Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HJmdNchXmxTyqRMqlJhAd4q8BkU.roa
File: HJmdNchXmxTyqRMqlJhAd4q8BkU.roa (raw, json)
Hash identifier: W5PxKV5ipQba0+t9e153NdwSx81uz9N7af5KNlynCq0=
Subject key identifier: 1C:99:9D:35:C8:57:9B:14:F2:A9:13:2A:94:98:40:77:8A:BC:06:45
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0193DA3CE4D999B3E0F9C5E7BC8160E98153
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HJmdNchXmxTyqRMqlJhAd4q8BkU.roa
Signing time: Wed 18 Dec 2024 14:47:23 +0000
ROA not before: Wed 18 Dec 2024 14:47:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:3c:e4:d9:99:b3:e0:f9:c5:e7:bc:81:60:e9:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Dec 18 14:47:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c999d35c8579b14f2a9132a949840778abc0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:bf:87:35:33:da:28:df:00:08:a0:f9:24:
42:1b:5f:c4:02:19:b6:fd:97:02:d2:1f:7d:df:75:
f8:ae:40:c9:a8:42:7f:c0:b8:bc:33:f5:ed:bb:0b:
de:71:41:67:ae:09:bd:01:dd:7b:33:e9:9d:64:bd:
e4:f4:d4:a1:6b:70:03:fa:2e:3d:76:bf:ca:a8:e1:
a5:7f:71:79:d5:bf:9d:e2:03:10:e4:c0:88:81:3e:
2d:48:b4:ee:f1:a8:eb:d8:eb:bb:f4:78:56:9e:2a:
22:a8:0b:ee:89:43:f8:a7:b2:6f:2a:92:1c:d5:17:
67:c3:57:b7:0d:38:f7:03:c4:de:a9:71:6b:d1:d8:
86:9d:16:a8:52:01:ee:29:21:c4:d4:b5:10:ca:00:
c3:92:dd:a0:48:c8:e2:00:0f:2d:73:ed:01:49:95:
9f:7e:a9:0e:b1:2f:e1:90:49:cb:7b:a9:63:8a:75:
1f:75:88:27:9c:70:af:a8:82:2c:d8:6b:22:0c:e1:
e2:25:e9:11:88:b8:4e:99:63:57:57:94:57:e9:81:
90:d6:1b:18:ae:8c:c9:cf:a2:fa:92:b9:d2:fb:39:
78:35:99:15:db:a9:08:45:42:0b:3a:c3:60:61:b4:
10:18:97:87:7a:e6:af:f9:29:90:4e:c7:ad:f2:f6:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:9D:35:C8:57:9B:14:F2:A9:13:2A:94:98:40:77:8A:BC:06:45
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HJmdNchXmxTyqRMqlJhAd4q8BkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
37:e3:8a:4b:2d:bf:9a:9d:ff:b6:74:31:b4:8d:a3:db:db:0d:
1a:ab:17:ca:a4:a8:60:dd:29:cd:d4:7d:f0:79:17:07:9d:01:
0f:80:ef:f3:e3:1a:c4:76:c6:a5:d3:14:7f:05:78:35:11:c0:
64:95:44:24:a7:ae:ea:52:bc:67:3f:90:18:e0:d2:9d:66:7a:
6b:f7:24:6b:03:d3:f9:68:68:aa:ee:cf:fa:b6:77:73:af:d2:
7f:fa:62:36:29:af:49:5a:df:66:58:2c:6c:f3:41:09:bc:39:
60:d9:95:7e:16:86:19:6f:f9:bf:30:97:fe:b8:c8:e0:56:ff:
3a:7c:d2:0d:26:46:7b:a1:66:69:5c:2e:36:b9:f4:35:31:28:
44:87:e8:8d:b5:14:b5:ec:f2:a6:c7:d2:1e:4b:b7:97:75:ec:
5a:f6:5b:b1:71:07:e5:8d:0a:87:13:2c:33:95:a6:4a:41:cd:
c0:b3:2a:79:39:05:8d:ac:24:93:6b:39:c6:cf:b8:3c:b4:cb:
76:df:a1:a5:af:f4:82:e1:29:2d:74:de:20:1f:05:05:1b:66:
a1:0b:22:d2:d2:ae:b7:e2:0a:2d:25:c8:6b:3c:02:4c:84:21:
40:4b:d9:4c:a9:24:59:5e:18:aa:15:9d:35:ce:b5:fd:a7:a1:
3b:e3:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net