Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/Jp2Ks5a1UaNcboVXXjHQTWIEKc0.roa
File: Jp2Ks5a1UaNcboVXXjHQTWIEKc0.roa (raw, json)
Hash identifier: +xxmTfAEVppV19pq0XfYtvzJJzSlJ3nKycQZM8IGYNs=
Subject key identifier: 26:9D:8A:B3:96:B5:51:A3:5C:6E:85:57:5E:31:D0:4D:62:04:29:CD
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 018CC64AED24EECB5CCB39560E55A9EF6B42
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/Jp2Ks5a1UaNcboVXXjHQTWIEKc0.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15447
IP address blocks: 85.119.49.0/24 maxlen: 24
85.119.48.0/24 maxlen: 24
85.119.48.0/23 maxlen: 24
85.119.51.0/24 maxlen: 24
85.119.50.0/23 maxlen: 24
85.119.50.0/24 maxlen: 24
85.119.53.0/24 maxlen: 24
85.119.52.0/24 maxlen: 24
85.119.54.0/24 maxlen: 24
188.94.185.0/24 maxlen: 24
188.94.184.0/23 maxlen: 24
188.94.184.0/24 maxlen: 24
188.94.186.0/23 maxlen: 24
188.94.186.0/24 maxlen: 24
31.169.58.0/24 maxlen: 24
31.169.58.0/23 maxlen: 24
31.169.57.0/24 maxlen: 24
31.169.56.0/24 maxlen: 24
31.169.56.0/23 maxlen: 24
31.169.59.0/24 maxlen: 24
31.169.60.0/23 maxlen: 24
31.169.60.0/24 maxlen: 24
31.169.62.0/23 maxlen: 24
31.169.62.0/24 maxlen: 24
31.169.61.0/24 maxlen: 24
31.169.63.0/24 maxlen: 24
188.94.187.0/24 maxlen: 24
2a10:9d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ed:24:ee:cb:5c:cb:39:56:0e:55:a9:ef:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269d8ab396b551a35c6e85575e31d04d620429cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:54:2c:65:37:ce:0b:3b:a0:76:fa:0f:8b:
38:c6:49:7a:93:6d:08:30:ad:f6:89:ea:07:09:85:
94:51:d6:e3:dc:20:80:27:bd:d0:65:2c:05:63:d9:
0d:f5:ed:56:ca:b7:de:99:cf:de:74:31:13:cc:c9:
81:1e:8d:38:22:a2:ac:69:db:f9:95:1b:90:b6:a2:
d6:60:22:3f:31:c3:8b:d9:d7:7c:43:b4:34:2d:61:
b9:13:93:ad:8e:02:61:e8:b7:fa:66:47:c8:fb:8e:
c8:c6:75:5d:b6:36:07:ab:0d:35:82:a9:d1:0e:5c:
d9:ba:13:2d:e7:a2:7f:d7:2b:9e:17:9b:a3:f3:c8:
a7:89:5a:56:15:f3:68:4a:45:4d:43:08:20:8c:b2:
f2:ad:6d:20:0c:45:aa:97:78:52:6c:18:88:1c:d1:
36:72:0e:d9:bf:09:27:f7:4d:4c:89:09:23:ee:8f:
ce:b7:f7:e4:c2:6b:88:4c:fb:0f:29:a1:bd:05:b0:
74:39:1b:94:c3:70:f7:f7:3e:a7:91:09:dc:09:5a:
9b:5c:c2:45:a6:fa:76:f2:d6:1d:ad:0b:68:ad:55:
00:90:29:af:f5:18:fc:37:93:18:14:45:f9:06:8a:
82:ed:02:25:14:74:11:e1:8f:b9:2e:af:35:e8:0d:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:8A:B3:96:B5:51:A3:5C:6E:85:57:5E:31:D0:4D:62:04:29:CD
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/Jp2Ks5a1UaNcboVXXjHQTWIEKc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.56.0/21
85.119.48.0-85.119.54.255
188.94.184.0/22
IPv6:
2a10:9d80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:e5:f7:7c:3a:70:b1:d9:e0:f6:f5:06:03:10:31:b3:82:ad:
b2:f1:65:e1:90:c1:b3:67:95:5f:9d:d9:04:eb:c0:e4:f3:ff:
20:c8:b2:aa:cb:1d:cc:07:f6:31:43:8b:f7:97:35:c2:f2:55:
4d:14:68:d0:0a:62:b5:4f:c9:8b:38:c1:31:2e:0d:ab:b7:5f:
f7:07:74:7e:b8:a7:49:dd:38:f8:fd:99:84:00:68:b0:6d:e4:
1e:f1:d1:cb:bb:ed:fe:ec:5b:83:c0:a1:ba:fb:ce:ee:35:dc:
be:e8:f4:46:9a:22:7e:e8:02:63:e2:c8:64:90:2b:e8:33:6f:
52:07:11:1d:6d:5a:85:cc:20:fb:65:71:c1:a6:39:9b:7d:9c:
bf:18:98:b7:ad:cd:9d:ab:95:ab:08:ea:6a:b5:1a:d4:f7:fc:
0d:a2:eb:b5:74:6d:34:be:a2:d5:3d:9d:f6:8b:3f:dd:f6:57:
98:f0:9e:04:97:5e:03:2b:60:46:d5:c6:66:3d:a0:6a:c9:b8:
f0:d3:1c:1f:e4:a8:f1:21:f3:0b:9d:02:09:82:39:83:d0:83:
d4:11:72:dc:ac:f1:bb:9f:e8:3c:63:39:7e:a1:d3:c1:db:db:
06:e1:b3:6f:52:96:05:be:6b:08:be:a5:f0:f3:e4:fc:e3:a9:
ba:a6:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:55:13 2024 by rpki-client on console.sobornost.net