Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/6U9i7utkeJf5_mHZRUin_6OEz7g.roa
File: 6U9i7utkeJf5_mHZRUin_6OEz7g.roa (raw, json)
Hash identifier: n8Ym6ZIvABF1wcz52itJK4XlRBAqekQ3Jz4bWvY6It0=
Subject key identifier: E9:4F:62:EE:EB:64:78:97:F9:FE:61:D9:45:48:A7:FF:A3:84:CF:B8
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 0193454F609C74AB67A0AA3C0D5A41544266
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/6U9i7utkeJf5_mHZRUin_6OEz7g.roa
Signing time: Tue 19 Nov 2024 16:44:09 +0000
ROA not before: Tue 19 Nov 2024 16:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15447
IP address blocks: 31.169.56.0/23 maxlen: 24
31.169.56.0/24 maxlen: 24
31.169.57.0/24 maxlen: 24
31.169.58.0/23 maxlen: 24
31.169.58.0/24 maxlen: 24
31.169.59.0/24 maxlen: 24
31.169.60.0/23 maxlen: 24
31.169.60.0/24 maxlen: 24
31.169.61.0/24 maxlen: 24
31.169.62.0/23 maxlen: 24
31.169.62.0/24 maxlen: 24
31.169.63.0/24 maxlen: 24
85.119.48.0/23 maxlen: 24
85.119.48.0/24 maxlen: 24
85.119.49.0/24 maxlen: 24
85.119.50.0/23 maxlen: 24
85.119.50.0/24 maxlen: 24
85.119.51.0/24 maxlen: 24
85.119.52.0/24 maxlen: 24
85.119.53.0/24 maxlen: 24
85.119.54.0/23 maxlen: 23
85.119.54.0/24 maxlen: 24
85.119.55.0/24 maxlen: 24
185.162.145.0/24 maxlen: 24
185.162.146.0/24 maxlen: 24
188.94.184.0/23 maxlen: 24
188.94.184.0/24 maxlen: 24
188.94.185.0/24 maxlen: 24
188.94.186.0/23 maxlen: 24
188.94.186.0/24 maxlen: 24
188.94.187.0/24 maxlen: 24
2a10:9d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:4f:60:9c:74:ab:67:a0:aa:3c:0d:5a:41:54:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Nov 19 16:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94f62eeeb647897f9fe61d94548a7ffa384cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:e1:51:89:6a:50:24:2b:74:0a:43:e5:31:
5d:d4:1c:d3:1f:13:07:93:e9:26:f5:8e:db:5c:a2:
e5:43:73:2e:bf:25:ab:27:82:d5:14:c1:66:56:74:
90:9c:db:89:90:e0:23:f5:57:d0:9d:3d:f7:30:8e:
44:d8:42:c4:7e:0f:b0:42:a3:af:d2:23:fc:19:4a:
23:86:a5:b5:62:c4:59:35:b7:3e:f4:de:69:f3:d0:
3c:2b:64:55:f1:3d:9c:83:9a:e7:55:be:11:b6:6a:
c4:43:ee:26:4d:69:2a:57:55:ff:44:7e:09:e2:40:
d4:fa:85:86:70:1e:35:b0:10:6d:8a:d5:4e:1a:ca:
7d:4f:f7:24:1a:ab:c6:d0:3f:d9:01:55:0f:52:c4:
48:b6:77:2a:79:8e:6f:df:8f:d9:03:f0:27:4d:86:
19:c2:b9:9e:38:ff:d4:b9:e2:5b:10:27:70:d5:6c:
bb:c5:56:75:22:39:21:cb:e6:a4:69:c3:f9:c6:ea:
d6:41:5e:45:ff:21:de:fb:a6:6a:e5:0f:92:f9:de:
75:9d:4b:98:db:5b:09:dd:7a:5d:01:be:54:66:2f:
19:5a:a6:f2:46:73:b6:1c:f4:a3:ca:a5:0e:ce:64:
99:8f:fd:51:fe:9f:70:7d:09:cf:14:8f:f5:77:7c:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:62:EE:EB:64:78:97:F9:FE:61:D9:45:48:A7:FF:A3:84:CF:B8
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/6U9i7utkeJf5_mHZRUin_6OEz7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.56.0/21
85.119.48.0/21
185.162.145.0-185.162.146.255
188.94.184.0/22
IPv6:
2a10:9d80::/29
Signature Algorithm: sha256WithRSAEncryption
2e:dd:79:50:1d:33:d0:bf:e4:32:e8:80:10:50:37:90:2a:d7:
6d:b2:9b:c7:e1:c1:aa:0f:26:62:5d:ac:fa:c4:fa:fa:a5:d2:
fa:72:78:b6:76:bf:3b:6e:79:90:af:aa:6d:6d:ae:5f:d9:6b:
b2:ec:3f:c7:8d:60:ab:56:56:9f:fa:32:f0:2d:09:b0:cd:92:
11:4e:43:9e:0d:1b:fa:6d:3b:45:c5:88:36:46:77:25:c0:c2:
16:18:a5:00:bf:2e:ce:6c:57:b2:99:b2:b8:26:11:b1:dc:10:
ce:d6:9a:55:f9:a0:bc:a1:86:c8:cd:82:32:e0:08:85:27:29:
d2:68:92:81:57:ed:cd:da:fd:1f:24:2e:3c:18:0a:04:bb:4e:
cd:e3:ab:20:dd:f2:5d:1c:e3:65:77:6c:61:41:11:f0:5a:6b:
bb:16:bc:98:51:e2:9f:3b:f2:17:1a:24:1c:51:cc:46:e6:30:
35:34:7f:13:83:72:6c:54:b9:c8:d2:91:32:db:30:fa:6d:a1:
2a:ca:00:fd:fc:c5:1d:c9:13:d8:7a:ee:e3:ae:10:b9:60:31:
9c:1f:b1:d0:dd:89:80:93:07:f4:b1:09:09:43:b5:e9:e6:22:
e1:f9:69:68:a1:76:8d:6a:a5:8b:cc:d0:c6:7e:b0:93:10:f6:
6e:90:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:18 2024 by rpki-client on console.sobornost.net