Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gRGDjjLT48vk7uk37lX43qmpguM.roa
File: gRGDjjLT48vk7uk37lX43qmpguM.roa (raw, json)
Hash identifier: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=
Subject key identifier: 81:11:83:8E:32:D3:E3:CB:E4:EE:E9:37:EE:55:F8:DE:A9:A9:82:E3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FDA619CAA2A82799295F0722905D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gRGDjjLT48vk7uk37lX43qmpguM.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 85.133.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fd:a6:19:ca:a2:a8:27:99:29:5f:07:22:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8111838e32d3e3cbe4eee937ee55f8dea9a982e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:39:51:1b:57:1b:b7:84:85:73:b8:dc:86:
67:1d:c7:49:d3:92:92:24:ce:4c:42:a1:28:22:6c:
14:83:c5:f7:e6:30:04:63:a4:f5:83:70:15:9f:e1:
04:2a:fb:be:a6:d4:8c:79:10:7b:28:1c:41:04:49:
d1:bf:7e:9c:d0:b2:0f:29:1a:41:76:e0:bb:c8:43:
9b:1e:b2:d9:0a:c8:2c:05:48:67:1b:df:d3:8c:b7:
70:84:7a:7d:cb:5b:55:00:5d:52:ca:a2:69:ab:9d:
24:1d:e5:a8:50:92:97:ef:39:69:7a:56:69:e3:99:
f6:d5:fb:6c:6b:3f:4a:5f:d5:d0:a6:12:67:05:c9:
2e:9c:84:86:3e:94:9c:3d:34:22:1a:b1:1d:53:47:
90:97:ae:86:3f:07:89:d2:91:d5:50:74:c0:f6:36:
af:a4:16:59:2a:61:97:50:d0:53:fd:68:e8:24:58:
57:d6:b1:1f:f5:36:da:27:5e:e6:52:c6:48:b6:99:
14:3b:42:a0:df:7c:ee:ac:70:c5:ea:ad:54:6c:1d:
d7:5a:f6:f1:e8:8d:cb:c3:e0:5d:c0:da:ce:4c:17:
00:d2:15:2e:4c:52:7e:54:cb:f3:c3:23:1e:9f:6b:
47:10:b9:a4:b4:4b:25:47:c8:6f:63:28:a9:64:36:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:83:8E:32:D3:E3:CB:E4:EE:E9:37:EE:55:F8:DE:A9:A9:82:E3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gRGDjjLT48vk7uk37lX43qmpguM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.205.0/24
Signature Algorithm: sha256WithRSAEncryption
22:01:e2:75:6d:cb:b2:be:6a:f7:50:7e:a8:9a:61:bc:c2:7c:
b3:f1:6a:be:2a:44:71:8c:5e:26:e3:20:6c:cf:27:8b:e0:07:
c4:a7:ac:9c:77:e4:0b:4c:94:6f:06:f0:e9:6c:f0:9a:0c:2d:
92:bd:68:52:e0:94:93:df:69:f0:dc:a1:3e:ac:86:4e:92:8b:
40:98:db:a1:a3:aa:89:7a:c2:b3:01:d4:4d:34:44:6d:ae:13:
a7:2c:11:95:13:7d:2b:10:78:6b:5e:2c:33:06:e0:06:6b:e4:
6b:5e:2e:c2:41:b8:19:79:d8:5c:eb:eb:08:ad:cd:aa:43:d9:
2f:f0:aa:34:4d:54:f8:d6:12:34:a0:e7:0d:dc:3d:25:fe:a9:
0c:a1:40:28:6e:3c:a2:29:f0:3e:40:41:0b:c1:6f:b5:54:7f:
90:95:d7:42:28:c1:b6:d3:ca:ae:8a:88:f4:48:50:74:c1:b6:
f6:76:1a:9a:5d:61:57:c6:02:7e:ff:42:3a:2e:d3:f8:6c:0e:
08:40:36:14:6e:37:69:fc:8c:04:34:e0:db:9a:6a:06:db:d1:
00:46:74:a0:11:50:31:3b:1f:68:dc:8d:38:58:e0:f7:ee:cd:
16:c6:d7:b9:1b:91:2e:3d:bb:dd:62:f8:3e:29:14:5a:ef:ee:
0f:2f:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net