Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SKIG6PmZ_rgq2wsuaoPCJNSerNg.roa
File: SKIG6PmZ_rgq2wsuaoPCJNSerNg.roa (raw, json)
Hash identifier: 4rgmEFqM5Z4sw805XrEzCSRbOasm731HGocVZkPcqIc=
Subject key identifier: 48:A2:06:E8:F9:99:FE:B8:2A:DB:0B:2E:6A:83:C2:24:D4:9E:AC:D8
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 01937BC8AFB872E7EB98BA6C73AC2AF4B3DC
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SKIG6PmZ_rgq2wsuaoPCJNSerNg.roa
Signing time: Sat 30 Nov 2024 06:36:10 +0000
ROA not before: Sat 30 Nov 2024 06:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 185.83.180.0/24 maxlen: 24
185.170.236.0/22 maxlen: 24
185.170.236.0/24 maxlen: 24
185.170.237.0/24 maxlen: 24
185.170.238.0/24 maxlen: 24
185.170.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7b:c8:af:b8:72:e7:eb:98:ba:6c:73:ac:2a:f4:b3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Nov 30 06:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a206e8f999feb82adb0b2e6a83c224d49eacd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:b7:fe:cd:d1:69:88:4f:01:0b:36:77:46:
ef:f1:d3:4d:a1:5d:1a:a7:a4:f4:fa:73:5e:3c:60:
57:3c:5d:79:bb:a2:ba:06:fd:aa:ab:97:63:85:71:
88:f8:c8:df:df:cb:19:60:71:36:de:b1:1a:42:51:
69:46:82:a2:64:cc:3b:ca:c9:da:08:98:5c:7d:7f:
f2:c9:01:af:59:48:75:b9:0b:4e:8f:17:6b:68:b7:
80:b2:38:a6:1b:f2:63:5c:7c:85:5e:ba:74:1e:f9:
9e:80:7f:ea:c5:de:e4:12:e4:37:b1:43:ca:9f:4e:
9d:7b:da:47:dd:c3:40:4f:e7:a5:0b:11:55:4f:59:
8f:a4:81:c2:7c:e5:e0:5f:62:95:99:5f:dc:6b:7e:
e9:38:47:bf:36:1d:59:54:00:9f:22:03:9e:38:4b:
c2:7f:fe:ef:38:7a:88:b1:61:d5:f2:65:07:1b:0f:
59:15:cc:17:18:2c:93:3a:92:30:4d:70:5b:92:07:
e1:8b:c8:3a:c9:4a:7e:9b:e1:16:af:0d:0f:d8:33:
f8:aa:d8:32:80:47:69:2c:d3:da:69:85:0c:f2:46:
42:1c:85:1f:08:e1:f5:91:b2:d9:0a:4a:6a:55:4c:
0f:0a:9b:d6:13:7c:ca:8e:10:01:29:70:93:1c:ce:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:06:E8:F9:99:FE:B8:2A:DB:0B:2E:6A:83:C2:24:D4:9E:AC:D8
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SKIG6PmZ_rgq2wsuaoPCJNSerNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.180.0/24
185.170.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:42:0c:1b:dc:6f:88:0c:fc:d5:22:d8:b7:de:54:65:39:79:
a0:be:c8:7d:be:b6:60:02:f8:cf:53:2b:00:e0:f5:58:04:d4:
00:3a:49:63:59:3f:30:3a:45:ae:4e:a6:15:a5:a5:16:0e:4e:
a7:14:cf:d2:16:74:12:59:11:62:ad:8a:2a:4d:27:84:f6:b6:
97:0a:e1:22:0a:2a:13:ae:2b:b7:89:e1:33:6c:48:86:5e:1f:
73:9d:71:53:8f:ba:ec:21:ca:56:81:05:ab:f2:5b:bd:22:dd:
ab:eb:86:a2:41:c0:f5:5e:60:8d:da:8b:f1:57:d3:27:c6:9d:
3c:87:2f:c5:fb:ad:50:c7:cc:17:cb:cb:20:17:d7:8d:2d:66:
15:7c:1e:12:e2:99:24:09:8b:95:a4:29:3d:7e:4b:06:0a:8e:
bc:94:ad:26:78:15:78:36:c4:50:15:cb:5d:5c:3c:10:56:c2:
d2:45:36:d7:0c:1e:90:3b:b1:88:14:3b:33:57:f0:29:31:fb:
af:c6:fa:71:dc:0b:df:9d:7d:d0:44:14:0b:56:8e:9a:80:d3:
94:58:15:51:df:15:1d:44:41:78:89:55:ef:c7:79:e5:30:a1:
0b:fb:26:ad:95:7d:45:a6:d4:1a:f1:6f:1a:0f:b7:00:6a:9d:
be:77:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:46 2024 by rpki-client on console.sobornost.net