Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa
File: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (raw, json)
Hash identifier: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=
Subject key identifier: FA:53:99:F4:2A:23:90:53:CC:6A:B0:DD:24:8E:69:F2:4B:81:E3:16
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01941FFA9ABBF76215A2B9E255F7E6C1108A
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8879
IP address blocks: 81.89.224.0/19 maxlen: 24
84.201.64.0/18 maxlen: 24
212.62.64.0/19 maxlen: 24
2a00:1348::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:bb:f7:62:15:a2:b9:e2:55:f7:e6:c1:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa5399f42a239053cc6ab0dd248e69f24b81e316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:08:5d:76:1c:eb:8c:ab:51:0c:4f:1a:d8:
dd:c2:40:00:c2:27:27:46:ee:f5:a4:a7:c6:68:fd:
32:ae:6f:2c:50:1c:9c:e7:43:11:e3:ce:ae:56:a8:
66:6c:0d:39:d6:77:01:30:de:1a:10:f6:80:08:f1:
90:99:6a:5f:27:f7:9e:f1:1b:b3:9e:4c:60:b2:2b:
dd:db:97:76:5a:75:6f:1f:16:4e:ee:a1:16:ab:1c:
36:81:c0:b8:4a:63:8b:27:6c:3c:12:30:7e:0c:0a:
f2:5a:8a:09:7d:70:ed:82:dc:4f:e9:f6:d9:5d:49:
af:31:5b:a3:b2:bd:34:a8:d9:fa:f0:eb:e1:44:4d:
40:20:ad:bd:4e:58:13:b6:e2:c7:11:5b:04:1d:08:
f3:b6:43:f5:81:2d:91:c2:13:4d:43:27:80:f4:6f:
e7:b0:e4:7a:d9:e9:4f:93:64:62:d5:1b:00:c4:ee:
59:8e:34:7c:ae:e2:be:7f:40:9a:f5:92:a5:38:d0:
b5:e2:20:47:1f:e2:9b:1b:0e:9a:6a:50:23:db:4c:
89:10:11:5b:8f:e2:a7:ec:7c:4d:3e:ea:b5:bd:bd:
af:5b:be:44:4a:76:c5:db:72:3d:ac:d5:63:5b:f9:
4a:e4:a2:6b:f1:e9:86:fd:aa:58:14:f0:e1:a3:98:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:99:F4:2A:23:90:53:CC:6A:B0:DD:24:8E:69:F2:4B:81:E3:16
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/19
84.201.64.0/18
212.62.64.0/19
IPv6:
2a00:1348::/32
Signature Algorithm: sha256WithRSAEncryption
20:68:f2:5b:9a:76:a2:97:88:b8:fa:29:97:4b:1a:89:9f:68:
83:18:f0:84:92:ce:0c:40:1c:46:4e:24:ce:67:90:db:69:9f:
fe:5f:8b:b4:f3:de:ae:d3:b4:30:94:72:6f:e6:20:8a:e2:cc:
83:71:73:f3:87:55:2b:3b:60:8b:da:ea:79:29:8b:02:ba:9f:
a3:5e:d2:10:be:c3:03:c9:1d:8f:db:fa:4f:61:f7:39:32:91:
8f:54:89:73:23:45:c7:f8:8e:27:49:22:90:32:1c:2f:e8:36:
91:9e:e5:55:b8:68:10:27:3e:ce:47:a9:fc:1d:11:82:2e:77:
66:d9:51:0e:40:9c:af:b5:7f:c0:61:bc:d3:75:f4:53:3f:fa:
57:44:17:8a:9a:8f:de:f2:de:04:67:ce:d6:c4:ed:02:05:59:
a6:0f:20:51:08:34:5d:2c:46:1f:82:84:6a:bf:2e:aa:56:8a:
c5:25:b5:70:13:9a:54:4a:9c:3a:e1:61:ea:25:bb:7d:5f:3a:
df:9f:d9:60:48:69:79:eb:34:53:56:79:cd:d1:58:e4:8b:66:
43:3e:b0:a8:f8:58:38:9d:1e:84:6a:c5:3b:ab:e5:c9:e6:06:
6b:d9:6b:d9:ba:78:f2:8c:bd:e5:ae:b9:58:b4:fa:23:88:55:
17:ea:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net