Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/F59apShYusHaM03fu2-EvIpvk4c.roa
File: F59apShYusHaM03fu2-EvIpvk4c.roa (raw, json)
Hash identifier: Yzy4Jp94SN3mUaIJ8XKTdg49KafiUJVwtkMi6Red5jM=
Subject key identifier: 17:9F:5A:A5:28:58:BA:C1:DA:33:4D:DF:BB:6F:84:BC:8A:6F:93:87
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 0184EE92FB5ECE31CA69251C04527A9FF5A2
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/F59apShYusHaM03fu2-EvIpvk4c.roa
Signing time: Wed 07 Dec 2022 21:52:00 +0000
ROA not before: Wed 07 Dec 2022 21:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25098
IP address blocks: 85.116.10.0/24 maxlen: 24
85.116.8.0/24 maxlen: 24
85.116.12.0/23 maxlen: 23
82.136.7.0/24 maxlen: 24
82.136.16.0/22 maxlen: 22
82.136.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:92:fb:5e:ce:31:ca:69:25:1c:04:52:7a:9f:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Dec 7 21:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179f5aa52858bac1da334ddfbb6f84bc8a6f9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:ef:f2:b5:1b:c2:16:0e:d6:a8:fc:81:11:
1b:41:a1:4a:6a:6b:38:1d:ca:3e:a5:38:30:84:59:
1c:d0:8b:2e:fe:f0:f0:84:f2:a8:70:c1:a0:97:b6:
38:92:49:82:23:65:d4:12:80:da:49:73:61:35:f5:
a0:6f:c5:30:e0:98:47:ae:8e:19:af:ae:aa:f5:96:
be:dc:34:a3:5b:a9:1e:f7:cf:00:75:af:c2:c3:33:
f9:8c:fe:cc:3b:ed:a4:cd:24:90:2f:f8:9d:36:32:
b0:47:2d:9f:d8:32:ec:72:2f:78:8d:a0:e7:a8:fb:
26:e4:27:b6:00:7c:90:5c:78:e6:0d:a0:89:80:31:
d0:7f:4f:b5:58:62:90:86:38:ca:ee:20:1d:9d:0f:
ac:44:99:40:d2:ed:bc:0a:c9:d7:ec:70:30:2a:3e:
d4:97:77:bd:fc:a7:de:97:5b:f6:d9:18:a1:69:9f:
f5:65:c8:ee:b3:c9:ab:da:56:2a:ba:ac:63:71:14:
11:75:a6:fe:ea:49:33:d8:d1:b8:04:cb:a6:d3:02:
3c:74:67:ee:bf:a0:0f:c9:d7:cc:58:a6:69:b7:0b:
f7:a6:ea:e3:e3:2c:1b:0b:18:eb:e2:10:dd:ee:9d:
2a:5e:28:e1:0a:fd:40:33:d9:44:06:dd:35:63:1b:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:5A:A5:28:58:BA:C1:DA:33:4D:DF:BB:6F:84:BC:8A:6F:93:87
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/F59apShYusHaM03fu2-EvIpvk4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.136.7.0/24
82.136.12.0-82.136.19.255
85.116.8.0/24
85.116.10.0/24
85.116.12.0/23
Signature Algorithm: sha256WithRSAEncryption
34:16:18:dd:fe:d4:28:ca:6c:b0:7b:58:48:3f:13:3e:51:29:
ad:8b:b6:1c:d7:c0:6e:47:58:f9:df:24:76:89:0a:c4:83:5f:
c8:d9:7e:c1:24:d5:64:2d:b5:64:19:7b:b3:66:15:41:55:07:
35:67:52:df:8a:6a:d8:cd:6b:f5:72:18:70:58:c8:f0:82:6c:
76:f3:00:03:b3:b4:c2:e5:f5:ab:39:6b:22:98:d4:cf:f4:7d:
33:33:90:a5:35:9b:e0:81:46:69:1f:f3:de:2a:92:b3:39:f1:
41:a4:da:c6:17:f5:88:db:d6:fb:d2:9d:d3:da:04:ad:2c:56:
56:b9:11:c6:b0:44:13:7a:92:98:f2:e0:c3:6f:5c:c2:cf:20:
bc:89:6a:37:1c:f5:7a:35:6b:e0:21:f1:de:96:e3:40:81:08:
6e:a1:26:ec:b9:d5:86:9b:70:58:28:8c:4e:7c:7b:d5:ca:2e:
64:d7:71:7b:16:b2:ce:6e:21:07:c2:f2:51:e2:d8:b2:ef:61:
70:88:35:9b:b3:ba:9f:b0:10:6f:9c:00:b6:11:1b:01:b8:c4:
8c:59:fc:ca:42:ad:69:33:4a:e2:1f:ba:65:e1:dd:bd:de:38:
3f:4f:e0:65:2a:03:33:61:b9:25:f1:27:c4:e6:2d:3a:6d:68:
e5:e5:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:26 2025 by rpki-client