Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa
File: z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa (raw, json)
Hash identifier: /g2w6QUo80ITgWZBBKLdiFMSGoLIreelX1kumLV5XQY=
Subject key identifier: CF:8B:09:AF:7A:F6:8F:AC:A6:5E:10:4A:C7:C0:9E:5B:A0:DD:C4:F2
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B228250EB431605F4B978D2B02F431
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8991
IP address blocks: 83.212.249.0/24 maxlen: 24
83.212.250.0/24 maxlen: 24
195.251.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:28:25:0e:b4:31:60:5f:4b:97:8d:2b:02:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8b09af7af68faca65e104ac7c09e5ba0ddc4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:d7:9e:38:06:77:6b:6b:bc:d8:06:e2:a3:
e1:72:62:8d:ac:4b:81:96:e9:ce:8b:35:5a:94:0f:
9c:14:b9:53:4b:6c:84:15:b3:51:8f:7f:d6:f6:bd:
89:39:f2:b4:4b:c1:38:d8:9a:0f:f2:7a:05:57:96:
d9:32:a0:d2:6a:80:6d:7b:b2:fa:62:74:a1:6e:dd:
e9:e9:3e:7a:9c:f3:eb:c8:0b:be:46:b6:20:f3:e1:
6a:dd:e5:57:9f:02:b2:e2:7f:56:6a:6f:ee:81:10:
92:a2:f6:e4:c4:58:28:c5:a5:a3:9d:95:98:ae:be:
b9:7f:26:1f:8d:29:34:3d:46:bf:53:ff:cf:28:6a:
92:2c:cc:02:a2:e1:67:88:ab:72:d9:a4:c3:51:e3:
01:63:90:e0:42:ce:3b:77:c3:a8:fa:9f:00:39:31:
36:86:8d:64:59:3d:6b:57:0e:c5:a8:5a:77:62:1e:
69:dc:79:53:06:01:b8:8b:29:b2:e9:95:3d:65:8d:
fe:7d:62:de:4b:b1:e4:cf:a4:c2:fe:c8:8d:ac:b2:
c1:5f:ec:4c:97:35:7b:b3:6c:98:ab:3a:90:59:58:
77:89:d2:f0:b8:80:43:d4:17:1d:bb:9b:c2:4e:37:
93:49:81:e6:a3:fd:0a:a4:b2:bf:93:df:21:bb:95:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:09:AF:7A:F6:8F:AC:A6:5E:10:4A:C7:C0:9E:5B:A0:DD:C4:F2
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.249.0-83.212.250.255
195.251.36.0/23
Signature Algorithm: sha256WithRSAEncryption
64:1f:2e:98:05:7f:fa:e7:e8:cb:cd:2e:b5:40:a8:fc:52:fb:
ef:69:fa:0c:fe:c6:01:e1:6d:9b:41:ce:48:9d:d2:9e:37:15:
47:aa:dd:e4:03:76:47:33:94:4e:db:f8:8c:2a:ea:14:20:9a:
24:e9:41:de:45:e1:69:01:4a:aa:e1:01:26:bd:f8:ea:15:16:
22:fa:41:57:ab:f6:81:b7:61:11:41:c3:64:c0:f1:65:1e:a3:
32:07:26:1f:64:c8:63:99:05:49:ba:8e:cf:2b:9e:0b:12:a6:
87:8a:60:e0:2c:b8:11:fb:a6:06:6b:ab:52:61:eb:b3:7c:55:
69:fb:a7:0b:dd:d0:38:34:43:74:60:4d:ea:af:24:c8:1b:ee:
c9:1e:93:cf:d5:21:6b:d1:0f:3f:15:60:28:bf:37:8f:91:a9:
48:1f:93:72:84:55:3e:3e:d2:86:a3:b3:98:40:93:af:78:56:
da:d1:71:ba:8f:6d:93:78:3d:a7:c2:17:dc:20:9d:1e:3b:7b:
38:55:b1:0f:f0:9f:57:37:b4:ba:49:e5:9f:a3:d6:da:75:5e:
4a:4c:a3:2c:6b:e8:29:13:f2:c1:4e:d3:e6:41:dc:51:41:e2:
5b:e6:e9:07:33:c3:c5:fa:78:4e:bc:a8:d6:94:c6:d4:e4:96:
83:4f:4a:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net