Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/tbOJmK5t6Dr5-rNfBcipIcA14ZY.roa
File: tbOJmK5t6Dr5-rNfBcipIcA14ZY.roa (raw, json)
Hash identifier: goULN18JPCAEfMSqmtC/tLlch6YNFA7VYT4nePbbxUI=
Subject key identifier: B5:B3:89:98:AE:6D:E8:3A:F9:FA:B3:5F:05:C8:A9:21:C0:35:E1:96
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 0192577C7BAF4CD7DA60A9CCAD9E91E17451
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/tbOJmK5t6Dr5-rNfBcipIcA14ZY.roa
Signing time: Fri 04 Oct 2024 12:23:48 +0000
ROA not before: Fri 04 Oct 2024 12:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47544
IP address blocks: 46.248.160.0/19 maxlen: 19
86.111.240.0/21 maxlen: 21
185.110.48.0/24 maxlen: 24
185.110.49.0/24 maxlen: 24
185.110.50.0/24 maxlen: 24
185.110.51.0/24 maxlen: 24
193.106.104.0/22 maxlen: 22
2a01:7400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:7c:7b:af:4c:d7:da:60:a9:cc:ad:9e:91:e1:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Oct 4 12:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5b38998ae6de83af9fab35f05c8a921c035e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:49:53:06:ad:b0:bf:1f:ba:23:22:1e:b5:
69:4a:93:f4:35:93:ab:dd:88:d0:97:e6:f4:39:2d:
01:eb:e0:6c:af:04:b6:84:6f:57:6f:04:16:59:b7:
f8:fb:85:14:52:fd:f5:e3:34:4f:37:a1:e5:dd:e4:
cf:31:c6:91:a4:ad:a0:63:6a:13:38:68:0b:e4:fc:
e8:5b:1e:d1:3f:fe:8b:6d:ef:05:d1:db:bf:dc:86:
fe:9d:40:5b:1c:a4:c7:e1:a3:6c:ef:2a:ef:9c:a5:
da:d5:f2:6f:d9:6b:aa:25:1d:0a:19:0e:18:81:4f:
7e:5f:7d:ca:6e:b6:72:6d:8d:eb:6c:f5:45:01:24:
48:49:07:f5:e4:3d:6b:3b:76:ef:b4:0d:55:48:1d:
a5:33:d7:73:49:ac:1c:f6:88:5f:07:e9:6a:01:2f:
d8:ca:95:28:16:86:23:6c:4d:f4:d9:b8:b9:f5:0b:
22:be:34:ee:1f:c9:89:24:f8:da:1e:fe:92:11:59:
ab:0e:57:cd:27:d1:cd:97:71:6c:aa:c1:2f:f3:7e:
0b:61:30:88:07:6b:cb:84:c9:63:3e:09:fc:a9:33:
61:9f:83:bc:17:31:d3:a7:e7:e4:92:e7:44:07:f9:
c4:99:97:7f:75:7d:e9:2b:43:a8:1b:b6:5d:c3:0f:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:89:98:AE:6D:E8:3A:F9:FA:B3:5F:05:C8:A9:21:C0:35:E1:96
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/tbOJmK5t6Dr5-rNfBcipIcA14ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.160.0/19
86.111.240.0/21
185.110.48.0/22
193.106.104.0/22
IPv6:
2a01:7400::/32
Signature Algorithm: sha256WithRSAEncryption
10:86:75:29:23:b8:41:cc:83:e2:2b:02:4b:28:ab:f7:05:5c:
aa:f5:8c:45:4e:1a:fa:38:1a:5d:d3:a7:83:cc:3c:64:37:9b:
88:be:bf:68:9d:cc:aa:38:05:3f:82:de:78:bc:69:dd:1d:12:
4a:83:05:03:83:c7:27:12:dc:7f:cc:35:c4:63:8f:bc:ef:68:
06:99:5b:3d:76:9a:d9:2f:25:2f:5c:e5:56:52:31:a8:03:42:
26:2d:29:9f:c1:12:9f:e6:54:e2:04:5a:7d:b6:09:04:c0:3e:
be:ec:ad:3d:6d:5b:2b:5f:c0:be:00:23:b3:7d:9d:ad:b0:1a:
6c:b2:31:4c:34:0d:3b:cd:d1:b5:38:47:98:93:6b:5e:90:a4:
72:5a:8f:d8:cc:6d:9a:49:31:17:b4:10:28:0f:09:d6:c3:f4:
68:95:17:93:76:bf:c6:db:c0:6c:c6:17:a7:22:80:e0:87:f9:
c3:48:a9:0c:1f:01:b1:7e:7e:d6:b2:01:cf:37:c6:63:85:c8:
c3:ce:aa:01:ef:0c:af:04:aa:1c:ca:c7:78:ff:ac:17:66:5f:
a5:04:29:11:c4:40:43:3b:6d:38:26:c9:08:bc:72:8e:47:fa:
ef:ba:58:f4:29:96:bc:b8:37:d9:bc:c0:e5:24:51:13:e9:8e:
62:20:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:17:09 2024 by rpki-client on console.sobornost.net