Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/eUpqiXGXLspopV2JOefdNZxivoo.roa
File: eUpqiXGXLspopV2JOefdNZxivoo.roa (raw, json)
Hash identifier: NmTA5ikQb8YHI1Ls+UlB/LFj90mCzv7v9aa/fWXYCBc=
Subject key identifier: 79:4A:6A:89:71:97:2E:CA:68:A5:5D:89:39:E7:DD:35:9C:62:BE:8A
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B2248996F968634B6B5D5F600F6D10
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/eUpqiXGXLspopV2JOefdNZxivoo.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8611
IP address blocks: 83.212.204.0/22 maxlen: 22
195.251.232.0/22 maxlen: 22
195.251.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:24:89:96:f9:68:63:4b:6b:5d:5f:60:0f:6d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794a6a8971972eca68a55d8939e7dd359c62be8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:1e:5f:be:8d:5d:70:d3:a4:b5:74:2b:14:
74:e0:98:7f:c4:4e:39:5f:3e:2f:48:4b:54:fa:52:
f2:65:a0:1d:76:6e:40:b8:87:26:ab:34:54:fd:d6:
b6:75:cd:b2:40:d5:1d:b2:8e:7f:b4:ba:59:f7:ff:
a7:53:e6:14:b7:44:51:04:6e:69:c2:27:05:d1:d6:
32:00:87:80:d0:fb:99:68:4e:d4:8d:54:ab:44:e7:
29:62:e3:cf:b8:e2:e3:24:86:da:6a:d2:9c:65:d4:
2c:73:e2:b8:e2:9f:51:01:33:b9:32:46:f1:12:70:
ab:e9:3c:44:92:08:b8:16:4a:65:4f:42:5c:ae:45:
95:af:1e:77:74:4d:ce:88:c2:65:a2:32:f9:ab:78:
f5:82:83:2a:3a:6a:c3:c6:81:d1:c4:db:8d:f7:8c:
4d:90:1e:de:10:74:b8:5d:0f:d1:6d:d3:92:cb:ab:
f9:5e:fc:bb:e0:6b:e6:11:56:53:0e:88:00:8b:b5:
ca:6e:8d:f3:a7:9f:1e:af:09:0b:68:09:ba:e9:f5:
02:bf:0f:81:7a:de:ab:fc:a8:b6:8e:11:61:63:00:
e9:86:21:08:bb:bf:bc:63:43:8e:f3:ec:50:01:12:
00:89:f2:00:4c:ed:c5:16:d8:2a:11:6d:92:b2:9a:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:6A:89:71:97:2E:CA:68:A5:5D:89:39:E7:DD:35:9C:62:BE:8A
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/eUpqiXGXLspopV2JOefdNZxivoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.204.0/22
195.251.232.0/22
195.251.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:e3:6d:33:e9:d7:78:61:86:a9:80:c4:4d:b9:50:27:7e:dc:
33:da:c6:1b:59:3d:f6:fc:5e:73:6c:ff:8d:f3:7a:4d:24:9a:
16:25:4d:c3:f8:dd:0b:e4:5e:e3:fe:d5:e4:ea:a9:a8:1e:f7:
ed:ce:ab:4c:6e:75:b5:2d:ea:b2:9d:01:5b:ad:ff:5e:09:92:
32:41:b6:f5:b7:55:46:19:e2:7a:62:14:08:2a:96:fb:37:eb:
4a:6b:62:25:03:b6:ea:46:e2:ad:1d:f7:69:3e:a1:8d:9f:5f:
48:b6:98:b6:0d:aa:ba:a4:66:ab:3e:ae:6a:47:e0:3c:25:c9:
a5:31:b8:de:32:94:fb:b7:c6:75:bc:38:a8:e3:11:41:f8:94:
2e:d3:4f:10:28:9e:bf:b2:e9:73:64:7a:17:98:30:f3:1f:56:
be:bc:1a:df:8b:93:ff:de:94:70:9f:f2:e2:ad:9c:2e:3e:49:
8c:41:81:e5:c7:4a:92:f9:d0:e2:0a:0f:f4:d6:66:85:63:95:
cb:53:85:bd:86:e2:ec:a9:77:27:e5:f2:c5:57:54:97:4a:8e:
64:65:69:6e:72:0f:1a:b2:4b:17:56:7e:36:42:08:42:87:c8:
ed:cd:9e:d0:af:bb:b8:3f:97:4e:50:e3:9e:e7:62:db:2a:02:
b3:43:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net