Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/7rYb0awEVRHRy42l5-TupLN5Eeo.roa
File: 7rYb0awEVRHRy42l5-TupLN5Eeo.roa (raw, json)
Hash identifier: 1rNfOd8vtA3KGiZfUf1Am32PEf2j1rhRkG1tTB7OEtk=
Subject key identifier: EE:B6:1B:D1:AC:04:55:11:D1:CB:8D:A5:E7:E4:EE:A4:B3:79:11:EA
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 019391280994A7538F78BAA69646B2CA3602
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/7rYb0awEVRHRy42l5-TupLN5Eeo.roa
Signing time: Wed 04 Dec 2024 10:12:20 +0000
ROA not before: Wed 04 Dec 2024 10:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201917
IP address blocks: 37.25.128.0/17 maxlen: 24
45.144.96.0/22 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
139.47.192.0/18 maxlen: 24
195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:28:09:94:a7:53:8f:78:ba:a6:96:46:b2:ca:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Dec 4 10:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb61bd1ac045511d1cb8da5e7e4eea4b37911ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:5d:d1:3b:5b:c4:09:1b:93:59:78:53:0c:
23:e1:19:2e:5a:c5:87:87:93:dc:1b:5f:84:24:9a:
a9:1f:08:84:29:65:51:47:37:e9:61:16:6d:c9:b2:
59:2a:d1:34:a8:82:25:6a:d5:2c:97:72:0e:0c:9f:
7a:15:6c:39:ac:a3:07:5e:b0:f8:5a:03:d2:a7:0d:
9b:01:ba:3e:a9:e7:0e:75:17:fb:20:c3:9c:f3:27:
36:94:e5:f3:1f:96:cc:ff:d4:cc:28:12:bf:f1:cc:
1d:ce:81:81:9b:01:65:53:8b:b2:23:2a:e0:86:d5:
69:d0:9b:58:91:34:7d:cf:3f:64:9a:07:53:66:5e:
3c:5f:b1:5b:69:46:7a:e6:1b:16:27:f9:0f:b6:97:
05:6f:09:43:28:b9:c3:8e:d5:f1:8b:33:38:18:b0:
0b:03:9a:a1:d9:d4:40:a1:10:ac:96:8b:24:d4:fb:
a5:8f:56:ab:24:c4:e9:4e:83:b8:91:a4:ba:f4:3b:
af:92:05:93:14:f5:9f:12:4b:a6:78:15:22:40:03:
70:80:8a:f4:c7:44:f5:a1:64:fc:aa:36:49:11:c7:
18:d9:34:10:d9:c6:35:b5:56:24:d4:69:2f:de:8c:
66:70:4e:bd:9a:86:8e:69:58:1f:9d:fb:00:08:87:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:1B:D1:AC:04:55:11:D1:CB:8D:A5:E7:E4:EE:A4:B3:79:11:EA
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/7rYb0awEVRHRy42l5-TupLN5Eeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
45.144.96.0/22
46.108.0.0/16
46.190.128.0/17
139.47.192.0/18
195.232.128.0-195.233.255.255
Signature Algorithm: sha256WithRSAEncryption
85:3f:1c:aa:65:26:21:f3:5f:5d:e8:ae:11:e9:6f:ac:95:19:
b4:f9:3f:bd:78:3d:1d:37:4a:2a:e9:e5:34:e3:bc:1c:6a:9e:
72:df:eb:b0:77:14:09:07:f0:81:f8:9a:0c:0f:b3:bb:53:df:
5f:8c:1a:8d:0b:35:4a:a2:bd:0a:da:c2:12:e2:4e:07:3d:23:
e5:c1:6b:5b:ed:7a:ea:b0:05:d4:ff:ae:25:60:e2:66:de:bc:
d2:44:8e:2b:c4:f7:63:b6:b1:f9:62:e5:a7:57:6f:6b:f5:62:
a6:e2:de:76:3e:c8:18:fc:af:f1:ad:4b:48:7f:af:27:eb:11:
35:c0:e5:9b:0c:ee:8b:66:d1:5c:07:d2:02:67:96:81:ad:64:
85:75:8b:9f:78:90:66:a7:8e:48:40:7c:6f:20:f8:6d:65:87:
2a:d5:3a:65:5f:b9:17:89:17:10:45:de:72:d1:0e:5a:b7:3a:
6e:f3:36:3d:f1:7a:e2:1f:e2:71:1f:3c:e3:d2:b0:61:dc:10:
32:3e:67:e2:63:c9:25:dc:c3:69:21:64:37:e8:82:ae:1d:94:
d1:5c:21:62:53:80:c2:37:a5:d4:de:46:81:c7:1a:ce:76:81:
0a:d7:77:44:e7:df:4e:c5:06:56:c2:38:8b:c9:f1:aa:c9:f0:
51:da:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net