Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ojIJmO8viakFMRMiTe2ZOWsP1ew.roa
File: ojIJmO8viakFMRMiTe2ZOWsP1ew.roa (raw, json)
Hash identifier: xMPtkG6aqzei44pg5gl/cPM1+83RQccs3dQgoJ9BVkc=
Subject key identifier: A2:32:09:98:EF:2F:89:A9:05:31:13:22:4D:ED:99:39:6B:0F:D5:EC
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193F4D86EC42F3CF45D7D7465C5DC23D4BE
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ojIJmO8viakFMRMiTe2ZOWsP1ew.roa
Signing time: Mon 23 Dec 2024 18:47:24 +0000
ROA not before: Mon 23 Dec 2024 18:47:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.133.100.0/24 maxlen: 24
5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:d8:6e:c4:2f:3c:f4:5d:7d:74:65:c5:dc:23:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 23 18:47:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2320998ef2f89a9053113224ded99396b0fd5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:36:39:1f:78:b2:32:40:32:13:cd:2f:c5:
2f:13:b5:30:e6:37:4a:0b:a3:e4:41:92:9f:91:2a:
79:4f:fd:1b:dc:3a:f9:f1:05:eb:b5:3a:49:f0:d8:
2d:1e:82:be:67:15:46:c9:fb:c7:cb:89:00:3e:bb:
b2:cc:c2:5b:c6:05:fc:46:4f:3f:16:97:78:9a:67:
73:ec:7a:21:2b:74:b7:48:ee:c8:8b:28:f7:3d:38:
7a:a6:c1:87:3d:36:84:f2:8c:d4:ac:a0:ac:30:ec:
59:58:4e:84:b8:97:b2:a9:a1:6a:1b:75:c4:ff:ce:
8d:13:b4:ba:51:3f:7e:16:a0:7a:75:0e:8a:12:be:
6c:35:2b:df:8e:45:d4:52:33:ce:c3:79:f0:90:77:
11:30:a9:1d:b4:d3:bb:73:d6:9b:ac:a4:f5:06:3a:
28:ac:b4:5d:ed:4c:c8:5e:2d:9b:66:05:cb:40:62:
af:89:0b:d4:03:52:50:f4:85:e3:6a:3d:dd:2e:56:
2b:5c:b9:cb:c2:a7:c7:cd:c1:43:3c:de:92:42:23:
b8:e3:aa:e9:8f:dd:3d:45:79:ed:e6:1e:f0:39:da:
91:63:38:c3:1a:b3:a7:a9:86:5b:94:cb:9f:cb:fe:
9c:8e:e9:7b:f6:3f:31:f5:36:19:5d:05:95:8c:1a:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:09:98:EF:2F:89:A9:05:31:13:22:4D:ED:99:39:6B:0F:D5:EC
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ojIJmO8viakFMRMiTe2ZOWsP1ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
93.190.10.0/23
176.96.128.0-176.96.130.255
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
89:51:49:3a:77:bb:b4:c7:5c:83:ec:03:13:f4:df:67:e9:ae:
06:81:ce:b4:76:05:75:92:5a:48:71:4e:52:58:d2:35:3c:df:
d4:48:c0:fe:ad:36:d7:5e:41:4e:d9:e5:97:76:40:b7:c8:77:
e1:01:c8:2c:49:c9:a7:89:43:0c:6e:c4:d3:a9:45:28:58:5c:
00:22:19:2b:85:c0:a0:d1:94:a4:15:41:30:19:46:a2:24:de:
4d:b6:0e:6a:c2:ad:a7:09:6f:23:00:96:02:93:5d:d2:6a:0c:
dd:77:13:f9:79:26:72:05:2b:9b:bc:f2:3f:a5:9a:70:da:e4:
7f:f9:db:a1:a0:f5:f5:d6:17:d2:67:c2:a6:af:e1:8e:de:ea:
ed:4b:c5:39:87:e9:ce:b4:60:bd:4c:b8:17:81:4e:ab:4a:c1:
42:c3:4e:c4:7c:44:9b:50:a1:1d:9b:e2:af:9e:d0:e1:40:14:
4c:6e:d2:85:f1:76:87:98:5e:b7:7f:97:7a:54:5c:09:82:08:
b6:50:51:5a:09:ae:2f:6f:bf:31:0d:2b:d6:89:b5:3c:4e:3b:
f7:d0:dc:5d:42:d0:81:d3:d2:0a:e0:39:60:d5:db:9e:0f:f0:
16:30:70:07:3f:8f:51:28:df:fc:12:48:fc:cf:bf:1c:f3:2a:
0b:01:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net