Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/abXbinT-08Wb1H3rBURYIWd5ePc.roa
File: abXbinT-08Wb1H3rBURYIWd5ePc.roa (raw, json)
Hash identifier: RW1C7jSfBNsIegUEmy7wEGfJv9gXQvKtk6KvPrEKQ5c=
Subject key identifier: 69:B5:DB:8A:74:FE:D3:C5:9B:D4:7D:EB:05:44:58:21:67:79:78:F7
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019427B5040E10C35F47E75E4BF73259F40B
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/abXbinT-08Wb1H3rBURYIWd5ePc.roa
Signing time: Thu 02 Jan 2025 15:49:21 +0000
ROA not before: Thu 02 Jan 2025 15:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54548
IP address blocks: 82.165.208.0/21 maxlen: 24
157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
212.227.236.0/22 maxlen: 24
212.227.240.0/22 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:04:0e:10:c3:5f:47:e7:5e:4b:f7:32:59:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 2 15:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b5db8a74fed3c59bd47deb05445821677978f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:11:01:12:c8:62:c3:ea:48:88:61:3f:6e:
ed:c0:5a:4b:45:c3:86:b6:75:3c:7a:32:07:50:33:
ae:88:20:00:fb:8a:93:46:64:7d:7f:11:26:22:db:
cd:24:5f:79:f8:7d:1b:c9:75:6b:89:b2:44:a7:d3:
8c:0c:25:cd:ab:15:13:dc:33:e2:9c:8a:01:15:f7:
13:fa:ee:60:d0:a0:86:98:b0:0c:76:4c:bd:e2:aa:
25:4e:9d:de:57:2d:97:fb:87:92:df:09:88:15:63:
48:56:52:00:62:7c:cf:19:65:50:43:49:cc:3c:e7:
0e:8c:08:b2:4a:c5:28:af:7d:8c:e0:fb:02:1b:83:
8a:61:bb:56:f0:93:d5:54:dc:fd:ac:d9:90:4f:ad:
95:27:e7:ef:72:0b:6e:3d:39:f8:d3:03:10:80:b2:
d3:aa:7b:ee:05:e3:a1:bc:84:c5:09:43:a5:a8:8d:
9f:3f:b4:a7:44:92:ae:d3:92:38:df:c3:32:81:b9:
8b:5e:36:85:17:42:2b:c8:82:55:fa:df:df:16:e7:
d9:64:a9:a2:da:44:7b:a7:86:73:93:5b:5f:5e:b9:
dd:29:b3:09:91:2e:27:38:9e:ac:14:b3:49:b8:d7:
ac:17:d3:ed:95:1a:c4:11:e0:9c:16:4d:15:6c:da:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:DB:8A:74:FE:D3:C5:9B:D4:7D:EB:05:44:58:21:67:79:78:F7
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/abXbinT-08Wb1H3rBURYIWd5ePc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.165.208.0/21
157.97.104.0/23
212.227.236.0-212.227.243.255
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
53:2e:e8:16:4b:88:8a:7f:98:d8:0f:af:fc:3e:0e:8c:df:1e:
65:c9:5a:f6:96:c4:8c:e7:ee:27:b9:a0:ba:16:3d:e0:8e:8c:
54:67:08:25:a7:80:2e:ea:d6:87:8d:ce:42:03:8e:d2:1b:aa:
08:ff:88:fd:c7:ab:b9:d6:fb:fe:0e:a5:ec:d3:46:b4:df:90:
97:94:06:a5:7d:da:6e:fa:41:38:44:a7:0c:0c:c1:e1:75:3d:
69:18:7a:6c:73:03:4c:00:9d:0a:7e:86:78:0e:c9:34:0d:ef:
9c:2d:8f:16:52:90:b8:a8:72:f8:47:be:ea:00:95:d0:b4:7b:
12:be:0d:be:c5:b6:e0:5e:ec:56:b0:4f:42:a4:36:13:ea:f7:
c9:c2:0d:65:c6:52:c6:e8:f6:7d:1c:83:d2:d9:f5:51:22:82:
69:08:a3:5f:1e:b0:dc:09:46:83:11:09:50:cb:9f:c0:f1:22:
4d:03:5c:61:ed:e1:4d:43:50:1f:d8:31:0d:fe:fe:01:c1:2f:
4b:9a:0e:b0:b3:21:c3:46:26:d9:b6:96:d6:c3:14:51:2d:cf:
43:83:99:68:dc:62:1c:15:14:03:3c:02:5a:c6:f4:f1:75:49:
38:15:22:47:77:01:6c:b1:6f:6a:8e:95:1c:3d:7e:22:a6:8e:
9b:02:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:23 2025 by rpki-client on console.sobornost.net