Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/b10-uyzSDsE84X1NxkfqXsdCqjM.roa
File: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (raw, json)
Hash identifier: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=
Subject key identifier: 6F:5D:3E:BB:2C:D2:0E:C1:3C:E1:7D:4D:C6:47:EA:5E:C7:42:AA:33
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019427B690581CDF81EC6637656B0B533C92
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/b10-uyzSDsE84X1NxkfqXsdCqjM.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 82.112.168.0/24 maxlen: 24
82.112.169.0/24 maxlen: 24
82.112.170.0/24 maxlen: 24
82.112.171.0/24 maxlen: 24
82.112.172.0/24 maxlen: 24
82.112.174.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
185.143.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:90:58:1c:df:81:ec:66:37:65:6b:0b:53:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f5d3ebb2cd20ec13ce17d4dc647ea5ec742aa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:59:f2:17:9f:8d:31:a2:06:17:02:15:5b:
f3:0f:4b:c7:ea:a5:ed:3f:d4:2b:94:4e:84:af:71:
9d:12:b5:e6:24:07:94:be:ae:4c:77:e4:ab:35:1e:
5f:4a:6a:13:6e:e5:ac:24:ee:5f:f3:1f:89:49:d9:
a3:6d:3f:66:dd:a5:de:ac:11:ae:aa:d4:83:26:7b:
0d:ad:dd:8d:c6:52:99:fa:b7:f4:c7:f0:e5:c1:59:
cf:8f:80:1f:3b:4c:60:40:7c:c5:1b:56:91:13:d7:
4e:fb:65:24:87:52:47:fe:28:85:f5:48:ff:a2:4e:
99:38:c8:51:1d:a2:73:1f:de:54:d7:fe:11:fc:9d:
36:39:6f:38:2f:c3:d0:99:73:db:0a:93:77:4c:f2:
fa:d9:8d:e5:dc:a2:f4:7b:02:86:e0:4b:52:30:dd:
4b:0a:f3:16:39:54:a6:b7:16:44:fa:9a:d1:32:98:
df:98:91:2e:81:05:01:ba:c6:d3:6c:53:c9:e1:3d:
f5:e8:21:e9:46:3a:54:ff:b0:c1:76:79:07:44:c1:
98:3e:83:9d:f3:86:4a:13:71:fc:dd:b7:60:93:6f:
b0:77:65:85:a8:43:ee:09:17:51:08:bc:22:fa:5d:
60:d6:3c:fa:64:e8:a4:fd:b5:29:46:25:77:85:db:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:3E:BB:2C:D2:0E:C1:3C:E1:7D:4D:C6:47:EA:5E:C7:42:AA:33
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/b10-uyzSDsE84X1NxkfqXsdCqjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.168.0-82.112.172.255
82.112.174.0/23
185.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:ee:4d:c3:bd:43:7e:97:11:e8:7c:4f:c4:2d:3f:d7:2a:
a4:6e:b3:9a:94:8d:fd:d3:d5:3f:1d:34:1b:e0:5b:03:88:37:
14:0e:bd:db:fb:d7:79:6a:f9:98:c7:c2:ab:da:33:1a:ca:7c:
6d:1d:82:fb:87:b5:38:c5:90:12:35:c9:53:80:6e:dd:47:eb:
80:20:99:fd:c9:fb:9e:57:8b:fe:e3:73:84:b3:84:b6:cd:eb:
c8:1b:4f:83:65:23:f0:04:a9:ce:55:f1:80:4f:d0:38:81:0a:
d8:48:8e:22:03:2e:b9:5b:a3:19:c6:f1:64:16:25:df:fe:4b:
e9:db:31:a7:a1:51:f3:9a:85:c8:1f:cd:a3:67:6e:76:49:87:
67:90:ab:ee:6e:0e:ea:74:c5:6c:4f:1c:13:7a:e5:fa:ce:ee:
a5:c3:0a:a4:57:05:df:f2:59:5e:f4:b2:d4:d2:5d:f3:ac:e8:
d6:19:b2:c2:39:3d:bb:6a:cc:e1:51:bf:18:7e:8b:be:e7:1b:
3d:73:24:f1:c7:a1:18:dc:e7:16:99:14:7f:63:90:f9:ec:4b:
7f:08:0d:8f:aa:70:f2:5a:9a:e6:66:73:8c:55:27:c6:ed:73:
f1:4f:7c:ae:9c:69:a3:b6:e7:48:99:ff:3f:15:93:a0:ea:88:
0b:7b:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:58 2025 by rpki-client