Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/be8vZHIQ1O-yMUrEnm-Rt647sVc.roa
File: be8vZHIQ1O-yMUrEnm-Rt647sVc.roa (raw, json)
Hash identifier: pvBuP6PztryvJybpVkIz6/2PBJVRSL6jUXjVeSb3fes=
Subject key identifier: 6D:EF:2F:64:72:10:D4:EF:B2:31:4A:C4:9E:6F:91:B7:AE:3B:B1:57
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019422FBB4F75F6866D2739313699EA295DF
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/be8vZHIQ1O-yMUrEnm-Rt647sVc.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 83.136.8.0/24 maxlen: 24
83.136.9.0/24 maxlen: 24
83.136.10.0/24 maxlen: 24
83.136.11.0/24 maxlen: 24
83.136.12.0/24 maxlen: 24
83.136.13.0/24 maxlen: 24
83.136.14.0/24 maxlen: 24
83.136.15.0/24 maxlen: 24
87.237.224.0/24 maxlen: 24
87.237.225.0/24 maxlen: 24
87.237.226.0/24 maxlen: 24
87.237.227.0/24 maxlen: 24
87.237.228.0/24 maxlen: 24
87.237.229.0/24 maxlen: 24
87.237.230.0/24 maxlen: 24
87.237.231.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b4:f7:5f:68:66:d2:73:93:13:69:9e:a2:95:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6def2f647210d4efb2314ac49e6f91b7ae3bb157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:94:1c:b2:24:8b:98:81:bb:ec:d4:00:dd:
7f:57:d1:d6:3d:ad:aa:56:df:f0:5b:14:29:27:29:
19:51:a6:ed:20:c5:80:21:d5:1e:3c:04:f2:3e:b1:
4e:b7:bd:f8:e1:6a:de:7a:52:85:f6:82:c0:fd:b3:
31:8f:81:3a:8c:e1:f6:03:a8:5a:82:6d:9e:3e:08:
41:61:ba:10:ba:5c:f4:d7:b6:68:bf:a8:9a:7a:82:
bf:b7:e0:8e:44:30:54:e4:c9:7f:f2:7a:f4:96:8a:
14:32:17:48:4c:77:86:5a:b8:40:e5:af:7f:8a:26:
13:21:ef:55:bc:9a:3f:b4:6a:de:b5:7b:84:6a:a4:
5f:70:d4:c1:35:67:87:ac:f3:99:06:b3:e9:0f:9f:
9e:fe:4f:76:8d:0b:9c:91:21:7e:f2:fe:6d:74:fa:
4e:d0:16:8e:f9:3d:d4:f4:9d:91:8f:01:a2:39:28:
ff:56:c6:fe:7e:68:17:93:ea:f8:68:1e:68:22:cb:
33:2d:66:e0:5d:2c:85:77:1f:2b:b2:fa:24:13:45:
61:01:b9:82:1e:eb:04:f6:54:ba:75:9e:ba:5a:6f:
b1:66:b3:e7:fe:83:ad:97:d3:73:1c:e3:9e:1b:ef:
67:b3:de:bd:b8:1d:d1:d2:58:27:9c:34:73:f5:74:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:2F:64:72:10:D4:EF:B2:31:4A:C4:9E:6F:91:B7:AE:3B:B1:57
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/be8vZHIQ1O-yMUrEnm-Rt647sVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.8.0/21
87.237.224.0/21
185.51.204.0/22
185.82.116.0/22
Signature Algorithm: sha256WithRSAEncryption
35:bb:3f:72:0b:c0:c7:ef:d4:52:77:3d:22:ff:c0:ab:df:23:
f3:bc:32:d5:1a:0d:34:c2:8d:10:4b:2c:ac:be:59:e4:2e:c0:
7d:d6:e3:2a:92:95:95:00:d1:f9:57:5e:36:33:00:e9:98:87:
56:4f:9a:80:78:cb:1a:6d:e6:12:a9:e9:95:f1:74:e4:a7:67:
1a:4e:76:49:e6:6b:cb:ab:5f:8a:76:98:ed:1b:5c:42:ba:f7:
c8:8b:d0:75:b6:a2:43:bd:cf:69:de:08:0a:f0:b5:94:03:a1:
ae:07:a7:1e:7d:10:6b:ae:1a:60:d2:67:4e:90:db:8c:0d:40:
ec:23:8d:a2:d6:c8:a0:4c:2a:34:73:63:9e:d5:37:27:d4:1f:
f4:ae:03:c9:cc:62:0e:49:5e:0d:81:0e:1d:87:03:50:52:a4:
97:a2:0f:36:e6:2d:46:e7:ae:0d:95:16:64:2c:4c:75:bd:73:
58:43:c9:80:3f:de:33:02:89:ee:e6:a1:26:15:ae:06:75:91:
1d:f4:d1:ff:ae:32:8b:35:55:d5:72:22:4a:9a:df:db:34:1c:
28:d8:0c:ae:79:3e:cb:cc:dc:24:95:fe:25:1e:91:e6:ab:e3:
32:17:8d:19:7c:d3:8b:1f:9d:cc:27:34:6c:c0:7c:17:ed:a2:
4d:f7:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net