Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/grmyngUtiKBJYqWSN7GwyYKGjZE.roa
File: grmyngUtiKBJYqWSN7GwyYKGjZE.roa (raw, json)
Hash identifier: vQBleHbsKOnpK4V6eTLrtDHR6DR28u6obDlrYS8dfRY=
Subject key identifier: 82:B9:B2:9E:05:2D:88:A0:49:62:A5:92:37:B1:B0:C9:82:86:8D:91
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 019561A4B7F0681CC3E7CAF7EF5793381D1F
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/grmyngUtiKBJYqWSN7GwyYKGjZE.roa
Signing time: Tue 04 Mar 2025 14:52:19 +0000
ROA not before: Tue 04 Mar 2025 14:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21469
IP address blocks: 80.252.192.0/20 maxlen: 20
80.252.192.0/22 maxlen: 22
80.252.192.0/23 maxlen: 23
80.252.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:a4:b7:f0:68:1c:c3:e7:ca:f7:ef:57:93:38:1d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Mar 4 14:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b9b29e052d88a04962a59237b1b0c982868d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:b8:af:d2:f9:94:51:bc:d9:a7:20:79:3d:
54:6e:66:37:2b:3f:75:1c:6d:76:96:79:bc:d0:d4:
82:2c:34:fa:ac:ff:0b:cb:36:68:35:94:50:25:ab:
69:b9:7a:02:a6:d8:5e:61:ec:19:8e:fc:f5:50:a6:
df:33:bc:32:5a:26:64:02:39:91:7a:4c:4d:4b:26:
e2:34:ed:47:6e:c4:8d:55:34:66:fc:20:99:d5:dd:
1b:80:93:36:82:82:8f:8c:e8:a4:74:20:66:85:1d:
c5:b6:91:9b:ae:ed:af:33:9a:3a:15:f7:36:94:92:
28:ef:44:8e:bf:85:89:7b:c8:da:5b:41:ff:46:dd:
8b:6b:64:2b:c5:9c:01:9f:dc:6e:34:11:61:c4:3c:
6c:16:21:56:fe:21:f6:a3:82:1e:8b:45:b3:af:35:
39:ad:72:f9:4b:50:38:7e:c0:df:17:3f:74:17:9b:
28:bd:26:3f:07:72:7b:e5:3c:4c:a0:46:a2:d1:26:
e5:0f:d6:0b:2e:cb:b8:ff:7c:14:48:1f:63:23:8a:
ea:c1:7c:64:f6:88:ef:ca:b0:9f:32:d5:a0:c7:c0:
fc:9b:12:86:c2:a3:87:38:82:c9:6b:e1:34:9e:7e:
10:f3:e9:77:d0:e3:2f:c8:30:35:2b:85:4c:9a:52:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:B2:9E:05:2D:88:A0:49:62:A5:92:37:B1:B0:C9:82:86:8D:91
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/grmyngUtiKBJYqWSN7GwyYKGjZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.192.0/20
Signature Algorithm: sha256WithRSAEncryption
61:63:ea:2c:30:89:7d:e3:a3:db:d6:69:c7:1a:9b:93:f8:7a:
08:91:a3:3a:49:55:c6:94:bf:87:df:d5:b5:77:90:b8:a4:fa:
0f:38:11:14:1e:2e:31:60:99:a3:bf:d1:1b:53:97:4a:d6:bd:
db:b2:2a:4f:cf:02:63:f2:21:7e:26:3a:6d:3a:d2:74:13:3d:
3e:2c:f5:86:cd:4d:8e:72:a5:bf:57:0f:22:b3:85:bd:42:43:
0a:3b:0a:01:c8:17:2f:f9:ac:75:6a:a3:f7:76:8a:5d:57:b9:
d9:ef:b5:b1:2d:71:89:75:0c:1d:05:0d:95:18:ed:c9:2c:1d:
b9:fb:10:bb:3b:cf:34:46:40:70:d3:03:0d:58:1e:64:a7:d8:
85:fb:a3:71:ce:16:ed:bf:c3:62:7f:93:99:77:c5:a4:8a:f4:
d8:30:95:54:b6:a0:1b:a3:5c:77:9b:50:b4:be:b8:42:21:68:
bc:a1:c9:d1:1a:cd:fb:a8:4a:79:0f:d7:15:7b:57:33:1c:72:
7f:14:82:b0:f0:c8:ac:92:6c:be:db:ca:9d:b7:d9:ef:f2:ed:
00:1e:bc:47:5d:2b:1a:4e:4e:b5:5b:22:38:38:f2:1b:a4:e2:
81:1f:f3:e8:4d:f4:d5:cb:fe:f1:f0:bf:48:52:e6:56:61:b6:
5e:60:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net