Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/ewYHo4UghzzsPFKYmhcLIrgVus0.roa
File: ewYHo4UghzzsPFKYmhcLIrgVus0.roa (raw, json)
Hash identifier: lXeBVzHi2g/Aitb6KeRFZ6S4C2yWH4qcNlcQIsyB4ls=
Subject key identifier: 7B:06:07:A3:85:20:87:3C:EC:3C:52:98:9A:17:0B:22:B8:15:BA:CD
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 018CC9BC3BDB85A1C1F73D6A51BBBE30CAFA
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/ewYHo4UghzzsPFKYmhcLIrgVus0.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49627
IP address blocks: 193.169.138.0/23 maxlen: 24
185.68.160.0/22 maxlen: 24
91.232.130.0/24 maxlen: 24
2a03:2c60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3b:db:85:a1:c1:f7:3d:6a:51:bb:be:30:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0607a38520873cec3c52989a170b22b815bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:5d:ad:18:a9:c8:4b:f0:19:00:69:5c:99:
37:f3:16:be:d0:b6:ce:01:ad:5b:e0:44:a3:45:b9:
6a:13:5d:ef:18:0e:99:93:be:0a:04:62:e3:9a:41:
de:9d:23:8e:92:3c:f5:5b:40:8d:7a:70:e1:d4:dc:
b4:24:46:21:f7:ec:21:96:19:ab:45:ad:3a:e3:50:
d8:2c:ec:44:25:34:f8:c2:32:49:05:0f:ee:c5:af:
2f:31:b6:b3:64:d8:73:f6:9c:2b:41:02:6f:33:14:
85:c9:72:7d:c0:07:d4:9b:05:d7:a0:cc:81:ad:0f:
db:e7:4c:11:e6:ce:f5:8f:c9:26:08:3e:36:d1:13:
5f:0e:d1:b5:5a:13:40:f6:4f:3b:33:63:ae:05:82:
2d:d9:77:ca:32:f3:02:9b:26:cb:ff:90:a1:59:d0:
cf:93:6e:bc:50:2a:3b:d3:f1:b2:88:d4:14:21:7b:
65:80:f4:09:1c:74:98:63:f7:5a:89:3e:96:cd:c9:
c4:67:32:56:dd:e4:a5:38:0f:fb:f4:85:07:61:92:
16:29:15:b6:e2:7a:c5:8e:32:d7:de:d4:5a:37:77:
c5:8e:6d:e9:67:30:ec:1d:a3:2e:f6:b2:67:a9:fd:
08:e0:aa:cd:d9:c4:f1:85:b4:6f:26:9d:cc:f5:ab:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:07:A3:85:20:87:3C:EC:3C:52:98:9A:17:0B:22:B8:15:BA:CD
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/ewYHo4UghzzsPFKYmhcLIrgVus0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.130.0/24
185.68.160.0/22
193.169.138.0/23
IPv6:
2a03:2c60::/32
Signature Algorithm: sha256WithRSAEncryption
a6:c9:db:8a:2f:0f:e4:e7:b7:e5:46:ca:68:54:79:47:4c:e7:
68:55:2a:8e:8c:2e:09:e8:16:33:85:df:59:c2:e9:21:c1:df:
ae:19:e9:c3:54:8c:74:c7:3f:c0:19:cf:14:94:b9:22:03:2c:
a2:5b:20:bd:5c:5a:18:e7:de:fa:03:72:ee:9c:a4:68:17:72:
bb:80:67:d1:b5:e8:83:51:9a:04:5a:aa:e5:b1:71:d6:c1:f0:
e5:71:2c:2d:4c:cd:39:dc:8a:05:bb:73:a3:98:c2:3e:a8:50:
21:16:2a:7f:a3:9e:ad:0e:1b:ea:ed:b0:e5:57:40:9c:bc:95:
9a:7f:88:85:a5:5d:a7:18:82:43:62:a4:e5:9e:00:92:38:72:
d3:b3:e5:07:cc:f6:0c:2c:a2:97:4b:4c:2b:11:47:b3:18:54:
9f:ec:fd:47:5e:5b:8b:ca:38:8e:26:e0:5f:2c:d2:36:43:eb:
b4:40:97:0b:1a:ff:b5:a8:cb:f6:e1:bb:c0:67:b7:b4:63:43:
ff:84:e6:05:7d:22:cf:17:82:e8:c2:ee:3b:55:43:44:bb:e6:
81:5e:dd:c5:af:45:5e:af:0a:9d:a9:0a:8c:19:8c:13:3d:4d:
dc:00:76:95:4f:22:05:af:a1:4e:2f:1d:8f:57:10:5e:fe:e9:
8b:a9:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net