Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa
File: SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa (raw, json)
Hash identifier: 0MJ7luF7f9Ym0N4wsCYetV/WSW9M7iM6g72fAyA37+I=
Subject key identifier: 4A:59:8F:82:9A:AB:34:E2:E3:64:EF:41:B4:33:2A:5A:95:4C:5A:BB
Certificate issuer: /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial: 019427B5A433D45B44C268684A4689EB6080
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59766
IP address blocks: 62.69.128.0/21 maxlen: 21
89.148.128.0/18 maxlen: 18
185.51.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:33:d4:5b:44:c2:68:68:4a:46:89:eb:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a598f829aab34e2e364ef41b4332a5a954c5abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:32:10:0f:c4:2f:9c:29:08:b2:72:8c:fc:
b3:ff:cd:6b:dc:66:1d:c9:22:0a:49:b4:45:5f:89:
c0:a4:80:24:c2:6e:d6:89:3c:d4:c3:e0:24:1c:dc:
e7:f2:cf:4e:a1:d8:55:e9:18:c1:ed:bf:a6:70:73:
50:cc:e6:a9:0f:73:14:99:3b:4e:fe:07:02:23:1f:
57:b8:86:7f:65:fb:f8:00:bc:24:f0:9b:a6:22:91:
5e:16:8f:74:cf:dd:50:87:28:d3:8d:3a:1c:9c:a8:
91:d4:d0:f2:65:fd:a2:6b:db:e1:01:c8:c7:77:0c:
63:54:13:55:c0:e4:6e:da:a2:97:b0:ef:4b:ee:9d:
ff:94:fb:5d:d5:e6:61:c4:05:a2:29:4b:88:2c:73:
4c:59:25:37:ed:be:d9:43:aa:a5:d4:58:40:7a:b0:
77:35:c2:1e:5e:68:3d:7b:c2:20:b4:07:f2:dd:99:
b1:b5:58:fd:34:22:ca:1d:6c:8c:39:5a:16:bb:2a:
ce:6a:66:5e:86:6b:fe:6e:db:b8:25:1b:7e:6e:3f:
a4:d2:e8:f1:b5:c8:95:8d:1f:c6:d0:e1:3f:b7:37:
63:84:12:2b:f4:b5:7c:34:99:25:c3:35:f9:75:06:
a1:1a:17:ef:70:a4:ad:d7:e6:52:7e:2f:6e:09:08:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:8F:82:9A:AB:34:E2:E3:64:EF:41:B4:33:2A:5A:95:4C:5A:BB
X509v3 Authority Key Identifier:
keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.128.0/21
89.148.128.0/18
185.51.168.0/22
Signature Algorithm: sha256WithRSAEncryption
21:58:d9:56:07:8a:85:0b:ce:0e:ec:32:22:df:84:0b:72:2b:
72:52:14:a3:59:0c:f9:0f:d8:8a:d2:f6:9a:3b:8c:97:94:8b:
93:7a:13:04:76:27:0f:37:ce:f2:45:72:c6:7b:1b:d3:c5:da:
d2:69:d8:00:99:c4:ca:8c:d8:e5:51:c9:15:ac:2b:0b:e6:67:
0b:12:4a:b5:b6:1b:28:8f:ec:ea:56:76:6f:0e:e2:b3:50:23:
16:88:1b:04:3a:9d:b8:85:37:9f:80:4f:1b:16:fc:0d:a9:ea:
d1:f0:09:6f:f2:2c:27:70:20:e1:a9:8b:62:aa:70:6b:00:45:
b8:e0:c7:1c:9b:08:3a:52:5d:01:4d:58:81:54:98:48:5f:4b:
77:86:71:83:82:f0:38:dd:b4:39:90:a7:09:67:31:31:c1:d2:
ed:13:07:2a:8b:95:d4:a2:93:99:d7:a6:af:f1:f1:58:5c:45:
a1:6e:1b:76:3b:53:36:6b:55:41:59:7c:9f:a1:b4:98:8a:f3:
5c:f1:45:e7:8e:f4:c7:de:df:9a:e3:58:62:3f:bc:66:0e:6a:
f6:7f:c5:37:d8:c2:36:f2:98:c1:f6:34:55:59:c3:f7:98:e5:
d8:5a:0f:3b:30:ee:6b:0a:8b:c4:c3:4f:f4:f9:39:d9:45:56:
91:63:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net