Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/_Fv0RY2kVe2ii9M-qBR4GP79JGc.roa
File: _Fv0RY2kVe2ii9M-qBR4GP79JGc.roa (raw, json)
Hash identifier: J7MPpEoavMnlMGdopddkW1R2ztJb2g3KR75v5GLRsd0=
Subject key identifier: FC:5B:F4:45:8D:A4:55:ED:A2:8B:D3:3E:A8:14:78:18:FE:FD:24:67
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193F4D959A17283BC46EE8C31E654B5843C
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/_Fv0RY2kVe2ii9M-qBR4GP79JGc.roa
Signing time: Mon 23 Dec 2024 18:48:25 +0000
ROA not before: Mon 23 Dec 2024 18:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.133.100.0/24 maxlen: 24
5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:d9:59:a1:72:83:bc:46:ee:8c:31:e6:54:b5:84:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 23 18:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc5bf4458da455eda28bd33ea8147818fefd2467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:8d:7b:77:7c:b0:f2:32:bb:c1:11:9d:df:
f1:c9:9a:dd:67:a9:07:95:73:9b:61:78:fb:cb:ef:
7f:b2:fe:88:2d:2b:f2:92:9b:11:90:64:98:c3:8b:
6e:6b:ca:27:2f:49:7a:58:05:bc:1a:48:ee:11:a9:
2c:3c:d0:88:81:bf:61:d7:f4:2e:56:2d:26:58:9b:
b6:3a:9f:9d:56:e3:e6:06:d5:99:d2:fd:32:72:20:
14:21:40:b5:6c:0a:a8:76:6a:72:59:b3:73:0d:46:
ef:4d:d5:17:25:24:42:20:71:ae:54:de:58:c0:6c:
13:22:63:75:7b:bb:20:10:e3:74:00:ad:dc:14:08:
55:7f:09:51:6a:6f:16:ef:a8:91:80:e1:50:2a:86:
35:9b:af:48:60:31:fd:9b:c1:bf:62:28:17:e4:59:
37:95:87:4f:c8:3c:63:e7:4d:5b:44:05:a5:fc:49:
80:e4:10:ca:9b:bb:9a:36:9b:ea:ae:29:e3:c9:bd:
f1:43:d3:c8:78:78:a4:07:57:f0:8a:95:2a:b8:d7:
a8:b3:ba:1f:fd:15:e6:cf:50:6e:aa:c4:50:6e:7b:
16:dc:b5:47:9b:92:8c:00:ff:ae:2a:bc:67:0d:79:
46:7b:91:c2:75:f0:1a:9a:43:d8:ca:ea:64:f0:45:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:F4:45:8D:A4:55:ED:A2:8B:D3:3E:A8:14:78:18:FE:FD:24:67
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/_Fv0RY2kVe2ii9M-qBR4GP79JGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
176.96.128.0-176.96.130.255
193.17.5.0/24
193.111.76.0/24
193.111.78.0/24
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
50:33:25:40:65:12:9f:dc:b1:ed:6b:ca:28:bc:76:cd:9d:91:
31:57:92:3b:d9:5f:39:69:76:4e:57:1c:16:1d:48:4a:8e:e6:
d7:0c:98:84:2b:93:5d:9e:0f:2e:d7:ae:a3:73:68:d1:32:90:
bb:f1:f9:57:55:34:68:cf:da:e4:d5:66:02:38:34:2d:9e:82:
00:3b:17:e7:bc:5e:1b:2d:52:03:ce:cb:a1:96:9f:41:04:33:
fe:af:5c:bc:aa:5b:c1:fb:b5:72:e1:3e:98:f9:c6:c1:ce:f8:
eb:11:9e:df:db:9e:0d:78:e4:83:d2:4d:a5:b6:56:3f:3a:61:
0e:d7:39:c4:fc:b0:c0:e6:18:b0:ab:61:d5:e3:05:5f:17:c8:
85:53:9e:7d:f3:e4:60:5f:74:0f:cf:b3:f5:01:d8:41:26:9d:
1c:bd:34:07:e4:4e:e4:a0:be:2c:d8:93:4c:d2:fe:87:b2:cf:
c2:b4:61:7a:f1:12:f0:59:5f:0f:ff:86:8c:b0:58:3c:9e:f5:
4f:a5:d2:5e:00:2a:99:b0:8e:aa:03:19:bc:c8:9e:1d:de:0d:
bd:e6:83:7d:c0:71:47:4a:65:9b:62:be:a3:c9:a4:aa:75:94:
0e:fb:b6:3b:63:2b:9e:3e:9f:94:24:88:09:6c:6b:b9:3e:49:
73:dc:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net