Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/bLZSbio8bkJcYZljrUphK1wwfiI.roa
File: bLZSbio8bkJcYZljrUphK1wwfiI.roa (raw, json)
Hash identifier: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=
Subject key identifier: 6C:B6:52:6E:2A:3C:6E:42:5C:61:99:63:AD:4A:61:2B:5C:30:7E:22
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019427472CAAA5323DC753DFE301BA957C89
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/bLZSbio8bkJcYZljrUphK1wwfiI.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8286
IP address blocks: 31.193.96.0/21 maxlen: 21
82.145.64.0/19 maxlen: 19
212.14.0.0/19 maxlen: 19
212.14.32.0/20 maxlen: 20
2001:4c58::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2c:aa:a5:32:3d:c7:53:df:e3:01:ba:95:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cb6526e2a3c6e425c619963ad4a612b5c307e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:9f:e8:88:5b:46:d7:20:70:b3:c6:71:95:
18:7c:2c:20:e5:a9:d6:ea:d9:9e:32:de:77:96:b1:
b9:a5:7e:e9:2b:28:65:74:3d:a1:f9:58:76:71:69:
04:a1:9a:4e:78:80:7c:9e:0f:aa:f7:df:1d:81:1e:
5e:35:97:78:4a:2f:fd:c1:56:f1:02:4d:b8:1c:e2:
c7:4b:b5:44:54:39:08:a7:37:f1:46:e2:ae:c8:81:
47:93:32:58:0d:aa:16:2f:7c:3c:43:30:ae:d9:01:
cc:66:b6:40:e4:d7:87:7b:f0:8f:c0:29:e2:af:e0:
90:a6:22:3b:5a:6f:bf:70:d2:17:69:92:c6:f9:7e:
49:56:11:b9:69:d7:07:6f:b3:61:b3:80:dd:ef:2f:
fb:9a:28:52:77:2d:7c:46:3c:7f:59:33:2a:6d:a3:
4c:2c:53:ba:84:28:c4:71:50:58:eb:ed:fb:7e:74:
e5:0b:00:f9:68:91:d2:11:9a:ee:c0:35:a3:8c:af:
00:9d:ab:23:eb:5a:4a:50:87:69:4f:d2:5e:85:a5:
e6:d0:8c:58:de:e0:3f:f8:7e:d0:e1:ba:e8:64:b1:
2d:c8:d2:ec:b2:fb:ab:3c:6c:6e:43:aa:f6:45:e3:
ce:ce:2e:8f:40:40:30:43:ea:b6:98:24:2d:df:a4:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B6:52:6E:2A:3C:6E:42:5C:61:99:63:AD:4A:61:2B:5C:30:7E:22
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/bLZSbio8bkJcYZljrUphK1wwfiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.96.0/21
82.145.64.0/19
212.14.0.0-212.14.47.255
IPv6:
2001:4c58::/30
Signature Algorithm: sha256WithRSAEncryption
6b:f5:29:c5:85:4c:dc:e9:1b:4f:e8:47:58:cc:fb:39:71:5e:
db:7e:1e:fc:82:83:99:aa:6b:78:b1:d8:95:8b:b2:95:ec:42:
d3:7f:2a:29:20:3d:bc:c8:6e:fa:0d:8f:53:97:32:dd:a9:2d:
9a:f2:93:80:ff:d2:c1:d5:1c:96:65:22:72:b5:59:c7:12:87:
2d:96:5e:cb:d6:aa:dd:8f:6e:ef:96:88:68:62:b9:8a:c2:ae:
90:45:3a:66:50:b8:d8:6a:27:b3:86:67:2b:bb:68:3b:df:7f:
ca:c1:29:9a:4b:d7:9f:72:3b:d1:49:06:0e:40:22:cb:a2:d4:
ec:a1:65:ef:33:46:73:85:8c:8c:e1:cf:1b:df:eb:b2:d8:2c:
4f:2d:af:76:d7:34:fe:ea:1c:82:9c:70:90:9d:46:8e:92:15:
a7:7b:69:ee:80:ad:40:a6:c4:1a:15:2c:b5:a6:61:97:87:38:
c9:71:4f:8f:cc:12:7f:16:b4:ec:2b:83:e7:1b:41:07:0c:80:
06:34:0f:ab:67:bf:27:6d:01:34:5a:f4:98:67:ab:1b:ff:2d:
ad:1d:60:a4:67:17:a3:88:f9:14:98:a1:e2:40:71:34:bb:b2:
28:a3:db:41:d5:50:c4:20:c9:09:08:4c:84:fa:6a:75:6c:51:
19:cc:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:39 2025 by rpki-client on console.sobornost.net