Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/ENbIvSiky0xTTmpR2FVxu0--bgo.roa
File: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (raw, json)
Hash identifier: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=
Subject key identifier: 10:D6:C8:BD:28:A4:CB:4C:53:4E:6A:51:D8:55:71:BB:4F:BE:6E:0A
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0194206854169D4B25D6E308D37D396C9D9F
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/ENbIvSiky0xTTmpR2FVxu0--bgo.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12329
IP address blocks: 62.221.232.0/21 maxlen: 24
62.221.240.0/21 maxlen: 24
81.173.6.0/24 maxlen: 24
156.67.59.0/24 maxlen: 24
185.154.112.0/22 maxlen: 24
185.249.168.0/22 maxlen: 24
212.23.128.0/19 maxlen: 24
2001:7d8::/32 maxlen: 48
2a07:8c80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:16:9d:4b:25:d6:e3:08:d3:7d:39:6c:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d6c8bd28a4cb4c534e6a51d85571bb4fbe6e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:be:25:ee:b8:f4:9c:a6:41:00:70:9c:4a:
c3:9f:ed:cc:14:bb:54:7c:cb:33:98:05:e0:67:88:
03:e2:7d:8f:0c:a5:8e:10:a3:35:3d:e0:c3:eb:1e:
b3:c0:e2:5c:13:00:db:aa:10:8e:bf:64:b2:0d:45:
32:08:4a:98:31:f1:fd:f4:65:d8:21:52:7c:fd:97:
c0:51:0d:14:75:0e:9e:fd:6f:87:fa:93:e9:45:a7:
15:71:c2:81:ce:e2:c8:51:78:71:b6:55:d7:7f:c1:
2b:57:31:84:b0:2b:d6:c9:d3:d7:a7:a8:50:e8:76:
b4:fa:b9:0d:82:41:f1:20:60:62:70:75:24:d9:f5:
86:89:37:e3:2b:70:fa:b3:09:13:c4:d6:aa:42:be:
5e:d8:18:dc:59:34:6f:9d:03:28:c6:c8:ea:7f:9e:
05:66:4b:72:76:43:fa:c0:c1:49:95:6f:8c:8c:3f:
74:d6:0c:34:52:b3:93:16:4c:fd:92:2d:08:58:d2:
3c:cd:47:c1:98:6c:51:bb:39:28:52:9f:4e:c3:7a:
de:96:ce:eb:00:43:de:ed:0e:7c:dc:5c:7b:8e:fe:
66:78:13:21:2b:67:66:8a:f2:27:49:f1:2f:a5:2f:
12:fb:a2:5f:4c:10:6a:75:69:dc:b2:6c:f6:ac:42:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:C8:BD:28:A4:CB:4C:53:4E:6A:51:D8:55:71:BB:4F:BE:6E:0A
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/ENbIvSiky0xTTmpR2FVxu0--bgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.232.0-62.221.247.255
81.173.6.0/24
156.67.59.0/24
185.154.112.0/22
185.249.168.0/22
212.23.128.0/19
IPv6:
2001:7d8::/32
2a07:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
32:55:44:5f:4f:17:e0:75:53:d4:bb:34:0e:99:b8:db:b9:a5:
26:0b:c3:e3:d2:d0:de:db:e5:8f:8e:4a:a3:0a:68:81:48:0a:
41:62:07:ff:ec:c8:bf:97:91:f4:38:cb:63:a3:ee:10:95:44:
2a:a4:cb:70:59:fd:2c:4c:4d:7c:86:26:60:ff:95:38:36:4c:
2b:91:e8:15:37:ec:6a:84:3e:05:53:12:a8:7e:c6:38:b2:38:
a4:b2:4c:18:33:c2:b4:09:b0:61:70:6e:22:c3:80:27:89:62:
0d:46:14:62:73:36:28:5c:72:8c:30:ac:f4:f0:c6:fc:a2:a3:
e7:b4:60:48:bd:98:86:42:f8:15:84:f0:01:06:9e:28:89:fb:
d9:e1:f2:dd:fb:18:a7:74:8f:f5:02:03:77:64:ec:08:91:18:
fe:3d:50:14:d8:b6:5e:76:bf:fd:2d:6a:e2:aa:5e:5f:6b:75:
14:22:89:25:16:0e:8e:f3:e8:0d:c1:a7:55:5c:b0:a2:e8:c7:
37:2b:f3:77:46:fd:3e:da:c5:59:96:5c:be:b6:db:5b:a7:18:
11:35:31:d6:50:02:bf:69:a9:98:05:e0:64:56:c6:76:95:b4:
1a:8e:bd:ed:cb:81:99:02:59:e1:4b:c8:ce:4d:de:fb:ab:d6:
68:23:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net