Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/bucOkPeZ9hgmXR-Cim7gffbbCvY.roa
File: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (raw, json)
Hash identifier: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=
Subject key identifier: 6E:E7:0E:90:F7:99:F6:18:26:5D:1F:82:8A:6E:E0:7D:F6:DB:0A:F6
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 019427480AB0833FD2ADE41F7B737BF2EBF8
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/bucOkPeZ9hgmXR-Cim7gffbbCvY.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47829
IP address blocks: 2.58.236.0/22 maxlen: 24
193.176.236.0/24 maxlen: 24
2001:67c:2c8::/48 maxlen: 48
2a09:ed40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0a:b0:83:3f:d2:ad:e4:1f:7b:73:7b:f2:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee70e90f799f618265d1f828a6ee07df6db0af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:44:3a:74:91:da:3a:94:0c:e4:88:5d:5a:
40:ad:c0:7e:db:dd:02:d6:c3:82:1e:4f:c9:2d:00:
71:f0:01:d9:ff:f3:73:5d:10:c3:76:ab:20:c3:7a:
61:75:4a:ca:cd:c7:0a:f9:25:6a:d8:01:f3:af:11:
70:2f:da:7d:10:08:1f:74:fc:5e:e3:c6:1c:05:0f:
a2:48:25:e8:65:e1:e8:50:2a:50:b0:ef:4a:57:e9:
3a:02:41:21:ed:8d:34:12:74:f6:54:98:72:cf:ab:
a4:94:72:8f:53:3a:a2:78:e8:af:d2:cd:8c:2e:17:
64:c8:26:40:b8:62:bf:cc:a6:e4:8d:92:66:76:90:
81:ad:bd:1f:4e:ab:f3:e9:68:c7:70:25:fa:bd:8d:
6c:80:77:f3:6e:d4:bc:06:07:ab:e5:dd:57:4c:71:
97:52:f6:cd:77:3c:04:b2:15:93:0c:53:ab:ad:d5:
f2:30:8f:4e:4d:79:9f:29:33:b0:ff:1d:c0:5f:cd:
9d:d1:4b:76:01:3d:b0:20:64:b6:58:eb:fc:6d:83:
29:b4:33:82:93:65:3a:3d:9d:05:9f:67:d8:2a:a4:
fb:74:05:e1:da:db:41:bd:36:ec:e1:08:5b:b2:23:
2b:a8:99:74:bf:12:44:76:d1:89:2a:fd:ca:a5:a5:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:0E:90:F7:99:F6:18:26:5D:1F:82:8A:6E:E0:7D:F6:DB:0A:F6
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/bucOkPeZ9hgmXR-Cim7gffbbCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.236.0/22
193.176.236.0/24
IPv6:
2001:67c:2c8::/48
2a09:ed40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:7e:a9:5b:0f:19:ea:6c:69:bf:e4:1c:d7:02:d7:3a:21:ed:
6a:45:87:05:bf:6b:a8:cd:c0:f6:40:84:35:85:0b:01:ca:96:
28:77:09:40:94:00:da:4b:8a:63:bb:d9:e4:d2:f4:a0:98:e4:
72:76:c9:2c:37:a8:e7:58:12:b2:b1:83:5f:fb:30:2e:21:6d:
f3:5a:35:ea:25:2e:c7:9f:3e:c1:fd:c0:dd:92:48:99:76:69:
18:ce:45:96:9f:c8:0c:8c:04:cc:a0:85:4f:19:f3:7b:43:d8:
39:a8:1d:1d:d8:e2:06:2e:1f:2c:9f:c7:cb:ad:2f:a8:0a:43:
df:e3:a4:b9:d3:9c:29:c6:63:8d:50:02:18:13:61:c8:38:34:
e8:69:00:05:e9:3a:57:e3:ab:69:24:74:0c:51:39:73:aa:53:
60:5f:17:79:0e:80:b5:d9:eb:17:e6:ff:68:b1:b9:4f:83:9f:
b6:ec:f8:a0:2b:7a:cc:bb:e1:ff:45:a5:14:64:61:73:91:c3:
fb:d8:19:46:98:0c:f9:96:56:cb:b4:83:5c:a0:95:4c:4f:0a:
eb:7e:d6:32:fe:ba:54:7f:74:cd:6c:6e:81:da:19:b1:9f:4c:
e3:55:e3:22:63:53:25:c1:40:f6:b0:c1:c0:bf:76:22:16:75:
80:2c:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net