Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/M19SojcMy5_qYR5JYSav6DkngWs.roa
File: M19SojcMy5_qYR5JYSav6DkngWs.roa (raw, json)
Hash identifier: 2GLISSigtax3kHIwqJAy/2uBwKFEFie5IPYMlK+AGpY=
Subject key identifier: 33:5F:52:A2:37:0C:CB:9F:EA:61:1E:49:61:26:AF:E8:39:27:81:6B
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01921112AA117F01C1266A06D1379B04233A
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/M19SojcMy5_qYR5JYSav6DkngWs.roa
Signing time: Fri 20 Sep 2024 20:14:48 +0000
ROA not before: Fri 20 Sep 2024 20:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.228.0/24 maxlen: 24
195.69.229.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
195.69.231.0/24 maxlen: 24
2a09:2880::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2883::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:11:12:aa:11:7f:01:c1:26:6a:06:d1:37:9b:04:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Sep 20 20:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=335f52a2370ccb9fea611e496126afe83927816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:f2:36:24:b7:c4:b7:7e:7d:8a:b8:54:85:
ce:2e:06:0a:fe:c9:cc:21:7e:56:b7:a1:9a:37:14:
79:c6:28:2a:67:d7:2d:51:09:62:d3:10:cb:b5:c6:
b4:a6:03:6a:52:ea:cd:f4:de:7e:c0:2e:05:2a:11:
0b:fd:15:ad:e1:5f:21:65:be:d0:38:7f:a9:88:cc:
3d:14:4a:4a:59:6a:6a:ed:94:6d:0b:a2:8f:e4:26:
41:67:da:2c:00:e4:df:15:29:a3:15:92:57:fe:b2:
b4:6f:4e:54:91:ef:36:7d:03:96:ae:17:08:f8:a1:
9a:f6:bd:58:99:9e:94:29:c7:50:b0:af:3f:80:81:
a0:c5:b5:66:31:8f:c4:45:10:43:6c:05:4a:cc:d7:
3f:16:4a:de:ba:85:d1:d3:6d:27:6a:81:b0:f5:e4:
e0:73:03:5a:a0:dd:ad:9c:43:63:29:17:43:b3:ec:
6b:82:2b:3a:80:6f:01:fe:90:64:b8:b6:bd:59:32:
af:de:4f:ef:48:1c:a5:38:67:32:1e:64:47:b8:98:
ca:89:56:e2:10:86:dd:aa:a0:8d:f5:3e:61:6c:56:
55:a3:05:e2:39:79:e0:78:1e:92:3e:9e:fa:44:8a:
08:d9:1b:3b:f9:39:f8:84:b3:cb:66:6b:54:60:50:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:52:A2:37:0C:CB:9F:EA:61:1E:49:61:26:AF:E8:39:27:81:6B
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/M19SojcMy5_qYR5JYSav6DkngWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.228.0/22
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
60:2e:0d:a2:90:5b:c6:0b:d3:ed:e6:49:f7:51:08:ec:32:14:
5f:5e:90:54:81:9b:6b:5c:dc:7b:5d:79:f7:eb:62:6f:09:92:
01:b3:44:a3:d5:7a:37:90:11:63:d2:04:62:5e:28:31:05:b6:
b4:dd:93:10:3c:6b:8b:32:8f:5c:59:d3:7d:ac:89:58:af:af:
03:a2:df:34:9a:af:fa:00:47:13:47:ed:14:6e:c4:f4:2d:23:
55:42:b1:7e:04:43:10:d6:8b:ad:07:df:31:2c:2c:1e:5c:56:
42:33:b7:18:c6:1b:91:da:73:d3:63:84:ef:9f:12:c0:54:6e:
77:47:a2:1c:5e:1f:d4:6a:cb:f9:e3:74:5f:b0:04:05:e6:b9:
96:6c:04:2c:77:d2:55:10:fe:0b:94:64:25:89:1a:5d:f9:85:
95:b2:21:a4:ed:4f:e7:29:8e:d9:7e:45:3c:b9:50:30:a5:99:
1f:e0:ff:c8:db:df:9e:71:77:2e:6c:72:90:84:b7:61:1f:d8:
7d:86:3e:26:4b:18:23:fc:c7:5d:de:e6:3c:08:96:95:01:49:
6e:24:a8:a8:34:1f:97:0e:df:9d:3b:d4:a0:25:9e:a3:a6:ed:
af:5f:01:a0:5c:6a:d2:b8:50:65:0f:dc:ff:ac:f5:27:49:29:
94:86:8f:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:27 2024 by rpki-client on console.sobornost.net