Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa
File: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (raw, json)
Hash identifier: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=
Subject key identifier: 89:EE:51:C6:5F:FC:94:60:98:87:F2:A0:3C:49:02:9D:BB:90:B1:19
Certificate issuer: /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial: 019428244A723C6BDA6651600EC1DAE4B43B
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa
Signing time: Thu 02 Jan 2025 17:50:54 +0000
ROA not before: Thu 02 Jan 2025 17:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47242
IP address blocks: 83.220.28.0/24 maxlen: 24
83.220.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:4a:72:3c:6b:da:66:51:60:0e:c1:da:e4:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Validity
Not Before: Jan 2 17:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89ee51c65ffc94609887f2a03c49029dbb90b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:1b:66:8f:4f:8c:65:e0:d7:b2:25:8b:33:
99:8e:46:46:d3:4c:4f:7b:cb:7d:42:15:33:f5:a1:
f8:5e:cb:f8:f0:20:69:13:38:20:e1:f3:d7:c6:b3:
21:cd:53:aa:86:65:80:9b:1d:fe:f6:cd:d9:9a:f3:
26:ff:00:48:76:47:c3:d3:a0:89:54:9d:05:34:5d:
d6:05:29:34:37:c3:ac:94:bf:34:6b:0c:03:5d:c9:
e0:a8:71:32:12:d4:f4:ec:71:57:30:24:c6:53:3d:
00:5e:d9:ff:3e:85:49:93:f2:b3:17:10:5d:9e:ce:
57:74:2a:45:0a:7a:0d:28:a5:7d:8b:b8:7a:da:b2:
a6:2c:bf:d8:63:da:0b:7d:c9:05:ad:d7:72:5b:83:
ca:c8:8b:22:5d:bb:3c:39:c6:73:e4:43:d6:a6:c2:
a0:73:8e:b2:d3:b3:8f:5b:f1:9c:cc:ef:51:58:93:
51:11:20:bb:3a:92:2e:20:0d:77:5d:08:c2:b2:77:
0e:b2:16:31:89:6a:40:88:41:e1:3f:f7:38:60:34:
eb:46:e9:00:da:73:e6:aa:a2:9f:3c:f5:4f:ed:46:
5e:11:35:64:55:6b:19:01:db:00:af:cc:7f:1b:e5:
53:10:47:3b:c7:4d:c2:b1:ce:8c:d8:3a:3d:ba:de:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:51:C6:5F:FC:94:60:98:87:F2:A0:3C:49:02:9D:BB:90:B1:19
X509v3 Authority Key Identifier:
keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.28.0/23
Signature Algorithm: sha256WithRSAEncryption
18:fe:f4:73:8e:7c:ef:e3:c3:53:ef:7c:22:02:7b:2c:1b:99:
f8:13:e7:b7:8a:33:c2:16:a7:c9:1c:b0:7b:56:38:7f:2f:2f:
d0:9f:fd:b4:ee:bc:d4:8c:a9:6e:81:58:40:61:47:c9:54:9d:
ba:09:08:cb:78:ba:b3:34:3c:61:5a:a6:e3:3d:78:8d:f2:52:
84:40:ee:30:3c:c0:01:4f:5b:23:c2:a8:37:68:90:8d:95:39:
bc:b4:fe:fc:b3:e1:10:5e:21:be:7b:29:b0:4d:f9:e0:fd:5e:
10:b2:34:72:f5:96:cb:00:9e:9b:97:31:94:5f:0e:97:aa:69:
b6:6d:dd:c2:0e:4c:f0:42:c4:c5:17:11:35:94:20:72:9d:1f:
c5:4e:1b:0d:1d:67:22:21:c6:8f:f2:4f:45:50:f4:4b:59:eb:
fa:b0:33:86:17:31:ed:85:40:c7:6c:ab:29:84:82:d7:5e:51:
2f:34:37:e8:24:82:0b:79:85:d1:7e:32:07:6b:8a:bb:4a:cb:
66:64:4a:a3:64:41:10:03:0d:25:e5:49:2b:6c:36:55:d3:4a:
98:69:12:cc:00:26:25:e6:20:85:b0:71:ce:44:b0:d4:4d:00:
50:50:bc:dd:93:ca:d0:03:9e:38:ee:ad:20:fd:07:03:66:a4:
5b:40:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net