Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa
File: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (raw, json)
Hash identifier: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=
Subject key identifier: D8:F6:FF:D4:23:34:32:43:EE:74:15:18:DD:0D:3F:A5:89:28:3D:CD
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019424B3E0D16149D86B39B93D29CF346804
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28997
IP address blocks: 83.136.16.0/21 maxlen: 24
193.29.248.0/23 maxlen: 24
193.30.6.0/23 maxlen: 24
2a03:7000::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e0:d1:61:49:d8:6b:39:b9:3d:29:cf:34:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f6ffd423343243ee741518dd0d3fa589283dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:ff:be:6e:ce:0a:3c:88:86:9b:7d:76:50:
cf:56:40:34:90:29:83:a1:54:20:cb:1b:08:ce:8b:
4e:cc:52:b2:06:a5:a6:92:37:f7:d2:bb:c2:f0:43:
8b:a6:3e:c8:da:c1:4f:0b:23:3e:3c:7f:a0:4a:61:
19:c8:79:7e:d0:32:7b:6d:50:c8:00:8c:a0:77:e5:
9e:63:20:3d:38:63:c1:c5:cc:9e:75:03:32:58:a1:
df:ae:88:54:e6:b3:f9:9c:7e:87:9c:28:a7:e8:21:
41:74:10:60:a6:46:ff:0e:88:a9:f7:cd:7d:5e:b5:
df:86:8e:18:66:eb:a7:fa:ec:ab:81:48:aa:02:32:
59:ad:29:40:80:d5:0e:d7:30:72:3c:dc:96:1a:72:
5b:6e:d8:9c:95:ae:43:cf:8a:5e:ef:e6:0a:0d:86:
d2:70:cb:2a:94:5f:22:8a:cd:4f:db:8f:b2:00:68:
c1:9a:9b:f7:15:7c:04:8b:21:fe:6e:23:5c:39:30:
5b:cd:c3:43:8c:13:36:7c:9f:5e:99:6b:0f:ba:ec:
f2:00:53:f9:e6:e4:23:c5:4e:7a:ec:9d:77:c9:9e:
87:10:1c:1d:1a:88:f1:46:1a:0a:3d:35:92:bc:1a:
f4:5c:6d:d7:0f:f0:81:f4:00:c3:63:08:cd:b3:c2:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:FF:D4:23:34:32:43:EE:74:15:18:DD:0D:3F:A5:89:28:3D:CD
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.16.0/21
193.29.248.0/23
193.30.6.0/23
IPv6:
2a03:7000::/32
Signature Algorithm: sha256WithRSAEncryption
57:e7:5a:67:10:e1:1d:4e:6d:40:09:b4:0f:c1:4e:4d:01:9e:
b4:c7:25:4a:78:07:9b:d5:5e:6f:e7:36:f7:15:91:e8:d0:5b:
c5:bf:e7:47:69:3c:e4:d9:39:cb:c6:a7:80:6f:83:73:52:7f:
0e:cd:6d:50:54:dd:26:f0:c7:ae:b7:be:f7:a2:a1:8e:2e:4d:
ff:87:4f:27:bf:1d:5c:ba:c8:74:8a:5a:6f:57:15:82:41:08:
16:11:cc:19:ef:db:59:fd:6a:a0:a0:03:31:ba:c7:29:52:1c:
13:e3:44:18:10:21:7d:0c:0b:8e:40:ad:7d:f9:2d:d1:55:de:
16:61:19:5d:84:3f:5d:0a:be:ca:ed:5c:65:f2:89:c6:8b:19:
54:d8:af:86:48:81:9f:9d:06:90:ee:d5:e4:7b:bf:94:90:dd:
75:99:da:8b:2e:21:21:b5:f6:65:34:12:37:5d:5d:af:04:e6:
35:25:ba:91:c6:90:a7:6c:4e:a5:39:87:73:57:71:c1:0b:9a:
2e:9b:f1:76:13:10:cc:15:d7:44:29:e0:0d:29:4d:38:4d:14:
db:de:0d:0b:43:99:a6:89:d4:a1:9a:0f:68:b1:4c:45:d9:e9:
50:78:fd:8a:fb:c6:69:30:3f:55:65:c2:c9:32:06:6a:90:f7:
c7:02:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net