Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hDSNQFJZ1OhyMjrg5DvqLCBTyq8.roa
File: hDSNQFJZ1OhyMjrg5DvqLCBTyq8.roa (raw, json)
Hash identifier: l7iNX35MgyzfAjjWcxwK0UbhScVYG1YV3TDUKQ+lwJ0=
Subject key identifier: 84:34:8D:40:52:59:D4:E8:72:32:3A:E0:E4:3B:EA:2C:20:53:CA:AF
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01937728E86DDD2C80FC1EA1A19401CEA987
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hDSNQFJZ1OhyMjrg5DvqLCBTyq8.roa
Signing time: Fri 29 Nov 2024 09:03:09 +0000
ROA not before: Fri 29 Nov 2024 09:03:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 92.246.82.0/24 maxlen: 24
92.246.83.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.223.178.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.212.0/24 maxlen: 24
185.237.215.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
2a0d:c240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:28:e8:6d:dd:2c:80:fc:1e:a1:a1:94:01:ce:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Nov 29 09:03:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84348d405259d4e872323ae0e43bea2c2053caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:52:3b:32:3b:36:0c:78:fa:f6:2e:1f:f0:
75:8f:5e:dc:5a:71:85:82:60:8c:16:0b:55:74:f4:
cd:82:04:a5:e5:01:d5:f9:d3:b2:8c:74:b8:11:28:
12:69:cf:4f:42:7f:84:af:a7:1f:87:60:80:ee:4d:
36:4f:22:34:66:88:7e:f3:62:60:18:63:36:2d:07:
16:af:bf:83:89:66:36:55:4d:95:3b:68:b7:fd:2c:
c7:ee:77:41:7d:ea:9c:ed:4b:91:e2:1d:a7:ef:18:
eb:b0:7d:da:04:5a:f4:b0:2f:4a:ee:21:3f:5e:9e:
e7:76:2b:a7:26:07:61:77:a3:3d:ce:99:d8:4f:e7:
16:ea:bb:8f:b3:30:90:24:42:a9:c4:da:19:33:ee:
8b:df:43:88:0f:27:b6:de:bb:73:9d:04:53:ef:21:
00:86:39:69:7f:57:75:e0:09:cc:ab:35:af:93:a0:
a6:2c:67:f7:9d:eb:ef:07:b4:37:f5:41:b4:bd:f4:
d2:87:0e:0c:5e:b3:1f:88:eb:3a:55:ab:89:77:84:
08:59:d8:36:da:13:b5:65:09:cf:db:2d:69:7a:80:
bd:d4:31:69:84:fb:d2:a1:11:af:90:4c:f4:ac:16:
ba:1d:88:8a:ca:ad:63:32:56:b4:fc:ba:69:93:80:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:8D:40:52:59:D4:E8:72:32:3A:E0:E4:3B:EA:2C:20:53:CA:AF
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hDSNQFJZ1OhyMjrg5DvqLCBTyq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/23
103.226.192.0/24
103.229.170.0/24
185.145.68.0/22
185.223.178.0/24
185.237.212.0/22
IPv6:
2a07:4640::/29
2a0d:c240::/29
Signature Algorithm: sha256WithRSAEncryption
b5:bd:a2:5f:87:08:1c:ec:a6:a0:b7:ff:d5:8f:d8:c7:50:96:
14:00:51:a1:3b:57:0d:6a:a5:e2:24:0d:0f:ce:46:0a:b8:e3:
21:cd:d9:23:d7:f5:a3:5c:6c:8f:90:bc:d7:20:b1:3c:41:3c:
44:5e:c2:64:0c:a1:a0:fd:f7:b3:7d:4a:df:b3:68:db:00:d9:
3b:7e:b5:c7:8d:37:8e:11:2d:58:04:4c:a3:81:7d:86:9c:0a:
11:88:e7:1f:4b:3e:85:74:c0:32:20:4d:19:e0:26:bc:12:55:
a8:48:6c:ec:dd:b3:21:fa:ef:81:f3:ca:79:7a:4c:27:78:7e:
8a:4e:c3:e5:0f:35:62:47:a4:c4:4c:2d:3e:5f:6e:eb:86:22:
68:83:1e:39:8e:e3:b6:70:4a:3a:74:93:60:9c:68:ae:76:a4:
98:ae:13:8e:a5:1b:28:a3:0c:27:d3:96:dc:5d:0a:72:27:19:
e9:1f:f2:f7:9f:c1:bc:e3:63:56:b7:f2:7f:01:3d:62:d8:5a:
69:d7:01:0a:06:49:a6:c5:ce:c6:37:73:59:f9:7e:f0:b3:f5:
6f:4e:47:06:f7:cf:09:f1:59:e1:35:c4:16:84:c0:13:c9:93:
ee:cd:87:48:17:cb:b2:ea:ca:ad:ef:1c:64:72:ac:df:c1:40:
0a:74:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:46 2024 by rpki-client on console.sobornost.net