Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DyMnnZmNWNDcKZatq_arWIFRe4U.roa
File: DyMnnZmNWNDcKZatq_arWIFRe4U.roa (raw, json)
Hash identifier: VvZIhdhTU7Uf76nDBu73ezr06ZZ+cNk1B2MjJzpsT7o=
Subject key identifier: 0F:23:27:9D:99:8D:58:D0:DC:29:96:AD:AB:F6:AB:58:81:51:7B:85
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0193246D1A2AF439B241869063B7BFCA7458
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DyMnnZmNWNDcKZatq_arWIFRe4U.roa
Signing time: Wed 13 Nov 2024 07:29:09 +0000
ROA not before: Wed 13 Nov 2024 07:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215597
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:6d:1a:2a:f4:39:b2:41:86:90:63:b7:bf:ca:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Nov 13 07:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f23279d998d58d0dc2996adabf6ab5881517b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:27:2d:28:6d:a9:d4:d2:29:55:18:34:32:
53:a0:2e:82:72:ba:dd:cc:2c:a8:a1:a2:fd:93:6c:
ac:b2:bc:17:44:5c:22:c1:c3:19:09:4d:b1:53:1f:
37:df:14:84:69:1c:79:9b:d9:0c:65:fd:c2:ce:f3:
e1:71:d1:6e:44:a9:eb:34:05:15:b4:fd:91:ba:50:
22:62:f6:11:18:63:f7:d8:ac:d0:48:ef:d0:9b:6f:
c8:16:81:0b:75:e6:ec:0e:45:37:9f:5f:2f:44:6c:
ab:c6:b7:ad:e3:58:bb:c8:b5:e5:3a:26:5e:54:bf:
b3:7d:d1:d7:99:37:5d:84:9c:7f:bb:55:28:23:99:
ee:a8:80:24:de:16:1c:19:f7:e5:68:e0:c7:9a:f4:
e8:0d:eb:58:6a:8b:a2:d2:fa:fb:3a:25:45:2d:4f:
93:57:aa:22:62:47:49:74:9c:08:cd:fe:b1:df:a6:
1b:92:09:99:f5:a1:ab:f9:a2:19:0f:d4:38:0a:35:
c0:38:b5:51:7f:1b:12:29:ae:67:70:9e:e8:02:7b:
dc:a1:da:e0:27:cb:d8:4d:6f:ae:d7:fe:b1:ad:e1:
c8:6e:7b:ed:1e:9b:cf:61:e4:95:22:c3:43:f9:1b:
66:d4:f1:84:d5:c6:6e:88:a5:1e:db:97:0c:73:50:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:27:9D:99:8D:58:D0:DC:29:96:AD:AB:F6:AB:58:81:51:7B:85
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DyMnnZmNWNDcKZatq_arWIFRe4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/23
82.199.222.0/23
91.213.191.0/24
91.217.185.0/24
185.95.206.0/23
212.95.142.0/24
212.95.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ad:65:bf:e7:5b:93:29:40:22:39:ca:f6:f9:64:c2:a6:0e:
59:ac:4c:1a:98:96:7f:19:bf:e2:f1:57:d2:98:19:02:96:b2:
6c:86:3f:ea:f1:e4:f1:79:09:ea:d7:e4:34:d1:08:3f:98:7b:
d2:cc:5c:08:7d:23:43:64:d5:91:8c:40:66:02:58:0b:f0:af:
dd:f6:3c:df:e5:d4:7d:2e:b5:1f:1b:74:23:7e:75:a6:08:b9:
b2:cc:51:4e:81:a8:41:88:b6:72:49:81:63:5b:79:4c:40:99:
9c:72:1c:46:ca:2d:c1:82:91:1c:32:15:6c:f6:1f:a5:ba:e1:
ed:d1:30:0d:f0:e7:07:d1:bd:8f:8b:64:e6:ee:b9:44:5a:b5:
46:b0:2c:b2:36:67:73:24:2f:a6:c0:a3:9c:4f:db:80:fe:a8:
78:30:d6:2c:d9:05:ff:0f:2d:67:bc:30:ba:f3:4b:46:a1:7a:
b2:b6:06:38:c2:0e:57:48:6b:d2:75:ab:98:4e:df:66:43:fd:
58:24:15:d7:1d:5c:bb:d4:36:81:b7:5b:44:52:13:45:49:f9:
c7:eb:82:d3:5d:e2:a8:32:fc:d0:cf:a7:e7:44:d2:dd:7d:7b:
4b:b1:0d:b1:ae:5d:1b:0f:c0:f7:18:50:2c:cd:72:ac:65:f3:
a0:48:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:53 2024 by rpki-client on console.sobornost.net