Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/_gLgclfAjuU9r8xOewekHphrtFw.roa
File: _gLgclfAjuU9r8xOewekHphrtFw.roa (raw, json)
Hash identifier: y+GgEvYyGYDsDH350VRbaF3jxe6ZcxwZ2S3dJwd/r9A=
Subject key identifier: FE:02:E0:72:57:C0:8E:E5:3D:AF:CC:4E:7B:07:A4:1E:98:6B:B4:5C
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019469F7AB4ADE637DD328269FC86CF0A40F
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/_gLgclfAjuU9r8xOewekHphrtFw.roa
Signing time: Wed 15 Jan 2025 12:37:06 +0000
ROA not before: Wed 15 Jan 2025 12:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31394
IP address blocks: 83.137.40.0/21 maxlen: 21
185.100.240.0/22 maxlen: 22
2a00:11d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:f7:ab:4a:de:63:7d:d3:28:26:9f:c8:6c:f0:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jan 15 12:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe02e07257c08ee53dafcc4e7b07a41e986bb45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:54:ff:f2:f2:ec:2c:3c:64:2f:88:3e:a6:
ce:46:8b:51:c3:e6:34:bd:a3:39:b7:e7:f7:82:3b:
78:9d:b8:4e:0a:da:a3:37:59:f0:77:b3:63:f2:c7:
de:d6:9d:ae:88:05:aa:e6:f3:ce:56:d6:ba:68:78:
40:9f:d5:47:63:f3:b1:84:3f:14:8d:a2:25:5d:05:
3c:c4:f1:6c:e8:1c:db:ab:da:7e:03:dd:ea:81:38:
7e:19:e9:df:d1:7a:9d:ee:cc:5f:79:12:d8:24:26:
cb:8b:c3:5b:2c:a0:1d:7e:bb:a3:8c:f2:14:d2:90:
2a:71:8a:76:b9:e3:e8:a4:25:52:1e:19:68:1d:af:
2a:27:b0:9a:a4:b9:99:b1:c5:9c:a4:bc:c3:b5:8f:
f5:9d:22:d6:69:ea:7a:8e:34:1f:03:1d:68:d7:d2:
b9:f7:a1:08:6c:f6:40:f0:fd:b7:f2:b2:91:cc:84:
da:77:92:29:94:18:ac:5a:78:69:e9:47:72:a3:e9:
ea:b1:6d:c4:40:0d:12:a2:74:4e:66:58:57:0b:2b:
d9:5c:b6:90:99:6e:2f:3d:d8:89:d1:b2:bc:42:da:
fd:cd:a4:ff:ef:7b:cd:c5:7c:b5:e2:57:e5:b7:70:
ef:f0:a4:c7:9c:99:01:43:09:ba:3f:74:6d:dc:88:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:E0:72:57:C0:8E:E5:3D:AF:CC:4E:7B:07:A4:1E:98:6B:B4:5C
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/_gLgclfAjuU9r8xOewekHphrtFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.40.0/21
185.100.240.0/22
IPv6:
2a00:11d0::/32
Signature Algorithm: sha256WithRSAEncryption
44:21:2a:38:4c:0f:fb:0a:cb:a5:51:c0:87:eb:f2:4a:d0:df:
b4:8e:46:82:bc:58:4d:a1:af:1c:c7:be:fe:54:a1:4f:f2:81:
ee:df:4b:86:63:85:29:57:f8:8d:98:43:10:d4:8f:9d:28:13:
ca:8b:c8:6f:d2:6f:ba:83:d9:2d:9e:98:c4:3d:a4:0b:24:d4:
01:35:a9:61:11:d2:61:f4:4a:b6:99:da:05:8e:0a:75:f0:12:
6a:0b:f5:e6:d1:55:90:8a:7b:2e:cc:84:e3:1c:54:d7:47:bb:
57:08:d5:b3:e2:b2:6f:27:51:a5:4b:53:74:93:61:22:fa:66:
68:53:99:e3:b0:21:f1:c4:0a:25:ae:20:ee:e6:b6:cd:ad:7a:
2b:4b:fb:32:c7:87:18:d1:45:23:dc:e2:d1:69:83:d2:d8:1e:
6e:5c:dd:93:e0:43:18:ad:31:f6:78:6d:6e:f6:98:a1:aa:be:
27:98:92:06:b6:c7:f8:67:59:14:3a:8a:91:d0:1d:6c:98:d6:
36:d9:7c:18:bf:86:c8:cf:7e:33:46:d9:51:d1:8d:d3:a0:fc:
9b:a4:ef:fd:b7:14:17:7d:72:2c:16:37:cb:cb:c1:fe:58:84:
2b:c7:06:51:0e:11:1a:f0:f9:e6:11:cb:92:50:08:37:2b:19:
45:d7:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:27 2025 by rpki-client on console.sobornost.net