Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xL9ct7FFVJ0X2Z0jjTPHWlojBZ8.roa
File: xL9ct7FFVJ0X2Z0jjTPHWlojBZ8.roa (raw, json)
Hash identifier: KP9xtgwZjEVpCQWslP4kfGPQdXbqvMtbY4uRy1ktDLY=
Subject key identifier: C4:BF:5C:B7:B1:45:54:9D:17:D9:9D:23:8D:33:C7:5A:5A:23:05:9F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018CC64B7779C0E1F6210ED7B79FF96B9F29
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xL9ct7FFVJ0X2Z0jjTPHWlojBZ8.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 185.242.232.0/22 maxlen: 24
185.245.40.0/22 maxlen: 24
93.187.128.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:77:79:c0:e1:f6:21:0e:d7:b7:9f:f9:6b:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4bf5cb7b145549d17d99d238d33c75a5a23059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:bd:e6:80:a6:05:e7:c2:6c:e3:7f:94:cf:
74:04:78:f0:89:96:46:a7:13:ee:e7:af:54:b2:75:
ba:06:32:96:bc:56:23:a0:0d:fa:2d:13:fa:e3:7f:
0f:0e:7e:4c:76:5c:38:b8:e0:5f:d8:09:c0:e7:30:
c5:da:df:12:0c:ba:b0:f8:70:04:da:ea:e5:52:7b:
cb:3d:64:b3:af:67:9c:bd:1e:69:61:a3:52:2a:5b:
32:62:55:f9:f4:ff:c7:58:be:97:89:6f:28:33:68:
66:31:0f:90:d3:84:c8:06:19:75:3d:ec:de:2e:76:
ee:fc:b5:ef:42:98:68:5e:f9:93:14:d7:38:b7:8c:
d2:61:53:f8:fe:cc:52:13:21:40:6c:d3:b0:bd:80:
22:fa:50:26:aa:d2:e8:b1:79:4c:41:59:2c:51:f4:
80:00:87:50:42:9e:c8:f2:87:f2:7d:83:25:b7:79:
6a:f7:74:08:70:6c:58:07:e2:a7:da:af:82:d6:07:
89:c9:55:55:3e:a8:b2:19:68:47:2b:17:25:c2:6a:
88:28:b8:4d:d9:0a:3e:c5:8d:59:0f:87:72:3a:94:
85:97:53:30:6a:41:2d:63:52:99:d8:aa:30:ba:b8:
9f:6e:32:3b:a7:8c:68:ea:40:81:54:20:99:32:57:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:5C:B7:B1:45:54:9D:17:D9:9D:23:8D:33:C7:5A:5A:23:05:9F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xL9ct7FFVJ0X2Z0jjTPHWlojBZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.128.0/22
185.239.84.0/22
185.242.232.0/22
185.245.40.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
56:41:bd:36:17:a0:95:c4:9f:ae:ac:dc:8b:f6:0f:65:aa:c7:
d3:c7:0d:c1:32:ad:12:f1:be:42:00:5a:f0:af:82:14:ee:71:
a7:3f:0d:02:c9:d4:5a:05:87:de:3e:d0:0f:ae:80:b3:03:70:
40:14:5e:cb:63:c5:97:cf:8e:1d:c4:43:3d:f8:0b:dd:8c:3f:
a8:c2:bf:e3:06:08:fd:1f:4e:85:37:ed:e6:39:ae:7d:25:bc:
af:18:6d:67:ca:01:a1:89:64:8b:15:3b:af:08:5f:06:e9:96:
80:2b:64:4e:1c:dd:0b:93:01:74:17:86:b6:80:f8:b7:23:05:
32:17:fe:6b:2d:26:90:71:89:aa:80:96:a6:eb:bd:f9:fb:fc:
66:51:74:4d:83:90:03:84:9d:83:ac:f7:7f:3e:8b:f2:7b:cb:
a2:3d:d0:71:c0:ee:c5:a0:d7:15:41:e3:12:62:ad:2c:c7:0f:
bb:ac:8b:fb:b8:4c:e1:c3:13:fe:42:c9:53:d6:f0:e4:b3:7e:
e3:d9:3d:cf:6b:56:0c:4d:79:3c:cf:27:f7:c9:a2:95:79:c7:
91:55:81:d9:bf:5b:67:cc:94:d9:b5:f5:6f:fb:35:5f:78:3c:
35:ba:2a:d8:89:1a:39:7c:3b:66:15:84:a0:23:ce:4d:86:e9:
7a:56:ef:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net