Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/PtQIzCCwQh8NdffUWB0T0F73qGo.roa
File: PtQIzCCwQh8NdffUWB0T0F73qGo.roa (raw, json)
Hash identifier: /c4lvjj4PGcUKDTfi+D5j+QQ3yuCVLcah+bN2ew8j3U=
Subject key identifier: 3E:D4:08:CC:20:B0:42:1F:0D:75:F7:D4:58:1D:13:D0:5E:F7:A8:6A
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 01942067FB1ACD7C501B26BD8C44AD39EA6E
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/PtQIzCCwQh8NdffUWB0T0F73qGo.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.64.0/19 maxlen: 19
83.173.64.0/21 maxlen: 21
83.173.72.0/21 maxlen: 21
83.173.80.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
83.173.115.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
2a02:6100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fb:1a:cd:7c:50:1b:26:bd:8c:44:ad:39:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed408cc20b0421f0d75f7d4581d13d05ef7a86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:84:d1:3a:b0:31:a4:e0:6c:12:ce:b0:60:
e3:e7:1e:b2:3a:fb:d7:53:57:60:e5:a3:80:1d:e1:
d3:e2:1f:3f:af:4b:a0:a7:3c:b5:24:a0:45:a9:eb:
b7:55:ff:08:82:a6:cd:9f:3d:6f:5f:cd:e8:b2:88:
25:98:3a:1d:ac:02:17:7e:19:9c:c0:b1:c4:49:6e:
ff:1b:d1:f1:c1:8a:95:6a:4d:52:0b:66:f1:1f:d5:
5b:fe:eb:e6:93:d8:b2:30:dc:1c:e5:14:bd:0e:c3:
05:45:a6:f4:95:84:f6:e9:0b:39:09:de:b2:97:a2:
57:54:55:50:87:a3:e2:7a:1c:80:1c:36:c7:9b:a0:
d8:7d:56:36:a5:35:96:d7:4e:55:ad:02:d1:43:99:
54:66:2a:a8:47:0f:a2:5d:1f:47:33:98:be:0b:1e:
8a:d8:2a:b2:b3:09:05:e4:b9:b6:7a:14:16:5e:87:
c9:89:fa:d2:ca:1f:ec:01:25:6b:36:c0:74:94:c0:
44:29:19:ac:16:29:c6:98:a2:d5:22:b3:a8:d5:df:
05:b5:6e:d9:44:76:1a:e6:5e:2f:f5:d9:f3:80:ea:
5d:4b:0f:0a:b7:ef:93:51:83:ab:de:01:17:a4:a9:
b5:15:16:75:f8:8d:1e:c0:e9:9a:ae:f5:8a:3e:d3:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:08:CC:20:B0:42:1F:0D:75:F7:D4:58:1D:13:D0:5E:F7:A8:6A
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/PtQIzCCwQh8NdffUWB0T0F73qGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0/22
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
18:4b:d0:18:7f:ec:4e:7f:61:f4:ae:44:8a:3e:fb:8a:cb:fd:
01:53:08:61:fe:b7:1c:c3:16:87:4c:31:cc:82:8a:4f:d1:09:
f5:7e:e3:53:38:3e:40:b2:93:12:80:22:0c:4f:b6:b0:af:a0:
10:02:17:30:25:39:9a:0f:9c:bf:b4:50:40:d2:88:c9:21:14:
8a:86:7a:d5:38:82:4a:9c:1a:c9:90:63:56:3e:d5:70:bd:12:
f0:88:30:a8:84:ed:69:92:d8:0f:70:df:65:df:12:27:e4:7e:
67:85:f0:c6:29:63:a7:b4:d6:1c:96:f0:32:ff:4a:24:8c:cd:
cc:b2:cf:ad:84:0b:df:35:ef:31:1d:45:37:35:ee:7e:88:ca:
f4:9c:5f:36:5c:3e:b1:6b:38:c0:17:94:fe:50:1f:95:72:81:
1d:b4:4d:93:32:4c:82:fb:3e:85:73:4f:52:b7:96:72:11:10:
d6:fb:e0:bc:ef:bb:d7:79:99:82:e9:64:7e:6c:5c:8b:e8:15:
9e:6a:48:16:b5:95:b9:f4:51:41:df:a4:8c:b9:68:aa:09:62:
9d:74:42:df:72:49:a8:a8:ee:51:e7:46:74:fd:4b:38:a2:7b:
d6:61:d8:7e:a4:b3:61:92:17:f0:02:4e:27:e0:69:a2:91:24:
7c:8d:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:43 2025 by rpki-client on console.sobornost.net