Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/h0__sd2lrBuZKlUk4vvnSRTWpp0.roa
File: h0__sd2lrBuZKlUk4vvnSRTWpp0.roa (raw, json)
Hash identifier: wmzGR1u1DXGKqBAPTI3fXqN1EXf0xiEHr5k3ueb8vcE=
Subject key identifier: 87:4F:FF:B1:DD:A5:AC:1B:99:2A:55:24:E2:FB:E7:49:14:D6:A6:9D
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 018CC7933886334EB5C66669A1A9A627E332
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/h0__sd2lrBuZKlUk4vvnSRTWpp0.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200780
IP address blocks: 194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
46.19.104.0/21 maxlen: 21
185.144.24.0/22 maxlen: 22
45.155.228.0/22 maxlen: 22
45.9.104.0/22 maxlen: 22
194.13.67.0/24 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
45.85.132.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
91.227.36.0/22 maxlen: 22
194.13.64.0/24 maxlen: 24
2a05:46c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:38:86:33:4e:b5:c6:66:69:a1:a9:a6:27:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=874fffb1dda5ac1b992a5524e2fbe74914d6a69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:ac:a6:27:92:d7:6e:2c:29:c8:c0:f1:31:
16:4a:6c:65:d2:f1:7c:9e:dd:3f:0d:74:a0:7a:c3:
c4:5f:7e:7e:ee:44:75:af:08:48:4d:5b:6d:2c:8d:
b0:36:72:6d:b2:43:fa:4c:f3:9c:a1:f1:16:8a:14:
5d:c0:ea:34:9f:15:bc:4c:e1:79:27:87:e5:ec:ae:
74:3b:4f:3a:b8:08:db:a7:df:f9:5e:81:21:b6:da:
c2:54:b0:8f:ab:d2:71:7c:e4:eb:20:d3:55:4d:5a:
c3:ee:43:e4:2a:a9:ce:cc:9b:b9:d9:54:80:de:05:
6b:1c:93:24:5b:d3:75:48:d5:48:f5:7f:6b:6f:df:
0d:9a:a9:c4:28:14:23:9f:63:84:2e:2f:4f:dd:b6:
01:f4:1b:33:9d:23:d5:81:70:36:9c:41:2a:f9:14:
21:39:2c:4a:b7:2a:53:74:18:23:30:86:90:86:f8:
31:50:a1:0e:63:81:b7:89:1f:65:28:e0:4f:61:f2:
84:1d:ae:a3:3a:5a:74:db:f4:ae:76:b3:20:47:be:
8d:88:1f:7a:30:f8:2c:21:8a:9d:8b:17:40:30:aa:
17:e6:8f:72:8d:5c:7b:fd:73:2d:3b:71:e2:c9:b1:
0c:cc:49:c2:f8:5a:25:df:51:cb:8a:91:24:b9:91:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:FF:B1:DD:A5:AC:1B:99:2A:55:24:E2:FB:E7:49:14:D6:A6:9D
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/h0__sd2lrBuZKlUk4vvnSRTWpp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
46.19.104.0/21
91.227.36.0/22
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:56:16:ed:bf:ed:a4:08:a0:4e:0d:c4:52:e7:4e:25:31:1c:
b0:f4:07:bc:07:3e:2b:38:c5:75:cf:0b:c6:4c:7e:ae:1e:b1:
51:76:fc:07:33:04:13:0b:f7:c2:62:69:33:1c:01:85:1a:67:
ee:17:ea:74:cc:26:e2:85:39:a6:0e:9f:f2:14:70:f0:21:43:
86:86:59:68:76:59:87:18:ac:1a:b7:33:17:d4:5c:ef:37:1b:
49:f5:19:e5:1c:93:1f:c1:4b:f0:86:78:f3:9e:63:e0:b2:09:
1d:d6:72:59:1b:c7:83:d6:78:c2:03:1f:15:58:0a:43:fd:b4:
1a:09:25:4e:61:8a:11:d8:fa:eb:aa:d7:1e:d9:f9:b0:ec:63:
97:ea:5c:12:8a:67:b8:38:50:72:4e:d9:07:34:a3:fa:58:8c:
fb:19:9f:c1:bf:03:1f:0a:e5:13:41:99:64:d4:52:19:24:a3:
61:f3:55:db:4a:35:50:50:9b:b7:14:6a:2b:c9:48:9b:5d:a1:
42:78:a6:39:18:85:4f:91:9b:52:25:97:bb:89:09:1c:ed:dc:
c2:d7:3a:10:c7:47:1e:8f:69:45:77:5b:9c:4a:a0:b4:7f:64:
a1:e8:a6:a1:df:45:02:47:0c:f0:99:f3:68:9b:00:96:ab:1e:
4b:87:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:34 2024 by rpki-client on console.sobornost.net