Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/LEsrFZyR5bDFBMurHef8duijYmk.roa
File: LEsrFZyR5bDFBMurHef8duijYmk.roa (raw, json)
Hash identifier: t6D7a2Xxq6jfRKxHrUQheF6nN6sCOPPx30txGSMIk4Y=
Subject key identifier: 2C:4B:2B:15:9C:91:E5:B0:C5:04:CB:AB:1D:E7:FC:76:E8:A3:62:69
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0193D3DB91A7803D97AA6F0D4C5621EA080A
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/LEsrFZyR5bDFBMurHef8duijYmk.roa
Signing time: Tue 17 Dec 2024 09:03:22 +0000
ROA not before: Tue 17 Dec 2024 09:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35197
IP address blocks: 80.83.16.0/20 maxlen: 20
80.83.16.0/22 maxlen: 22
80.83.16.0/24 maxlen: 24
80.83.17.0/24 maxlen: 24
80.83.18.0/24 maxlen: 24
80.83.19.0/24 maxlen: 24
80.83.20.0/22 maxlen: 22
80.83.20.0/24 maxlen: 24
80.83.21.0/24 maxlen: 24
80.83.22.0/24 maxlen: 24
80.83.23.0/24 maxlen: 24
80.83.24.0/24 maxlen: 24
80.83.25.0/24 maxlen: 24
80.83.26.0/24 maxlen: 24
80.83.27.0/24 maxlen: 24
80.83.28.0/24 maxlen: 24
80.83.29.0/24 maxlen: 24
80.83.30.0/24 maxlen: 24
80.83.31.0/24 maxlen: 24
109.110.98.0/24 maxlen: 24
109.110.99.0/24 maxlen: 24
109.110.100.0/24 maxlen: 24
109.110.101.0/24 maxlen: 24
109.110.102.0/24 maxlen: 24
109.110.103.0/24 maxlen: 24
109.110.104.0/24 maxlen: 24
109.110.105.0/24 maxlen: 24
109.110.106.0/24 maxlen: 24
2a0d:6340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:db:91:a7:80:3d:97:aa:6f:0d:4c:56:21:ea:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Dec 17 09:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c4b2b159c91e5b0c504cbab1de7fc76e8a36269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:8a:76:63:cb:9e:8e:4b:de:5b:80:e9:6d:
00:13:8f:e3:19:3d:99:4b:55:a5:ce:6d:d5:72:63:
c5:d2:3c:93:ce:ca:ef:15:04:e2:dc:87:4c:79:e6:
6f:99:e1:b1:9e:c6:3a:37:16:c3:ff:2a:c7:6a:38:
aa:6b:5c:d7:2d:c3:34:30:d5:58:56:a7:0f:25:a3:
ff:bd:87:e9:48:bb:59:74:15:4f:04:1a:04:70:bd:
7a:cb:5c:43:7b:40:e2:ae:c5:df:36:6e:e2:d9:28:
ef:c5:f3:4a:1a:90:0f:4c:f3:ec:cb:f7:96:da:0d:
39:f9:84:b9:28:73:87:d4:c3:13:a2:30:19:f2:a9:
f8:d8:a0:be:cf:2c:fb:07:ea:4c:36:43:86:b5:87:
9f:69:86:fc:4f:a8:28:82:5b:3c:0d:3b:9b:a3:e7:
74:16:0c:fb:52:ad:d0:ee:de:6d:a0:44:35:27:d4:
7e:3d:57:65:a0:64:aa:f3:70:92:2f:05:42:34:23:
af:59:88:b9:50:09:31:4f:06:47:f6:2a:89:d5:82:
d5:92:b8:54:ae:f9:d1:65:32:da:3e:d9:0d:de:06:
6f:4e:a0:8f:6a:69:86:0f:8e:9a:c7:80:be:fe:81:
71:5b:68:09:0e:09:52:f7:a1:d7:94:76:17:2c:f5:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:2B:15:9C:91:E5:B0:C5:04:CB:AB:1D:E7:FC:76:E8:A3:62:69
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/LEsrFZyR5bDFBMurHef8duijYmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.16.0/20
109.110.98.0-109.110.106.255
IPv6:
2a0d:6340::/29
Signature Algorithm: sha256WithRSAEncryption
27:74:fd:81:7d:46:d1:b2:9c:7c:22:91:7d:f5:05:6d:26:39:
07:35:12:11:94:9a:d5:b0:b1:1b:3b:ed:34:dd:47:5d:2c:86:
0a:47:69:a2:9e:ad:33:8f:70:96:3b:9a:46:31:be:3b:69:cf:
53:52:62:2d:73:59:56:78:c8:3c:4b:2c:86:8c:79:ad:9c:2f:
a9:a0:82:f7:28:d8:d0:58:77:07:2c:2e:99:35:a4:32:5a:0d:
1c:71:48:14:61:de:6e:ab:91:90:70:6b:84:fd:33:79:ed:c6:
2b:3c:0b:fe:0a:ee:f9:91:f6:c6:80:7c:2a:14:e3:16:7b:3d:
74:3d:eb:5e:4c:af:a0:c9:e6:dc:6f:84:86:ec:fa:9b:d8:77:
33:84:1e:2e:82:56:fd:6c:6b:e4:ec:ee:41:6b:b7:9e:b6:76:
e8:17:b1:8c:0b:ac:c1:17:9d:ef:ce:c5:41:63:c6:7d:7c:ef:
23:16:62:7b:39:8e:09:39:3f:67:b9:fd:d2:e0:c3:c5:f1:76:
d0:e9:a4:d6:a9:52:e4:c5:e5:83:9d:fd:4f:af:39:e7:5d:ef:
fc:0c:f7:b4:d6:3a:bd:de:6b:5f:db:36:af:73:bb:4e:d9:92:
be:50:5f:f8:74:6c:6f:71:24:51:c3:55:be:72:5a:49:f1:ab:
c8:35:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:08 2024 by rpki-client on console.sobornost.net