Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa
File: hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa (raw, json)
Hash identifier: EvZcqY0u0j8E3qud63Mfgc0SNbLfR+3aTCgDNKTv4/Y=
Subject key identifier: 85:46:54:F5:6E:43:1C:03:2B:1F:91:15:7F:D9:F4:BF:A1:7B:1A:58
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA797B5D3B2D072A47243B179DC60B
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202141
IP address blocks: 82.160.140.0/23 maxlen: 23
88.199.94.0/24 maxlen: 24
88.199.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:7b:5d:3b:2d:07:2a:47:24:3b:17:9d:c6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=854654f56e431c032b1f91157fd9f4bfa17b1a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:02:6a:e9:d8:e8:32:0b:1c:e7:85:95:2f:
35:f7:54:34:e1:84:ce:d7:38:2a:e5:20:dd:57:70:
cf:b9:f1:f0:18:fc:4f:95:ab:b3:e6:ba:99:1f:64:
7a:57:e9:8c:b4:bb:90:05:51:48:17:90:02:c5:52:
79:34:00:13:fb:83:6e:aa:d2:fe:93:01:ed:45:96:
4e:76:51:cb:6d:1a:cd:ae:d1:a9:19:de:bb:35:d5:
57:8a:46:c7:c3:2b:72:29:8b:c3:b3:8f:38:0f:b2:
e7:67:b3:7d:e5:07:ce:66:6d:d3:56:26:88:24:a6:
51:33:08:67:50:80:85:1c:21:a7:50:8f:fc:3c:c4:
7e:a0:be:81:2b:f7:fa:f5:c9:d1:3a:d7:3b:7d:e8:
3d:1f:70:73:15:42:2d:ed:36:4c:99:33:f7:ac:2d:
d0:26:c7:85:81:58:69:67:e6:a1:84:4f:cd:8d:69:
15:6d:67:35:94:4a:15:f2:58:16:6c:7e:f0:98:7b:
4d:96:92:f4:18:71:c8:45:8c:6d:98:1b:ee:5d:d4:
62:24:3d:d6:63:29:c3:0a:79:95:72:be:19:97:3e:
77:2e:40:6f:b5:e2:bc:a9:71:aa:d9:4c:62:43:04:
d3:e0:1b:d5:53:c3:92:b1:c1:67:b5:e7:34:80:6f:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:54:F5:6E:43:1C:03:2B:1F:91:15:7F:D9:F4:BF:A1:7B:1A:58
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.140.0/23
88.199.94.0/23
Signature Algorithm: sha256WithRSAEncryption
94:ae:40:69:7e:1a:a9:69:42:70:80:17:36:27:38:cf:e7:11:
64:16:56:74:b3:25:81:fc:3c:fd:80:2a:a4:8e:5a:20:55:eb:
42:4f:8f:df:87:41:89:11:ca:e8:3b:17:c6:ed:65:60:b9:e8:
f6:bf:59:0e:b5:30:ba:f2:5b:0e:68:a6:56:40:22:82:65:ab:
e1:ac:4a:f2:f1:fd:01:e5:c8:63:bd:0d:bd:48:42:b5:ae:0e:
6f:e2:08:0a:5d:ea:1c:df:3f:e5:2e:2c:6a:a6:3a:cf:46:b3:
59:f3:c8:f8:7e:7d:b5:27:b7:40:ae:49:92:af:88:7e:fb:2f:
60:91:c5:49:09:78:f3:50:f6:10:9c:c1:9a:49:bd:5e:50:48:
5e:b2:fb:85:e0:db:4b:e3:3d:a4:06:b8:52:a6:39:ee:b4:3a:
39:5f:e3:61:e4:cc:dd:75:b3:8b:2f:bd:fb:d1:84:24:35:f9:
bb:02:a3:31:8e:ec:ee:6f:6b:74:06:31:ad:c1:d2:bd:bd:ac:
d4:20:d6:11:3f:f3:ef:42:42:d3:7d:29:20:32:7f:26:6f:ff:
2a:bd:16:4f:de:0a:3d:d4:c0:63:0e:4b:47:f4:5b:64:1b:e4:
b5:4e:c4:51:df:9b:fb:3b:e1:71:02:86:9f:1a:f8:58:1f:4b:
81:22:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net