0/22
IPv6:
2a04:e380::/29
Signature Algorithm: sha256WithRSAEncryption
08:92:db:28:98:78:d8:c2:2b:23:38:87:37:c6:ac:6c:ef:b2:
92:27:ea:25:66:65:fb:fc:6d:e9:ab:4f:f3:0a:54:7e:64:6b:
c3:3a:be:c7:ee:d8:8b:7a:96:f3:1d:c2:d4:67:dc:17:04:f1:
24:55:96:60:15:31:16:8e:52:f4:20:79:8c:77:7e:b9:1b:55:
30:e9:90:09:5e:45:88:87:72:7a:65:c0:6f:c2:2b:61:0b:9c:
4e:af:7f:72:a3:c7:6d:a2:09:b4:5b:97:b5:5e:e8:cf:41:c8:
0b:55:94:d1:2f:63:c1:ec:43:69:35:09:8d:ac:24:53:b7:a8:
7a:67:d2:0e:d9:f0:16:c1:10:80:93:a3:ff:e6:35:76:04:c8:
09:d8:73:55:4b:0b:7a:4d:4a:c4:b5:70:f6:8d:42:f7:44:b2:
c6:db:95:7e:5f:80:96:da:e5:a0:94:70:e5:ca:df:8c:c9:bf:
23:1b:44:b7:57:29:b2:7e:84:0b:af:d2:61:09:ce:a9:f0:f9:
7a:b3:48:50:98:ef:84:8c:5a:01:bc:69:b3:59:b7:d3:f0:62:
98:e5:b9:fe:d5:6c:dc:e8:4b:a2:39:64:24:5e:f1:65:34:5d:
64:d6:4e:80:91:fe:9b:f9:a2:23:f6:70:f6:f9:52:30:56:ea:
6e:ef:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net