Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa
File: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (raw, json)
Hash identifier: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=
Subject key identifier: 3A:F3:A4:59:AB:47:AC:58:26:8F:AD:0E:E8:28:E2:8F:83:A3:A3:D4
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 01942067FDF01CE2D6A9A13A49E6FA98DA4A
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51449
IP address blocks: 82.144.136.0/24 maxlen: 24
82.144.143.0/24 maxlen: 24
82.144.146.0/24 maxlen: 24
82.144.147.0/24 maxlen: 24
2a02:d07::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fd:f0:1c:e2:d6:a9:a1:3a:49:e6:fa:98:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af3a459ab47ac58268fad0ee828e28f83a3a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:e6:fa:07:eb:61:f2:8f:5a:24:71:0d:27:
78:1b:98:b6:45:ef:ec:bb:9c:3b:41:f0:2c:08:1b:
e7:3d:cd:fe:5c:bb:da:0b:a3:b2:fa:da:59:9c:b8:
16:cc:8f:0d:8a:2d:0d:1b:75:60:6c:51:14:b9:ab:
3f:2e:02:80:7b:7a:92:eb:74:40:e2:cf:ba:73:e4:
a2:26:a6:e0:47:c0:e9:ce:dc:c0:a4:02:e9:56:30:
a2:49:71:9c:08:ff:13:23:a6:12:a9:ec:2a:82:20:
1e:7b:01:a9:18:b3:fc:f5:33:85:c6:38:76:ae:6a:
38:e9:2c:a0:a3:ba:15:e5:af:9a:32:a4:25:fb:9b:
03:80:1b:82:8e:be:bb:56:b5:3d:a1:37:40:17:60:
ff:70:64:dd:29:7e:f0:a5:b7:c5:b3:0a:35:de:de:
ea:69:f2:18:ac:43:3c:94:68:e2:dc:67:7a:f6:47:
c6:36:36:71:a8:53:df:25:02:ff:a7:ef:7e:eb:29:
42:c0:e6:b6:02:52:59:2c:92:87:c1:65:d1:86:71:
0b:ea:1f:da:0c:ca:cc:8f:42:46:cf:30:ff:8c:6d:
53:35:53:88:bc:25:4c:b7:b6:5f:11:eb:e6:55:73:
9b:bd:1f:58:90:8d:fb:77:2f:71:fa:2f:5d:a4:f5:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F3:A4:59:AB:47:AC:58:26:8F:AD:0E:E8:28:E2:8F:83:A3:A3:D4
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.136.0/24
82.144.143.0/24
82.144.146.0/23
IPv6:
2a02:d07::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b5:b0:7b:82:6b:90:0d:24:5a:4c:ed:53:49:6b:91:e0:4a:
1f:7b:84:fe:cc:08:04:c6:ec:b7:94:bb:97:7a:77:fc:a0:85:
79:42:1e:84:09:20:a0:3c:e8:1b:21:51:e8:38:87:11:ac:6c:
67:bc:fd:c7:6e:4f:0e:98:4c:08:4b:54:11:10:17:55:1a:dd:
d0:8b:9f:85:3d:fb:57:46:5f:71:a8:77:4e:a1:fd:dc:ef:1f:
78:85:a6:10:6c:b8:d2:aa:a4:62:32:6a:ec:95:4f:6d:41:3a:
cd:33:a8:3a:16:4d:ef:ae:16:9e:54:dd:fd:aa:9f:b6:4a:d9:
23:ba:ed:57:33:52:96:ab:a8:63:ab:54:91:e1:34:4a:a8:d2:
9f:2c:82:d7:db:ef:ae:18:2f:71:96:0d:f8:5d:ab:1c:85:83:
12:0d:0a:fa:45:32:6f:e4:2f:a9:2c:ba:67:af:34:cb:be:b0:
a3:ed:90:04:b0:4a:74:53:d3:6e:c8:da:3b:f2:c3:a9:b3:2e:
9a:6f:88:00:5e:0f:56:d6:b1:17:42:8a:49:ab:8d:d7:17:3e:
82:b6:fc:83:7d:b0:b9:4f:9f:0c:45:78:06:f7:a5:97:5a:47:
65:74:a4:9d:c4:74:b0:39:6f:40:29:c8:b6:93:5f:38:11:3a:
98:24:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net