Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EgoFkHiF1uM8FHekksZ38JPgUzM.roa
File: EgoFkHiF1uM8FHekksZ38JPgUzM.roa (raw, json)
Hash identifier: eClpM3fX9y/Gxy9fp5spftaW7hmgLXlUW5w6BevReFk=
Subject key identifier: 12:0A:05:90:78:85:D6:E3:3C:14:77:A4:92:C6:77:F0:93:E0:53:33
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019426D9EB3CA19272AFAB72F577497A747F
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EgoFkHiF1uM8FHekksZ38JPgUzM.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50265
IP address blocks: 85.198.80.0/22 maxlen: 22
89.169.0.0/22 maxlen: 22
89.169.44.0/22 maxlen: 22
91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:eb:3c:a1:92:72:af:ab:72:f5:77:49:7a:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120a05907885d6e33c1477a492c677f093e05333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:42:9b:d9:99:51:ac:f1:59:eb:00:f2:90:
7a:e1:17:34:9e:af:8f:bb:6d:54:91:36:a3:8a:fc:
8e:ee:a0:25:b0:da:8f:b2:c6:d1:01:61:8e:3c:49:
d9:b2:b5:d0:cb:17:87:99:c5:0b:ce:08:49:d0:52:
7c:ab:e1:13:50:c0:13:ba:66:76:b2:7e:97:ab:63:
02:b2:14:e3:40:aa:66:02:e1:b4:6e:d7:d1:31:5f:
e7:6d:b4:09:5d:db:17:46:07:0c:4c:52:15:76:f5:
e0:48:2a:c1:a0:0d:ad:c2:61:2d:43:3b:e9:41:25:
dd:b5:49:aa:49:20:8c:67:ef:80:55:71:f6:35:77:
7d:fe:fe:06:04:fb:55:7a:f7:ca:0b:17:75:60:ca:
98:85:5b:7f:4c:75:b2:2d:cd:d9:56:91:04:f7:0f:
6b:e4:7c:d7:37:c4:72:3f:a5:38:8e:03:be:8e:a6:
e2:dd:36:9d:10:7e:80:e6:7c:d4:27:4e:45:a0:1c:
71:ba:67:24:85:24:92:d0:1c:08:9c:c8:ea:bd:c7:
a7:19:84:d5:ea:e4:0f:dd:95:b8:fa:89:af:61:59:
50:0e:94:da:e7:ad:f5:50:24:31:33:d8:86:e1:16:
44:f8:4c:b3:f5:21:86:a8:be:29:2e:9d:47:83:08:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:05:90:78:85:D6:E3:3C:14:77:A4:92:C6:77:F0:93:E0:53:33
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EgoFkHiF1uM8FHekksZ38JPgUzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
91.233.88.0/24
193.106.68.0/22
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:7d:3c:42:9d:34:4d:4c:6e:c1:e6:bc:51:29:79:cf:de:da:
4b:1d:33:d9:a5:8c:ba:0f:89:40:dd:9b:f7:fe:88:2a:aa:34:
86:68:bb:70:f0:cb:00:e6:c3:f8:88:bb:eb:95:59:49:87:51:
e7:69:17:97:91:18:6e:31:1a:5e:7f:ac:fc:5d:83:a8:23:ed:
4b:88:9f:47:b1:e2:61:d0:62:dc:6c:91:8f:cb:2a:02:4d:de:
98:f6:45:19:37:e3:f3:7e:37:08:86:48:0c:85:0d:1a:0d:3a:
9f:96:c1:05:bd:b1:3e:f1:02:d4:29:42:e7:f7:51:5e:d9:2c:
18:fd:67:ce:2b:25:e6:2a:dd:79:b4:9d:ed:d8:ce:f2:56:a5:
a3:14:7e:41:5d:0c:a9:eb:28:4f:01:c8:4e:a0:77:0c:01:ed:
5e:dc:3e:14:30:d4:b4:52:24:f6:e2:d5:ff:de:ee:8e:c5:23:
37:58:d5:1f:a4:34:0d:3d:2f:7a:4c:1c:3e:44:40:4a:8d:f7:
68:48:f2:17:03:17:02:41:6b:6c:6e:e4:b5:8c:3c:6c:0c:9c:
43:35:d1:1f:bf:38:cc:37:aa:f3:8a:6b:99:c9:a3:31:de:c9:
7e:30:19:87:3e:be:9a:0a:54:c3:46:15:a3:27:e9:d1:58:fc:
5f:06:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:54:45 2025 by rpki-client on console.sobornost.net