Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yeknv82PJCkBsqWgGc3j29ADG2g.roa
File: yeknv82PJCkBsqWgGc3j29ADG2g.roa (raw, json)
Hash identifier: Y9Av2ss9kr/lOx4dMplfABPhTfqoOWm9UvD13kwrgdk=
Subject key identifier: C9:E9:27:BF:CD:8F:24:29:01:B2:A5:A0:19:CD:E3:DB:D0:03:1B:68
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 032A2D18
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yeknv82PJCkBsqWgGc3j29ADG2g.roa
Signing time: Sat 01 Jan 2022 10:05:20 +0000
ROA not before: Sat 01 Jan 2022 10:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9153
IP address blocks: 85.116.9.0/24 maxlen: 24
46.248.96.0/19 maxlen: 19
82.136.0.0/18 maxlen: 18
82.136.4.0/23 maxlen: 23
82.136.8.0/22 maxlen: 22
195.68.206.0/24 maxlen: 24
195.22.128.0/23 maxlen: 23
82.136.48.0/22 maxlen: 22
2001:4088::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53095704 (0x32a2d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 10:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9e927bfcd8f242901b2a5a019cde3dbd0031b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:80:fb:68:ce:4f:f8:db:fb:fa:ed:61:ce:
88:bb:68:63:d0:33:d0:1b:36:4f:67:31:9b:e0:ef:
78:c5:b1:86:b9:ae:6d:95:1f:56:4d:03:83:61:d9:
3b:5a:d2:86:7f:dc:52:2f:bc:26:26:06:48:4a:a1:
2a:94:ef:36:c4:98:68:e9:91:72:4a:a3:e5:37:f6:
db:8f:78:26:1d:3b:a8:fe:1a:f3:3c:e6:44:d5:03:
81:b2:81:d3:13:68:7b:b5:a6:60:53:c0:0f:cc:de:
48:48:a7:d4:c3:f0:9f:aa:64:75:00:f0:6d:67:2a:
15:b6:6b:13:7b:bf:df:04:0d:f8:6f:6a:a2:4f:e9:
44:4e:0e:74:8b:23:ee:34:f8:00:af:42:27:01:6d:
58:59:73:ca:d8:20:95:97:f4:b4:ff:4c:99:8f:30:
12:a0:6e:5c:fd:54:d7:41:5d:fb:63:9c:53:f3:40:
a9:e8:94:9e:d4:d5:b1:31:09:86:f7:4d:f6:f0:5a:
88:a3:07:05:07:48:61:12:80:db:85:36:72:c5:7e:
a0:52:c5:8d:31:cf:29:ca:06:b4:01:35:59:b3:f4:
70:42:7a:ea:7e:02:53:a0:7e:67:40:17:15:c9:1c:
8c:30:77:3c:1d:74:06:c5:22:70:d6:c6:7d:54:3f:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:27:BF:CD:8F:24:29:01:B2:A5:A0:19:CD:E3:DB:D0:03:1B:68
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yeknv82PJCkBsqWgGc3j29ADG2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.9.0/24
195.22.128.0/23
195.68.206.0/24
IPv6:
2001:4088::/32
Signature Algorithm: sha256WithRSAEncryption
04:53:49:69:93:1f:90:2a:09:88:48:e9:76:d4:14:16:3c:38:
98:96:1d:4d:87:a1:ea:7e:96:50:78:3c:5f:8f:2e:34:2d:3d:
96:5e:38:46:26:00:e5:7c:40:ba:4c:6a:47:c4:8a:d8:4f:cb:
7f:e2:b5:7a:51:23:ba:83:b9:d9:19:b8:89:45:07:dc:6a:e5:
fb:bd:1f:70:5d:1f:bd:44:3e:f3:9a:bb:cd:df:7f:05:55:7d:
ab:94:32:cc:93:28:f5:98:f6:24:c9:51:07:14:ec:25:34:fb:
16:b2:c7:43:a6:ac:f6:56:a5:3b:dd:37:95:e9:83:ed:72:db:
17:55:5a:2a:94:10:18:c0:a6:30:9d:a9:8a:eb:cc:2a:5a:ba:
c2:36:ab:0d:72:93:59:8d:5b:98:5c:e8:8c:16:3d:31:65:39:
50:f7:5e:3c:0d:18:1e:c1:8a:40:b6:98:42:c6:c7:b1:9f:97:
18:4a:89:41:41:dd:ce:bb:50:34:b3:a1:e6:b5:e5:32:6a:2d:
4f:69:0b:aa:80:cd:21:6d:3a:e0:b2:f4:2b:0e:60:eb:a5:06:
b3:6a:9d:81:91:e6:96:30:87:7d:21:ec:40:cf:52:00:c8:75:
90:14:e2:ed:db:a1:52:58:46:fa:ac:f7:d3:b0:f4:65:73:82:
7a:54:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:34 2025 by rpki-client