Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/g8PGSyPYHcwtTKtN52pgkwL2VLw.roa
File: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (raw, json)
Hash identifier: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=
Subject key identifier: 83:C3:C6:4B:23:D8:1D:CC:2D:4C:AB:4D:E7:6A:60:93:02:F6:54:BC
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 019426D96B5361B1819A96DEDBBF31764626
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/g8PGSyPYHcwtTKtN52pgkwL2VLw.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51050
IP address blocks: 5.83.0.0/21 maxlen: 21
178.217.80.0/21 maxlen: 21
185.98.144.0/22 maxlen: 22
193.53.10.0/23 maxlen: 23
193.53.90.0/23 maxlen: 23
2a01:5cc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6b:53:61:b1:81:9a:96:de:db:bf:31:76:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c3c64b23d81dcc2d4cab4de76a609302f654bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:45:e6:31:69:54:02:ee:54:4c:50:7b:0c:
d5:9f:c8:dc:4c:0d:da:58:0d:ac:a4:21:33:c7:fb:
49:c5:dc:da:f1:5e:1e:21:6d:d3:28:38:2a:47:f6:
8f:6d:0b:b3:d8:52:85:fb:90:7c:c1:8a:19:58:4e:
63:23:e3:51:60:c7:fa:9b:b9:74:0e:36:08:bc:85:
ef:f6:19:cf:81:cf:a0:05:32:fd:a1:61:5e:7b:aa:
9e:80:8a:93:4d:8a:60:66:d2:52:22:6c:23:24:a6:
be:66:e7:49:26:cf:24:46:a2:c7:29:9e:d5:99:15:
ee:0f:32:5d:d0:42:53:40:ce:d6:cc:22:9b:03:40:
45:90:f4:a6:df:fa:e4:af:96:10:ed:8c:08:01:cc:
e0:a1:13:03:27:de:e3:c1:6a:b6:9c:0d:ad:5f:99:
2d:44:ef:2f:d0:e3:dd:e7:10:73:6e:21:b2:12:8b:
ae:e3:13:3b:ea:22:77:47:d3:3c:81:44:53:7d:e3:
a5:9b:ba:9d:a1:b4:80:bd:a3:5d:bc:dd:6e:76:8b:
c7:df:ba:dd:ba:f7:cf:1a:af:ad:6c:67:58:e2:93:
bb:86:83:fc:ae:57:08:b4:b2:f2:f6:5c:f5:62:0b:
c6:38:93:c9:f6:a4:0c:bb:34:2e:22:47:31:26:09:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:C6:4B:23:D8:1D:CC:2D:4C:AB:4D:E7:6A:60:93:02:F6:54:BC
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/g8PGSyPYHcwtTKtN52pgkwL2VLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.0.0/21
178.217.80.0/21
185.98.144.0/22
193.53.10.0/23
193.53.90.0/23
IPv6:
2a01:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:78:4b:a9:71:51:bd:c8:8c:5d:7e:5a:62:7b:14:55:b2:00:
d9:cc:aa:04:6e:24:14:d8:74:3b:fe:2d:c1:8e:0d:28:3c:21:
2b:f4:5a:b4:d5:6e:72:d4:9c:5a:62:07:62:07:e6:75:bd:c3:
a2:5b:f5:e1:6d:a4:1b:62:67:fc:5a:d0:da:f8:72:1f:af:87:
84:7e:1f:35:17:2f:00:f2:ac:c5:af:2e:23:8f:a7:b2:7d:10:
d5:ec:62:40:b2:41:6b:29:e1:5c:88:76:84:d5:58:b9:d1:41:
21:b4:ae:b8:f1:e9:b0:96:a0:8a:e4:96:44:9b:48:db:96:c9:
4d:6a:85:12:93:40:cb:5e:b1:a4:74:a4:35:51:b6:c0:03:54:
75:28:81:74:36:b0:eb:5c:49:b1:a8:66:fd:8c:60:72:e9:0e:
5c:bf:8b:20:14:3d:58:a1:cf:d9:c5:ce:df:49:97:fc:29:33:
a8:e3:99:13:a4:38:ca:c0:4c:42:ef:ff:c6:9a:12:11:d7:6a:
38:8f:e0:5e:99:e2:92:13:e3:5d:cc:ae:f3:c7:48:c1:d3:71:
ce:f9:74:80:5e:3c:89:78:8e:9c:61:87:8e:b6:b8:21:c1:fc:
d8:01:51:a7:7b:0f:5c:4a:d1:c0:0b:c2:a1:7b:34:88:cf:be:
54:5a:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net