Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/puTIDZkecp-039g9H7TkaJAkEgc.roa
File: puTIDZkecp-039g9H7TkaJAkEgc.roa (raw, json)
Hash identifier: iWhboV8y0OKKxOIPKy5WUKH1CE272De50tPgc/+HzlI=
Subject key identifier: A6:E4:C8:0D:99:1E:72:9F:B4:DF:D8:3D:1F:B4:E4:68:90:24:12:07
Certificate issuer: /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Certificate serial: 018CC801532126486B3795681BD090E425E1
Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/puTIDZkecp-039g9H7TkaJAkEgc.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12440
IP address blocks: 82.214.240.0/21 maxlen: 24
128.65.64.0/19 maxlen: 24
82.214.192.0/18 maxlen: 24
82.214.210.0/24 maxlen: 24
82.214.220.0/24 maxlen: 24
82.214.223.0/24 maxlen: 24
82.214.232.0/24 maxlen: 24
185.117.52.0/22 maxlen: 24
82.214.234.0/24 maxlen: 24
82.214.239.0/24 maxlen: 24
62.128.160.0/19 maxlen: 24
62.128.168.0/21 maxlen: 24
195.238.32.0/19 maxlen: 24
195.238.44.0/24 maxlen: 24
195.238.45.0/24 maxlen: 24
62.128.186.0/24 maxlen: 24
62.128.188.0/24 maxlen: 24
62.128.191.0/24 maxlen: 24
2a0a:1240::/32 maxlen: 40
2a0a:1241::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:21:26:48:6b:37:95:68:1b:d0:90:e4:25:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6e4c80d991e729fb4dfd83d1fb4e46890241207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:8c:3b:96:29:51:51:15:fe:f9:50:00:ea:
2c:0d:61:0c:39:ea:03:05:2d:f8:55:83:26:02:d7:
cb:b8:1b:62:61:75:4f:d3:00:b2:50:14:86:da:a3:
35:70:d3:27:8f:ca:5f:b3:f1:76:4e:d7:2e:17:d0:
e7:25:40:cb:43:bb:22:24:3e:ee:16:09:45:ae:07:
e3:6a:ee:ff:14:41:49:e0:89:77:2a:c1:86:7d:89:
9a:9c:5d:75:8f:aa:e0:0c:bb:d6:57:79:0f:3e:de:
a2:33:f6:d0:57:b9:4c:ff:78:b4:d1:97:ff:29:c5:
e7:bd:0d:d5:89:d2:d0:b7:b3:fd:3e:69:2a:0b:ad:
f1:76:3e:69:95:39:07:b0:bf:51:49:03:3e:f3:db:
6c:e3:11:da:27:fb:4d:a5:18:76:04:9e:05:4b:9a:
c3:ca:56:3a:2d:1f:84:66:c1:fe:97:40:e3:43:b3:
7e:c0:77:af:21:50:b8:4d:43:08:99:fd:04:a0:cb:
e5:73:4d:46:78:f3:cf:ab:2a:a7:09:6a:c6:94:0d:
6c:11:d7:62:d2:33:41:f8:08:91:59:33:ed:e7:50:
58:e5:ff:9e:58:75:3d:7f:64:89:16:29:7b:86:6f:
4e:30:79:b3:f5:0d:e7:ba:9c:74:b8:9f:89:4e:d1:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:C8:0D:99:1E:72:9F:B4:DF:D8:3D:1F:B4:E4:68:90:24:12:07
X509v3 Authority Key Identifier:
keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/puTIDZkecp-039g9H7TkaJAkEgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.128.160.0/19
82.214.192.0/18
128.65.64.0/19
185.117.52.0/22
195.238.32.0/19
IPv6:
2a0a:1240::/31
Signature Algorithm: sha256WithRSAEncryption
30:02:a6:c6:e8:95:4b:0f:d8:95:9d:3c:24:a0:4a:7d:d7:ce:
e1:26:46:9e:2e:f3:ed:d2:f8:86:22:af:6f:14:30:0c:3e:f7:
ca:cd:99:bd:a1:b8:ed:02:10:b9:f8:c8:2f:5e:3d:cd:4f:d5:
91:15:fd:82:c0:81:63:d7:28:23:e8:46:33:5a:2a:69:a6:15:
53:37:24:67:ce:fa:94:56:fe:a3:4e:dd:ee:ac:d9:8a:11:03:
ca:0b:9c:85:91:be:b5:73:25:61:d8:4b:0f:09:c0:47:86:5e:
5e:4d:5e:0b:06:d6:33:97:9e:b9:fa:c3:ae:3a:35:b8:ac:a9:
29:a0:b7:fb:02:29:7c:e2:5c:f6:f4:5d:3c:92:86:a4:4c:e2:
56:ec:32:66:e3:5b:03:9c:50:f2:0a:21:9e:f0:87:f4:05:a3:
31:a2:1a:9f:e6:d6:09:c9:42:6e:e2:14:15:e8:39:27:9b:d1:
e2:34:5e:76:c0:31:33:4a:d0:05:49:cd:58:b5:d5:97:cd:ae:
24:0d:d7:7b:7e:64:a8:d1:87:be:c6:cb:64:79:52:1b:eb:61:
db:73:25:4e:5b:74:98:66:52:05:c9:e4:77:98:42:8d:9f:44:
ec:58:c5:2d:40:40:fd:e0:58:e2:f3:d3:2a:cb:88:50:0a:a8:
d0:e2:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net