Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa
File: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (raw, json)
Hash identifier: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=
Subject key identifier: 83:20:68:47:43:EB:D5:C1:F8:44:F7:5C:C7:38:25:46:51:51:1C:1C
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC339EA88E9B74179F39BBFC7D46F1
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51026
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:33:9e:a8:8e:9b:74:17:9f:39:bb:fc:7d:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8320684743ebd5c1f844f75cc738254651511c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:dd:07:55:b4:d3:97:c2:82:19:c4:da:45:
42:1a:43:4f:2e:85:b9:b1:ca:1c:95:4f:d9:98:69:
55:29:89:05:00:a1:f4:6f:58:c3:7a:9c:16:8a:e6:
49:75:28:e2:da:80:74:f2:0c:10:1b:c4:31:56:35:
0a:70:6c:7d:34:07:49:32:a3:4b:11:71:e7:00:f1:
22:9e:cf:51:cb:2c:11:19:99:be:12:2c:6a:8d:b3:
e6:e6:b9:cf:92:9a:dc:61:d0:b4:2a:cd:0e:51:34:
1e:08:05:63:96:41:e6:91:a4:b7:59:30:a7:8a:08:
a0:82:56:09:41:e0:74:08:5f:ce:aa:fd:2f:e0:14:
48:36:d8:e4:9d:7a:00:8d:fa:51:9f:0a:33:f5:49:
2d:53:aa:ef:6c:93:c6:2b:b8:1b:f3:46:10:fd:60:
e1:c7:5a:95:13:fc:2c:b7:07:9a:be:f7:8f:0e:08:
af:5b:47:3c:1d:6a:bd:18:dc:95:41:ec:2b:99:68:
47:b4:5f:c1:1c:90:e8:28:ce:b7:20:80:d1:8e:eb:
c2:b6:ca:d8:68:08:a8:e7:0a:cf:45:b0:86:69:82:
c8:f6:2b:42:2d:48:97:9c:94:ac:3b:f2:8b:6e:75:
a8:29:24:3f:7e:82:82:e2:e3:51:4a:8a:78:48:be:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:68:47:43:EB:D5:C1:F8:44:F7:5C:C7:38:25:46:51:51:1C:1C
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:13:80:7c:4e:4d:64:20:48:95:b0:b9:d6:42:7b:c7:ed:f7:
91:5e:b8:c1:ed:e3:42:ca:d4:f9:12:69:4f:5e:18:f1:a8:2f:
7b:dd:ab:b7:9b:b1:0d:da:27:79:41:1a:07:43:94:b6:a0:22:
11:ab:b4:36:e1:c9:f4:02:21:ce:0b:e3:55:d4:d0:2f:7f:2f:
c8:3e:62:a2:a1:37:21:b2:63:d2:a7:db:b5:d2:1c:50:d2:90:
ed:f5:4e:7a:08:52:08:85:f1:72:c8:ae:95:72:e7:e3:c4:8a:
37:e6:f5:93:7a:38:61:c6:44:c1:1b:2d:01:3c:b1:70:b3:62:
54:83:91:6a:1d:3d:3f:c7:99:11:ad:a6:01:b0:9e:e1:b7:9d:
0c:c2:8d:aa:db:4b:3c:48:4d:a7:0a:65:7b:8e:0f:2f:54:74:
89:50:ed:d3:94:31:f0:38:8f:34:b2:42:4b:d5:3c:45:cf:d5:
de:5d:71:0d:63:8e:e7:8d:e4:b2:a0:78:ff:49:6e:fd:a4:1a:
95:a9:27:0f:5e:85:0d:4f:02:4f:80:a1:4f:bf:3e:74:d8:a2:
9e:f4:46:17:14:a4:84:a0:b7:e7:15:34:b0:fe:44:9e:d0:3b:
8e:88:05:3d:56:bf:c9:07:71:3a:4b:35:5d:9b:d1:6b:e2:ce:
91:07:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net