Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/SkfAMtQBtm5KOMxSZhabeeW3ad4.roa
File: SkfAMtQBtm5KOMxSZhabeeW3ad4.roa (raw, json)
Hash identifier: zU4zcoGQr6kniL2TZ4f+bpAsLyoUbDlwZhFfGxAHwdY=
Subject key identifier: 4A:47:C0:32:D4:01:B6:6E:4A:38:CC:52:66:16:9B:79:E5:B7:69:DE
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 01938CB3C208146EF12FC2490D3547D1AC9C
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/SkfAMtQBtm5KOMxSZhabeeW3ad4.roa
Signing time: Tue 03 Dec 2024 13:26:50 +0000
ROA not before: Tue 03 Dec 2024 13:26:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206405
IP address blocks: 37.122.192.0/21 maxlen: 24
37.122.196.0/22 maxlen: 22
37.122.196.0/23 maxlen: 24
37.122.198.0/23 maxlen: 23
185.156.188.0/22 maxlen: 22
185.156.188.0/23 maxlen: 23
185.156.189.0/24 maxlen: 24
185.156.190.0/23 maxlen: 23
2a00:9e40::/34 maxlen: 34
2a00:9e40:1000::/36 maxlen: 36
2a00:9e40:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:b3:c2:08:14:6e:f1:2f:c2:49:0d:35:47:d1:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Dec 3 13:26:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a47c032d401b66e4a38cc5266169b79e5b769de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:88:b2:37:d8:b3:85:94:72:76:c6:14:e7:
fc:4f:89:95:db:c5:ac:98:d8:f1:27:d6:8e:fd:50:
40:36:fd:95:37:d1:3e:28:af:2d:70:db:de:c4:24:
9f:d0:81:ba:bd:0c:f8:1f:f4:15:9d:c6:da:cc:5a:
ab:ef:f6:e7:25:8a:56:45:3a:a5:c0:7f:7d:66:d5:
75:c5:44:54:02:69:31:01:8d:54:02:7c:0d:b5:60:
95:d2:9b:8e:a0:3d:ae:7d:b2:3b:da:85:43:28:82:
f4:d8:c5:be:a3:d8:bf:bb:7f:a1:b2:6d:11:d6:3d:
f8:98:54:c0:3c:22:c3:90:55:45:7f:ea:86:b4:52:
67:f6:57:c7:aa:5a:b8:73:0c:8f:a5:fd:53:63:b4:
25:de:b2:ca:6f:38:4e:61:a0:60:2d:3c:ce:ef:e4:
3e:7c:67:ee:9e:7f:04:f9:18:d2:6e:d5:a3:0a:21:
b5:7f:cd:9c:9e:47:bc:43:70:07:fc:03:0d:4a:45:
76:8a:72:ab:ca:c1:72:b2:60:b5:ad:d6:b8:06:8e:
ca:18:7c:3f:63:ac:42:84:e0:fd:1a:e6:e0:da:66:
ba:cc:0f:84:4f:41:8d:57:87:8e:47:61:c1:37:97:
93:c5:29:d8:db:c2:ad:17:e1:80:72:30:ba:c7:fd:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:C0:32:D4:01:B6:6E:4A:38:CC:52:66:16:9B:79:E5:B7:69:DE
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/SkfAMtQBtm5KOMxSZhabeeW3ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
IPv6:
2a00:9e40::/34
2a00:9e40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
63:eb:ed:a0:3f:ad:39:81:9b:12:e8:c8:69:1e:c9:49:67:f8:
1f:41:e3:c4:92:c9:c0:43:a9:b8:4b:8d:18:c2:61:c3:6c:7f:
de:5f:f9:b5:7e:4b:ef:d8:84:da:02:1e:ee:4c:93:cf:58:14:
89:bd:a7:35:56:4f:0f:8f:16:cc:49:6c:ec:54:19:ab:9f:6b:
e9:6d:49:8b:96:cf:0c:e2:ca:7c:0e:8b:f7:68:c2:4e:96:c4:
60:42:85:25:c8:16:4b:94:51:94:71:e2:01:48:44:b8:f1:dc:
88:84:6d:3e:a3:f6:6d:5b:33:bf:10:04:09:f1:94:97:f2:52:
43:36:de:08:44:34:39:98:f2:00:d0:7d:2b:1b:53:41:b2:c6:
56:54:00:23:65:83:0a:ec:27:b4:2d:b4:f9:58:03:df:26:54:
84:82:a0:d9:ca:66:af:e0:4f:d5:f7:4f:df:4a:4d:7b:02:8b:
d6:f4:ec:73:dc:3e:c2:d6:00:1b:cd:00:c2:68:1c:6f:6f:5e:
2c:4f:8a:ea:47:8f:73:46:77:71:c3:5b:f1:8c:26:9c:0e:d0:
03:c9:3b:fc:de:24:86:89:ff:67:2b:8c:40:ba:c7:04:24:39:
2a:5d:ed:9e:7a:14:ed:90:79:39:fe:5d:f0:ce:87:af:5d:2b:
28:db:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net