Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/K0jEaH9892Qz3H5kN6bPpmTQKo4.roa
File: K0jEaH9892Qz3H5kN6bPpmTQKo4.roa (raw, json)
Hash identifier: RTtn0G/MU0zTg58/XtP4J4nJ5iFptgjJjOlCVJ9yJPU=
Subject key identifier: 2B:48:C4:68:7F:7C:F7:64:33:DC:7E:64:37:A6:CF:A6:64:D0:2A:8E
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01939B3E9489B3E8B9C3AC6253607F8F1739
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/K0jEaH9892Qz3H5kN6bPpmTQKo4.roa
Signing time: Fri 06 Dec 2024 09:13:09 +0000
ROA not before: Fri 06 Dec 2024 09:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200712
IP address blocks: 80.254.231.0/24 maxlen: 24
185.92.168.0/24 maxlen: 24
185.92.169.0/24 maxlen: 24
185.92.170.0/24 maxlen: 24
2a13:5240::/32 maxlen: 32
2a13:5243::/32 maxlen: 48
2a13:5245::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:3e:94:89:b3:e8:b9:c3:ac:62:53:60:7f:8f:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Dec 6 09:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b48c4687f7cf76433dc7e6437a6cfa664d02a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:3c:0a:10:23:97:92:c7:40:20:0a:6d:41:
df:0c:8b:63:86:09:fa:05:df:68:18:47:8a:56:fc:
57:0f:3a:1c:74:e8:44:83:f5:71:fb:04:33:35:a1:
4d:1f:a5:82:7a:87:22:ac:b7:4d:84:51:38:c7:c5:
b4:0d:48:f3:cb:e4:9c:b8:e0:0f:48:e4:1e:29:6c:
97:26:28:94:33:97:a2:16:28:05:34:d9:cc:46:d7:
50:4a:4e:81:f9:64:4c:f7:b2:02:f1:d7:f8:a0:4f:
7a:14:b0:b9:0f:1b:a0:52:95:a4:b1:1a:46:17:01:
3e:6a:b2:2a:ed:ba:d6:d0:28:76:03:e0:58:30:1e:
a4:86:ce:16:be:d8:0f:3a:28:fe:82:d3:52:a8:71:
07:1d:28:33:ed:e7:4d:b9:f1:4d:28:9d:0b:12:71:
d8:99:c2:fd:39:1d:40:44:47:4e:d6:d6:93:9f:88:
f0:c0:a1:09:7c:c2:fd:77:55:d0:2c:8f:a9:69:5f:
ad:36:f1:56:7c:60:34:2a:e2:d4:61:80:d4:eb:46:
5a:14:2e:f4:97:2e:be:86:93:89:0d:cf:3a:89:1f:
e5:af:dc:eb:2d:09:ed:f3:22:a5:92:8b:2a:7b:b8:
3f:ba:6c:b2:cc:48:ce:2e:75:87:cd:1a:91:c7:c2:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:C4:68:7F:7C:F7:64:33:DC:7E:64:37:A6:CF:A6:64:D0:2A:8E
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/K0jEaH9892Qz3H5kN6bPpmTQKo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.231.0/24
185.92.168.0-185.92.170.255
IPv6:
2a13:5240::/32
2a13:5243::/32
2a13:5245::/32
Signature Algorithm: sha256WithRSAEncryption
cd:f3:73:cc:bd:21:72:a7:86:e2:61:85:22:88:7d:bb:ae:dc:
bd:62:1e:d7:ca:95:c0:15:10:7e:c5:a7:97:02:c8:93:42:b8:
b4:9b:04:58:cb:56:57:de:34:44:ef:a4:c7:c7:7d:f3:90:be:
b0:48:aa:00:c7:83:4b:f1:26:3d:44:0c:bb:38:a7:24:53:17:
f0:9d:a9:30:51:14:62:37:f3:aa:ec:12:7b:b1:0c:8c:64:7b:
17:32:bf:a4:41:6e:94:c4:b0:54:ab:70:91:3c:a1:72:87:76:
c6:6b:b7:a3:d0:9a:9e:44:1e:6b:9c:d7:3c:52:29:48:48:50:
37:bc:fe:79:d9:53:21:56:7c:a8:f7:4c:a2:4e:ef:2b:8b:e1:
b9:28:14:d0:d9:39:da:d8:07:46:ab:0b:d5:4d:47:9d:ba:73:
36:7c:2f:07:7e:3a:a0:6d:7e:fb:fb:1f:c6:0a:97:a0:ae:32:
c6:a4:2e:4e:f3:d7:3a:36:4d:0a:6d:9b:fc:02:92:ba:73:ac:
eb:6d:84:00:33:f5:3a:8d:4d:83:cd:16:b9:dc:4e:67:3c:ab:
b5:a6:ce:a8:57:ff:57:0f:55:ea:31:22:03:d4:ff:16:3d:c6:
b3:b6:97:4a:bd:5e:1e:d5:e7:2b:a0:93:01:c2:4d:80:05:da:
74:7a:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:47 2024 by rpki-client on console.sobornost.net