Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/GfXo99hoJiHFgjjaqu9Tw0r0Rng.roa
File: GfXo99hoJiHFgjjaqu9Tw0r0Rng.roa (raw, json)
Hash identifier: QjTPdfvgZy3hi6p3/RNzYG6389kP11Wk/w4ZvD1hKU0=
Subject key identifier: 19:F5:E8:F7:D8:68:26:21:C5:82:38:DA:AA:EF:53:C3:4A:F4:46:78
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 0194206857C6C8538094E6687C710F6EBC04
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/GfXo99hoJiHFgjjaqu9Tw0r0Rng.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28876
IP address blocks: 81.89.160.0/20 maxlen: 20
217.24.48.0/20 maxlen: 20
217.24.48.0/21 maxlen: 21
217.24.56.0/21 maxlen: 21
2a00:9d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:57:c6:c8:53:80:94:e6:68:7c:71:0f:6e:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19f5e8f7d8682621c58238daaaef53c34af44678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:52:87:c3:c5:8f:75:34:83:e5:9f:3b:46:
e8:41:86:2e:d0:8b:5b:a1:fb:59:77:7b:85:fe:eb:
a0:43:b2:de:65:04:fe:98:fe:12:cd:75:5c:d1:5d:
10:be:fe:a1:ea:7b:20:c1:03:1c:66:77:0e:3e:7f:
5d:99:79:66:d8:f7:7b:42:91:cb:91:e3:0e:c5:6e:
67:05:77:77:2b:87:58:bc:3f:7d:dc:6e:e3:3c:9d:
2f:86:d4:66:e9:d4:15:fa:3f:08:e8:5d:e3:59:d4:
a4:b7:16:04:11:6d:36:4b:09:9c:5d:21:b0:a8:ae:
ad:6a:54:6b:26:93:e2:d9:3c:3b:32:8e:b2:bb:72:
ec:96:aa:6f:59:f2:94:de:70:5d:2a:1a:91:30:75:
73:6a:cb:70:62:47:e8:b9:45:ba:6a:01:16:03:cd:
68:32:6a:6c:0b:9c:d0:46:01:65:64:ac:41:80:b3:
31:7d:71:d1:a0:21:db:57:97:44:e9:ef:05:03:67:
29:76:1c:61:c2:51:13:65:8c:5d:24:ef:17:05:c9:
a2:ff:1d:7d:67:92:3e:28:55:4e:a8:97:0e:c8:95:
ae:f2:8a:17:ac:4d:3f:b2:76:1d:81:fb:11:bf:1e:
e4:cd:c8:73:45:69:37:10:cf:d6:10:0b:55:ff:1d:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:E8:F7:D8:68:26:21:C5:82:38:DA:AA:EF:53:C3:4A:F4:46:78
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/GfXo99hoJiHFgjjaqu9Tw0r0Rng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.160.0/20
217.24.48.0/20
IPv6:
2a00:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
7e:aa:82:3e:c0:4a:0f:4e:24:3f:15:43:82:fd:c5:25:1d:dd:
78:a7:77:4d:2f:27:d7:d6:d3:85:40:17:e8:d1:4e:72:6c:59:
8c:e6:ce:8c:0e:5c:5b:ca:f7:e6:c2:d7:7f:ea:35:a5:98:50:
a3:08:56:c1:36:a9:32:5c:38:85:79:b2:1a:47:e4:0c:7a:85:
7b:ca:c5:b1:81:6b:ef:61:94:2a:8d:db:29:6c:ad:6b:7b:9c:
df:54:49:34:ae:f1:57:5c:f1:1d:e9:6c:f0:96:ce:74:49:6e:
c6:b9:f3:c4:86:0c:fa:5d:fc:87:d9:06:3e:d4:8b:38:87:28:
95:88:8a:94:e1:a4:ee:3b:f2:dd:2f:88:e6:1e:f9:4d:41:2b:
af:f7:0b:5f:49:95:d8:f9:6b:2c:94:d6:f6:ec:cb:5e:0e:89:
03:7e:17:c2:86:53:2f:0f:3b:50:c2:f2:bc:cb:95:81:02:78:
58:a4:90:13:3e:33:24:ff:63:dc:33:b7:72:54:ed:ea:78:ae:
d4:c4:48:ef:e2:4a:3a:ed:ef:79:cf:45:b4:ff:d0:a3:83:79:
ce:13:03:49:98:5a:9e:83:3a:a4:ad:02:50:c3:76:c1:8c:ed:
81:13:59:12:95:8c:ef:8f:d1:fc:ca:77:1c:90:69:01:02:fb:
11:23:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:45:06 2025 by rpki-client on console.sobornost.net