Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/sdX9O5Sqb3btqISbqjBBoJTIdRA.roa
File: sdX9O5Sqb3btqISbqjBBoJTIdRA.roa (raw, json)
Hash identifier: m8GW9z/oNpEOIbOPgwPrvKeITBiS+HzUWUsjzYaKKJE=
Subject key identifier: B1:D5:FD:3B:94:AA:6F:76:ED:A8:84:9B:AA:30:41:A0:94:C8:75:10
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018E5639624B0B83BD803C28A86A05F0F2CE
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/sdX9O5Sqb3btqISbqjBBoJTIdRA.roa
Signing time: Tue 19 Mar 2024 10:19:45 +0000
ROA not before: Tue 19 Mar 2024 10:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:39:62:4b:0b:83:bd:80:3c:28:a8:6a:05:f0:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Mar 19 10:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d5fd3b94aa6f76eda8849baa3041a094c87510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:16:1e:91:c9:f4:36:ca:ad:dc:cb:44:7d:
1f:d2:bf:0d:f1:f7:37:f2:88:1c:0e:d5:11:41:09:
9f:06:f9:5d:bd:64:c8:32:a7:3d:fc:b3:44:56:18:
08:78:e9:de:78:c8:65:56:8f:4e:ec:49:ef:a1:26:
8c:1c:dc:a2:dd:77:95:4a:c9:17:c0:e0:6b:a4:75:
aa:cf:85:02:5f:aa:8e:4b:59:33:4d:9e:d9:3c:17:
ed:c8:d3:34:53:e0:82:28:38:ac:2b:28:29:e5:56:
b8:19:8f:45:bd:38:5a:0b:1e:8a:33:c7:d6:ad:c5:
e5:1c:32:ca:ca:0f:05:30:c5:30:f4:e7:68:4d:2f:
f6:a5:25:63:37:83:18:c7:ed:0b:b4:83:14:d6:79:
6f:72:b9:63:4c:41:56:6a:12:37:a8:65:fc:1e:7b:
d3:87:af:d3:e1:cf:0a:dd:18:98:59:8c:67:83:de:
aa:8c:b6:93:cd:02:c6:b8:49:fb:28:10:30:c0:2a:
f6:db:8f:36:b9:6f:2c:9d:63:1a:80:f7:ac:f9:b7:
7f:78:e7:bf:f1:36:83:0e:4d:1b:b1:08:d1:f2:fa:
5c:c3:0e:ca:d4:ea:bb:66:b0:ad:39:76:16:22:cf:
75:51:d7:89:8a:e9:6c:5f:92:e5:d2:b1:19:19:bc:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:FD:3B:94:AA:6F:76:ED:A8:84:9B:AA:30:41:A0:94:C8:75:10
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/sdX9O5Sqb3btqISbqjBBoJTIdRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:41:cc:80:30:46:9c:af:e2:0e:2b:26:d6:ca:03:16:92:cf:
01:b6:5c:58:1a:65:dc:27:8b:12:cd:71:d2:fb:dd:40:03:81:
1b:f0:f3:7e:96:2c:20:50:4a:45:2a:63:43:b8:00:83:19:79:
3a:16:3b:cd:70:ee:e4:15:1b:3f:39:5c:d6:c5:76:ec:9f:fd:
e4:4c:03:a1:7b:fc:b5:ee:33:ac:ac:e6:75:4b:08:89:18:d6:
3c:fc:90:2e:d5:73:97:da:6f:ce:3c:7c:91:94:15:05:4c:30:
fd:79:98:53:3a:94:c1:f7:00:24:dd:8e:7f:54:f2:84:31:e6:
8d:54:2a:62:1e:02:09:bf:cc:dc:a6:cb:75:cd:46:94:44:7b:
d9:f6:41:de:0e:55:49:04:f9:d7:a7:2c:1a:4c:5d:34:94:43:
30:e2:4c:15:8b:63:56:d0:b0:24:0f:16:c9:d3:c7:77:0c:8a:
d8:f2:4c:1c:ac:92:92:2b:b3:19:70:a4:76:b5:e3:99:c3:aa:
f4:aa:47:63:c1:4b:8d:1c:cb:b2:e1:45:51:d0:60:73:90:2f:
ae:61:28:c7:d9:9a:c5:06:25:d1:b4:b1:71:54:6e:e7:e5:17:
5c:32:ba:c0:06:86:7b:3c:be:09:d7:d5:45:0e:73:bd:bf:75:
5b:51:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:47 2024 by rpki-client on console.sobornost.net