Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/G-x9l4PGLNif47OW3NwBj1bjEFk.roa
File: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (raw, json)
Hash identifier: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=
Subject key identifier: 1B:EC:7D:97:83:C6:2C:D8:9F:E3:B3:96:DC:DC:01:8F:56:E3:10:59
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019423D802457DF20D4257EDCC27DD6C7423
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/G-x9l4PGLNif47OW3NwBj1bjEFk.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13189
IP address blocks: 82.100.64.0/18 maxlen: 18
185.199.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:02:45:7d:f2:0d:42:57:ed:cc:27:dd:6c:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bec7d9783c62cd89fe3b396dcdc018f56e31059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:3a:98:07:fa:85:5c:d9:bc:84:fa:40:70:
33:28:7e:f2:a9:3d:f0:28:29:44:6e:27:45:00:9d:
46:f2:26:da:e3:1e:33:69:5b:8e:85:c1:e4:d3:93:
03:95:5a:7f:a9:98:86:ba:11:f9:51:61:2a:d2:ff:
24:e3:6e:0c:e5:e2:ef:ea:f6:e0:5f:c3:9f:89:49:
1d:fd:76:51:4c:ec:c1:e2:d1:46:68:52:8c:8c:7b:
f4:89:c1:23:99:7e:46:36:24:0e:fd:ef:59:ff:49:
30:80:d9:a1:22:db:a2:20:03:ef:b6:6d:5a:2e:e3:
4e:16:c3:87:f4:fd:1b:35:73:6c:c0:f4:d2:95:fc:
ba:ac:56:2b:3b:95:87:ff:f9:5b:3c:ca:01:65:a7:
04:4d:5f:3c:6f:d2:bb:a0:87:73:7d:47:91:d9:f0:
b2:c5:70:13:cc:b9:1d:72:a5:37:7b:bd:28:3e:32:
90:ae:23:c4:c9:92:6d:1a:c9:e2:d3:e9:bd:68:ac:
cc:63:93:2c:87:27:57:bc:ce:cd:e1:78:84:8b:19:
a5:16:6d:ad:f1:e1:51:76:08:46:e4:b8:c6:a6:4f:
ab:2b:e7:c2:c5:c2:a0:af:3f:f2:92:dd:02:43:62:
b0:04:56:ee:d9:69:ec:e9:66:b0:f7:bc:9a:17:f4:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:7D:97:83:C6:2C:D8:9F:E3:B3:96:DC:DC:01:8F:56:E3:10:59
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/G-x9l4PGLNif47OW3NwBj1bjEFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.100.64.0/18
185.199.136.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0e:0a:24:35:3f:c6:14:97:b6:43:1e:a6:92:a1:68:f4:f4:
da:62:c4:eb:b3:13:dd:8e:59:38:25:3f:34:fb:ca:ab:e2:7a:
57:b6:8e:36:48:6d:13:8e:14:2f:00:f2:89:6a:bd:7b:8e:4b:
71:08:6a:da:28:11:2c:0d:32:7d:92:c0:5d:95:d4:aa:0f:03:
6a:40:45:54:f8:02:0d:69:fd:55:32:15:56:e1:3e:04:e2:a7:
7a:7a:4e:f8:cf:5f:ba:5c:9f:e8:2d:13:d3:49:cd:ca:34:94:
c0:f2:6f:f8:7a:7c:f1:9c:67:3f:9b:b0:da:8f:f8:3d:e3:04:
6e:69:89:ec:bd:4e:d1:28:16:cc:2f:c5:24:e4:be:86:99:10:
fa:4e:6b:51:22:52:a4:3d:f4:84:62:fe:3f:a8:d5:43:48:ad:
98:d7:0f:5c:42:dc:31:52:06:18:da:73:32:6c:27:49:aa:0e:
a2:81:bc:6e:60:07:0a:2c:f5:fd:06:67:cd:d5:3b:df:65:95:
4d:b7:52:40:e2:9c:df:d9:8a:dd:21:0b:60:23:0a:c4:1e:00:
39:4c:f5:4f:77:54:ca:05:26:70:b2:55:ce:e7:67:99:30:73:
34:16:70:1c:31:17:55:a9:70:a9:cd:c3:4c:37:d9:e1:f0:ec:
b0:02:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net