Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/E2H2EgczXO4vEC46FZxvsHwh6_8.roa
File: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (raw, json)
Hash identifier: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=
Subject key identifier: 13:61:F6:12:07:33:5C:EE:2F:10:2E:3A:15:9C:6F:B0:7C:21:EB:FF
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0194236A53B0975E6A35489CF8F37B4AC709
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/E2H2EgczXO4vEC46FZxvsHwh6_8.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16117
IP address blocks: 62.116.224.0/19 maxlen: 19
79.142.208.0/20 maxlen: 20
84.23.128.0/19 maxlen: 19
185.98.244.0/22 maxlen: 22
213.141.64.0/19 maxlen: 19
2001:b48::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:53:b0:97:5e:6a:35:48:9c:f8:f3:7b:4a:c7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1361f61207335cee2f102e3a159c6fb07c21ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:2c:03:87:f1:f3:19:c7:01:85:24:7d:df:
c0:9b:5e:61:50:f4:aa:42:11:b8:7c:5c:8c:fb:0f:
e9:a0:e0:ad:06:80:a7:da:71:76:79:21:2e:db:f0:
96:92:67:41:91:48:3b:c0:5f:3b:33:25:a6:ab:88:
d4:dc:1f:a9:72:6c:fa:dd:8b:fa:c2:e4:61:ab:05:
ee:ca:6b:2e:22:7b:a0:43:c7:d5:97:f1:09:e8:e9:
87:90:f4:a7:03:1e:65:b3:90:95:ac:df:43:56:a3:
dc:a3:16:56:17:c4:2d:22:04:c0:0d:80:f3:19:10:
97:95:a0:36:5b:7c:a4:0f:a5:8e:86:db:b5:ca:4f:
6a:90:de:58:e5:75:3d:6d:0b:96:8b:aa:12:43:db:
06:43:8a:1b:3a:17:4b:58:7e:8e:1e:d5:e3:72:80:
ca:87:2f:5d:e1:b2:4f:be:c7:fe:6d:8f:d5:80:d2:
40:10:c2:db:6b:79:13:59:3a:d7:44:a1:27:23:98:
0b:84:e6:e2:22:a7:9f:fc:e2:78:dc:fd:44:ea:f4:
27:11:99:88:f6:f0:2e:1d:be:18:54:02:ca:cd:cf:
63:97:aa:40:86:22:e1:8d:e1:42:e9:d6:f3:4e:bd:
61:d2:94:e7:66:27:b2:88:c1:da:1b:5f:e5:38:1d:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:F6:12:07:33:5C:EE:2F:10:2E:3A:15:9C:6F:B0:7C:21:EB:FF
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/E2H2EgczXO4vEC46FZxvsHwh6_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.224.0/19
79.142.208.0/20
84.23.128.0/19
185.98.244.0/22
213.141.64.0/19
IPv6:
2001:b48::/29
Signature Algorithm: sha256WithRSAEncryption
9d:5a:af:4c:c6:dd:6e:c6:0c:ad:c0:17:66:df:fa:5e:0d:9f:
e1:d5:e6:be:79:bc:4d:bd:d8:dc:54:a6:44:b0:e2:de:f6:4e:
28:10:6d:ee:64:15:fa:63:d3:44:fb:62:ec:e4:44:91:54:e1:
e8:c6:a0:5e:4e:39:ad:c3:33:1b:31:92:2b:0c:48:32:e3:8e:
51:1a:ce:1e:24:0a:cb:ac:64:ce:36:75:c7:ba:20:59:e5:b6:
64:fe:e3:15:55:69:8d:9e:cf:f6:68:02:7f:75:5e:84:d2:46:
1d:2e:6b:cb:5b:d0:da:5a:41:ce:0d:7d:3a:cb:8e:06:3a:a4:
00:a6:9a:c3:30:5b:9b:c5:4c:a0:93:89:a1:4b:d4:03:00:46:
d7:f5:b3:4e:73:c9:9d:e3:8e:85:af:3a:4b:f9:e4:57:3d:d9:
45:fc:14:35:70:a5:de:1e:25:c6:cc:5d:16:d3:e2:8d:6d:1f:
4b:79:95:2f:2b:6e:c5:19:1a:7a:2b:ea:b5:08:ca:bf:45:2e:
5e:0a:90:40:f0:24:a8:e6:2e:88:f4:7f:fe:02:5d:fe:29:0a:
b1:ea:9a:e5:96:38:d3:92:05:48:2b:2b:af:8d:a1:89:44:b0:
69:45:18:13:41:f7:7c:8d:a2:5c:36:0b:df:28:76:70:f7:da:
1d:1a:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net