Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/z5K__5uwKXFTzaD79qKBdTd2bJI.roa
File: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (raw, json)
Hash identifier: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=
Subject key identifier: CF:92:BF:FF:9B:B0:29:71:53:CD:A0:FB:F6:A2:81:75:37:76:6C:92
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019424B2927216134F8FAEB4F6A78096C5E0
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/z5K__5uwKXFTzaD79qKBdTd2bJI.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8326
IP address blocks: 46.239.128.0/20 maxlen: 20
82.146.224.0/19 maxlen: 19
89.191.128.0/20 maxlen: 20
212.122.192.0/20 maxlen: 20
212.122.208.0/21 maxlen: 21
2001:908::/30 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:92:72:16:13:4f:8f:ae:b4:f6:a7:80:96:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf92bfff9bb0297153cda0fbf6a2817537766c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:bb:34:3e:84:b2:b3:bc:0c:9d:a3:d0:b3:
c1:d8:f2:b9:80:00:74:36:ef:94:f1:69:21:2a:6b:
30:b2:01:2d:d2:5c:69:d1:5f:8c:40:96:7a:7b:32:
c1:52:7c:a3:8b:70:cc:5d:b8:02:8f:0a:b7:4d:80:
4d:ae:2c:f5:e4:63:45:da:8d:5b:c4:8a:f1:69:99:
96:19:b4:f4:a7:f8:3d:6f:df:9d:d9:36:b5:56:6a:
ef:70:2b:9a:46:9c:45:6a:70:4e:8d:14:11:b9:08:
90:a0:2f:a7:c0:b0:4d:86:b6:1c:00:64:18:f0:5b:
e7:81:37:4d:a6:4c:05:94:d1:04:f0:be:c8:dc:d4:
af:9f:7b:02:1c:43:db:d6:ff:2b:b4:b6:2c:40:7e:
b6:7f:fc:3f:06:7f:5b:04:d0:ee:dc:8e:cd:0a:de:
01:ce:9f:7e:10:31:05:e4:49:05:04:31:61:42:5b:
18:25:13:fc:bb:24:b9:0c:7b:5f:24:09:9b:24:ea:
94:b2:b8:18:65:66:a2:3a:ea:97:28:ca:12:41:14:
26:3c:5c:3e:94:19:35:d9:79:21:3a:0f:d9:15:da:
b7:f9:27:04:25:73:c5:ac:fd:d6:25:48:bd:c4:a5:
61:84:3d:3b:b5:5e:b5:ce:6b:af:66:a5:35:2e:0e:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:BF:FF:9B:B0:29:71:53:CD:A0:FB:F6:A2:81:75:37:76:6C:92
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/z5K__5uwKXFTzaD79qKBdTd2bJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.239.128.0/20
82.146.224.0/19
89.191.128.0/20
212.122.192.0-212.122.215.255
IPv6:
2001:908::/30
Signature Algorithm: sha256WithRSAEncryption
5c:b8:2d:9b:b0:2a:f0:b7:f0:2f:88:1d:f5:0c:3f:8d:16:b5:
3e:d1:f0:67:9d:f4:dc:05:f3:ea:9c:75:a2:6f:e7:ad:32:da:
85:dd:37:2e:e9:57:67:13:ed:38:19:84:7c:28:c8:66:60:c2:
51:31:84:07:ed:80:3c:19:02:2d:e0:b2:63:22:ca:4e:e3:10:
f4:2b:62:2e:d5:ce:f0:ea:cb:13:7a:38:c3:44:28:44:46:86:
12:56:0a:0e:94:37:45:9c:b3:ff:52:f1:4c:b3:75:09:05:4f:
16:13:5c:3a:b2:c5:16:e9:0c:43:fe:ee:a4:c1:e7:8d:a3:39:
e4:21:fd:a7:cc:ba:1d:1f:ec:0b:36:52:1d:11:53:a1:3f:3e:
07:36:a1:3f:2c:54:d6:5a:bd:cc:a9:12:44:b2:27:5b:41:d3:
c9:b3:e8:4c:3a:5d:3a:c5:67:57:f3:4f:77:1e:57:cd:0f:cf:
5b:52:05:7e:26:b4:57:45:4a:b4:a0:50:86:ae:36:af:7b:ea:
78:db:e7:8f:ca:19:2a:b1:83:1f:b1:9a:cc:ff:0f:4b:e9:6e:
95:c2:d0:db:8a:97:68:e9:6f:3b:2a:f6:03:c5:73:f0:9e:e2:
ec:25:b2:f7:1e:2f:47:e9:b1:d3:ea:93:be:62:7e:a5:fe:14:
2c:32:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net