Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gvi7PcozfeHXC2LD8zI1ANVtiuw.roa
File: gvi7PcozfeHXC2LD8zI1ANVtiuw.roa (raw, json)
Hash identifier: 7vSCp/muk4bFqaxdeC7EBH3zuKmiouGYBxQNgn5xgzo=
Subject key identifier: 82:F8:BB:3D:CA:33:7D:E1:D7:0B:62:C3:F3:32:35:00:D5:6D:8A:EC
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01942823DBCB4B80D5B9943E1A11BC43EE29
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gvi7PcozfeHXC2LD8zI1ANVtiuw.roa
Signing time: Thu 02 Jan 2025 17:50:26 +0000
ROA not before: Thu 02 Jan 2025 17:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 89.42.136.0/22 maxlen: 24
89.42.136.0/23 maxlen: 24
89.42.136.0/24 maxlen: 24
89.42.137.0/24 maxlen: 24
89.42.138.0/23 maxlen: 24
89.42.138.0/24 maxlen: 24
89.42.139.0/24 maxlen: 24
89.42.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:db:cb:4b:80:d5:b9:94:3e:1a:11:bc:43:ee:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 2 17:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82f8bb3dca337de1d70b62c3f3323500d56d8aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:f8:31:dd:95:31:ca:87:b8:e9:19:f4:fd:
cd:c2:d8:77:85:6e:0c:7b:68:58:87:14:96:06:47:
7b:ab:c2:8b:02:ec:0f:0f:a1:f5:4c:b5:e7:84:a8:
8e:ce:2a:ba:fb:60:fc:48:de:86:ef:ae:63:16:92:
b3:aa:c3:0e:31:69:f3:fc:da:c3:8e:57:ef:5f:15:
fe:3e:50:63:f7:14:ef:d1:04:fe:a0:9e:fb:fd:31:
a7:a4:9b:98:87:81:eb:8d:cf:17:d6:68:7b:ab:f1:
9f:f3:e0:98:53:c4:f7:01:fe:e4:08:1c:ba:93:74:
8c:8f:41:53:1a:65:09:d0:22:4a:50:e4:09:80:9a:
65:7d:9f:bf:87:c7:f7:a1:a1:83:db:39:f6:67:fb:
b0:e2:7c:25:75:32:e2:01:ab:c2:f9:40:8f:0d:17:
e3:3a:e7:2b:c9:da:9f:c3:cc:fa:c3:ad:2c:ee:10:
24:d4:1b:6a:3d:fc:41:8e:81:6b:e7:b0:77:20:32:
fb:80:c6:61:ce:30:99:d2:80:67:82:74:ab:af:46:
15:17:5c:e7:d1:15:54:2e:7b:2a:f1:a7:2d:74:be:
c8:28:59:7d:12:6c:b5:db:e1:16:d8:96:93:23:39:
4c:da:d0:c3:77:95:5f:b2:a6:e0:b3:15:36:77:08:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F8:BB:3D:CA:33:7D:E1:D7:0B:62:C3:F3:32:35:00:D5:6D:8A:EC
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gvi7PcozfeHXC2LD8zI1ANVtiuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.136.0/22
89.42.196.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c3:93:78:32:0b:25:8c:29:86:81:2c:6b:d0:ad:85:87:26:
42:d2:7f:b7:78:78:3a:76:4f:1b:38:98:9d:58:0b:df:2b:9e:
e3:50:6d:66:02:83:cc:be:42:a3:21:7e:8c:5b:76:e8:a6:2d:
79:eb:8f:66:5b:71:67:31:32:2b:9f:91:c5:7e:77:e3:78:cc:
8a:b2:77:7c:20:d1:00:f5:c0:c8:20:a4:a2:aa:17:cf:f1:ae:
9c:eb:f5:29:43:9d:61:a3:bf:fd:28:e2:8b:c1:cc:24:1e:c4:
da:2a:16:f2:8a:92:24:ec:04:d2:ec:5c:15:7b:78:42:cf:65:
af:20:94:87:89:27:e8:76:6c:d5:a1:44:e1:01:38:d2:e3:6c:
86:bf:84:46:cf:18:a5:30:49:24:52:7e:42:22:82:e9:1e:cb:
a9:9c:5a:78:77:b3:a2:45:20:56:47:b3:eb:7c:aa:8f:c7:ea:
a1:ec:f0:7d:83:bb:c9:0d:f0:aa:62:08:4b:99:3a:40:35:71:
72:c1:ad:21:f1:54:b7:fd:3c:de:c6:28:1f:25:d6:a5:44:2a:
78:81:82:7d:4d:ff:6d:fa:ef:c0:40:ee:59:32:5b:dc:44:99:
0f:97:05:8b:7a:26:e7:e2:9f:f4:6f:27:b9:63:cf:5d:cf:bd:
b0:1e:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:46:51 2025 by rpki-client on console.sobornost.net