Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ISkUtkeLPeROOWqsGopFhdledxQ.roa
File: ISkUtkeLPeROOWqsGopFhdledxQ.roa (raw, json)
Hash identifier: DlAG3B0p4od4kbQ8KoBFJG04tAlXpwu4MY0BNcxDDOE=
Subject key identifier: 21:29:14:B6:47:8B:3D:E4:4E:39:6A:AC:1A:8A:45:85:D9:5E:77:14
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AF990FEB2FC1024C1FE21C815CB3E01B0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ISkUtkeLPeROOWqsGopFhdledxQ.roa
Signing time: Wed 04 Oct 2023 07:22:23 +0000
ROA not before: Wed 04 Oct 2023 07:22:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:90:fe:b2:fc:10:24:c1:fe:21:c8:15:cb:3e:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 4 07:22:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212914b6478b3de44e396aac1a8a4585d95e7714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:49:92:2b:6b:39:55:c7:ae:c8:d3:86:8b:
df:a2:04:03:4c:7b:b0:8b:a3:1b:b2:ca:24:05:41:
67:08:c8:b2:56:3d:11:cd:b6:9d:da:74:bc:45:e7:
d2:39:2d:f5:83:f2:3d:84:0f:f7:16:b2:15:be:4e:
8a:2a:7f:93:38:4b:5a:51:22:28:4f:62:79:3a:08:
d6:b0:45:33:82:5d:c2:f1:67:e8:21:d9:00:24:ba:
ee:1f:d9:91:50:e7:ff:69:45:d2:eb:74:98:b8:f6:
ce:a8:b5:44:a6:ac:56:42:91:a6:a8:97:42:d8:e7:
90:96:69:2d:ca:9a:09:d4:e6:0b:ce:23:65:1f:38:
e5:a7:4f:59:8a:c7:75:1d:67:21:a4:60:51:20:bf:
85:c2:c2:2b:b7:5f:1a:b5:d8:d0:fd:77:81:c5:c9:
a8:99:fb:57:0d:18:b6:4f:fe:1d:8f:2c:d0:0c:43:
71:93:e8:37:43:e3:63:f6:e8:57:7c:7f:40:8e:a8:
42:f3:c5:a2:c6:ea:de:35:e5:86:19:40:0c:bc:50:
26:ef:8b:b8:d7:71:5d:8a:1d:34:19:90:50:10:3f:
e1:8d:ec:c0:4d:89:4e:30:35:0a:f6:c3:6f:6d:e8:
1e:b9:3a:30:ea:ff:36:46:9c:0f:a4:8e:9a:70:78:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:14:B6:47:8B:3D:E4:4E:39:6A:AC:1A:8A:45:85:D9:5E:77:14
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ISkUtkeLPeROOWqsGopFhdledxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.166.255
62.72.168.0/22
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:7d:12:17:39:3f:b7:c1:41:4a:a7:89:44:19:ab:9a:67:ad:
18:ce:f1:d6:94:1f:1f:3d:4e:8e:08:bc:45:02:4a:1b:d3:f4:
28:52:13:de:4b:53:37:c4:a1:f3:81:48:ca:3b:30:8a:a7:88:
77:77:ce:45:d5:18:01:b2:89:7d:88:5d:96:e0:64:0e:f3:24:
3d:16:6d:66:6a:e2:f9:7c:d7:33:0a:c6:23:49:53:5f:d9:7b:
e2:7b:f4:e2:66:e1:2c:67:03:8e:be:00:44:98:bb:d0:e7:6e:
c3:a3:d3:cd:a9:1b:3b:2e:4f:df:68:88:74:0f:90:51:c8:d6:
03:82:99:3f:6f:df:b1:a0:16:d0:8b:3a:fe:6c:71:74:f4:90:
27:d6:6f:fe:18:57:86:1a:ed:4a:64:ed:8d:82:f0:60:31:70:
35:a8:6a:3b:12:cf:39:c7:fc:9e:21:81:62:61:d3:58:42:55:
c8:aa:64:a5:6b:58:d5:c6:6f:3c:fc:43:ae:6c:98:5b:d6:24:
f2:07:02:c1:99:d8:79:cf:82:e7:c9:c5:62:33:04:ef:3c:8b:
a6:a0:d2:a8:ec:8b:15:de:74:75:7c:d4:7b:df:8e:b8:d2:00:
d0:bb:9d:2e:24:60:b4:6d:f5:ff:f4:c3:d2:ad:80:b3:3b:be:
39:1b:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:44:56 2025 by rpki-client