Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Uq0M2wdiw7E6LeWZ9CTAIgyuHPM.roa
File: Uq0M2wdiw7E6LeWZ9CTAIgyuHPM.roa (raw, json)
Hash identifier: d7rUa+c7uWWSAGXrkSfGz2KV6fHZ8wN8HsYZew17fPA=
Subject key identifier: 52:AD:0C:DB:07:62:C3:B1:3A:2D:E5:99:F4:24:C0:22:0C:AE:1C:F3
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019514D2037A3A2388A692945AAB4A059F8D
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Uq0M2wdiw7E6LeWZ9CTAIgyuHPM.roa
Signing time: Mon 17 Feb 2025 16:51:02 +0000
ROA not before: Mon 17 Feb 2025 16:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.72.0/21 maxlen: 21
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:d2:03:7a:3a:23:88:a6:92:94:5a:ab:4a:05:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 17 16:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52ad0cdb0762c3b13a2de599f424c0220cae1cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:03:86:df:ad:9c:87:51:55:c4:d8:b7:02:
08:fa:10:78:c2:7a:e8:32:ac:42:95:8d:24:3f:fc:
11:19:53:7e:17:51:3a:e0:ed:08:d3:9a:f8:0f:bc:
d9:f5:93:5f:41:08:39:cb:e3:e1:83:54:17:0f:3e:
fa:4d:36:1f:37:31:cf:8e:50:4e:8f:10:d7:f6:5b:
c8:82:a3:5a:ad:39:a4:c4:cc:60:9f:51:09:bc:08:
f2:90:67:f3:f1:31:f7:a7:04:85:15:79:52:f4:d0:
e1:e6:25:fa:81:33:d6:e2:41:5e:d1:f9:d2:c7:58:
48:61:5e:6b:a2:76:05:bb:5c:50:6a:c7:6d:ef:4a:
e1:00:b1:0f:e2:46:7e:ac:08:23:e3:d3:95:85:fa:
5d:c2:a7:23:4f:4a:03:de:cc:43:9b:fc:3e:aa:1c:
60:06:2b:7a:e8:f1:c7:f6:5a:9b:31:df:3d:1b:34:
40:0b:8f:66:20:f0:da:9e:d6:31:80:40:19:54:df:
39:25:ef:7e:44:69:22:b9:93:16:ac:eb:80:dd:94:
c9:7d:92:be:8b:43:1e:44:5f:67:48:4a:d3:d9:40:
7d:ef:12:3b:6d:d8:b0:e0:06:05:01:40:42:06:f2:
71:ee:a7:38:ab:e1:43:37:36:64:23:26:78:4f:b2:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:0C:DB:07:62:C3:B1:3A:2D:E5:99:F4:24:C0:22:0C:AE:1C:F3
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Uq0M2wdiw7E6LeWZ9CTAIgyuHPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.7.255
82.206.16.0/22
82.206.72.0-82.206.95.255
Signature Algorithm: sha256WithRSAEncryption
32:ae:de:bd:b5:57:3e:0e:b2:34:8f:6d:ee:42:b0:ab:5e:5b:
96:0f:4f:d1:44:bb:e1:ab:14:34:e3:09:90:c6:a3:21:7e:ab:
7e:44:98:90:51:b3:f9:30:dc:2b:2b:f6:e8:69:08:a9:5c:44:
c5:81:d7:aa:d7:60:b8:aa:95:88:ce:53:89:dd:b6:97:da:25:
a5:6a:64:21:dd:cc:2e:7c:3e:f5:84:88:6a:1e:12:7c:ab:9b:
38:6e:57:2c:e7:e3:08:74:44:51:50:b8:e7:e4:ad:65:20:b2:
b5:5e:2d:b6:54:ef:fa:8b:47:91:5a:22:bc:b0:f5:49:4d:95:
19:ae:35:4b:5b:53:ff:40:09:97:25:a3:8a:d8:ca:25:7f:6c:
0f:e1:5c:03:00:e0:bf:84:ea:f0:74:6b:a1:36:95:90:96:3c:
ad:ff:ef:4b:29:6d:67:1a:3e:fe:39:84:b0:ad:85:b6:97:1f:
67:d0:bd:d3:cc:04:7e:64:c0:5a:00:21:a8:1e:e0:c5:c4:59:
3d:11:86:15:73:9d:8f:05:35:fe:0b:ad:3b:95:fd:0b:ba:2d:
76:3a:11:8a:dd:5f:61:79:dc:1d:52:82:83:51:68:62:9f:c8:
74:e6:f3:05:55:b9:69:8f:b3:77:db:4e:ba:97:10:34:96:33:
77:8b:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:14 2025 by rpki-client on console.sobornost.net