Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/C_Npb5M5Jm0hFfMw8i5nzwkrF3E.roa
File: C_Npb5M5Jm0hFfMw8i5nzwkrF3E.roa (raw, json)
Hash identifier: D/sTRo6/vwy9zewfCz9DXPJd96syf7+VZNMs129jXn0=
Subject key identifier: 0B:F3:69:6F:93:39:26:6D:21:15:F3:30:F2:2E:67:CF:09:2B:17:71
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 018CC3495C502F3457679FF502CBD316F948
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/C_Npb5M5Jm0hFfMw8i5nzwkrF3E.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41729
IP address blocks: 89.248.0.0/20 maxlen: 20
88.151.160.0/21 maxlen: 21
45.158.92.0/22 maxlen: 22
91.184.128.0/19 maxlen: 19
195.177.96.0/24 maxlen: 24
195.177.97.0/24 maxlen: 24
195.177.99.0/24 maxlen: 24
2a00:1a78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5c:50:2f:34:57:67:9f:f5:02:cb:d3:16:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bf3696f9339266d2115f330f22e67cf092b1771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:1f:e9:97:50:6e:4e:4a:c6:b8:db:c1:2a:
f2:7d:2e:5d:42:1a:c0:0c:3a:02:0a:76:ef:c5:5a:
7b:f2:80:2b:2c:f0:60:ff:0a:6b:9e:d2:fc:a5:9a:
8c:ec:91:92:8d:5f:29:7c:d8:dc:f9:56:b2:a1:30:
52:18:0d:94:fa:6c:90:79:a8:aa:04:1d:1f:ae:89:
67:44:48:a6:9d:cd:0a:22:14:b0:1e:4e:48:40:5d:
16:25:66:a9:91:1d:a0:88:59:fd:f7:86:b5:46:15:
b1:fe:01:4e:22:12:86:f2:56:b2:db:d1:e4:2e:32:
8a:ef:39:63:f6:2e:18:f4:05:dd:5b:f7:f2:d8:8f:
73:c0:31:12:db:b6:a5:20:f5:5e:0b:77:d8:f3:78:
b6:d5:6b:b9:c7:11:3b:eb:a5:ce:f2:d5:bb:e5:98:
0f:af:23:a4:ce:8e:13:08:d4:cc:c9:63:68:03:4e:
49:68:88:35:96:20:f8:ef:3a:0c:35:05:7e:b7:48:
38:ba:2d:f5:9b:fa:0c:a4:d3:56:64:16:b5:30:34:
12:6c:c5:9e:9a:da:70:2a:52:88:8e:22:24:e2:46:
bf:b9:11:0c:71:ed:56:ad:07:ea:30:de:d5:5c:b1:
fc:79:d8:ce:9c:cc:da:c2:ca:97:79:50:00:b5:bc:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:69:6F:93:39:26:6D:21:15:F3:30:F2:2E:67:CF:09:2B:17:71
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/C_Npb5M5Jm0hFfMw8i5nzwkrF3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.92.0/22
88.151.160.0/21
89.248.0.0/20
91.184.128.0/19
195.177.96.0/23
195.177.99.0/24
IPv6:
2a00:1a78::/32
Signature Algorithm: sha256WithRSAEncryption
62:5c:8a:05:62:c3:62:34:7a:69:02:c7:95:92:7f:ea:d7:6a:
a1:e4:90:f1:77:07:37:42:1d:50:39:75:f7:a3:e2:eb:7e:06:
ed:b7:c9:d0:1d:97:d0:ee:ec:33:77:5c:a8:62:e4:17:b3:52:
8a:27:fe:73:df:8d:cb:4d:6f:2c:7b:41:b7:d4:00:89:a4:79:
b2:44:27:d2:2f:44:dc:9f:0e:df:f2:bc:aa:09:a4:fe:cd:be:
54:18:27:3f:b4:55:df:c2:89:33:69:ec:eb:ac:cd:9d:e5:40:
01:b2:e6:13:b4:e2:80:b8:22:1e:6e:e7:a1:7f:7c:18:20:a4:
b8:87:3a:f1:e0:b8:fc:7f:ab:6c:67:da:5e:53:62:ad:f8:81:
93:3d:18:f5:e6:74:df:1e:b6:38:3f:2c:a5:f1:71:0c:b5:dc:
08:3f:cf:df:83:be:2c:19:9b:b6:a3:97:d9:16:92:59:10:9a:
67:41:17:e8:9b:f7:d1:17:68:7d:8f:80:2e:09:0c:e8:70:86:
a8:9d:b0:32:66:c0:07:ea:64:2f:62:2b:73:8d:9f:54:0f:f0:
79:00:07:99:1c:9a:97:0a:69:0f:a3:6f:8b:1d:e6:f4:f2:24:
af:1c:e5:8b:c9:f2:b4:8f:05:4b:c3:30:b1:fc:b3:e4:0d:5f:
35:66:78:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net