Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/GCghi-0ey2A2hJlFsJr9QTV9WSU.roa
File: GCghi-0ey2A2hJlFsJr9QTV9WSU.roa (raw, json)
Hash identifier: PpfstLsQ/RB7HSRXsLZkwdj/NPOWbkU7KzNUDyi0W5I=
Subject key identifier: 18:28:21:8B:ED:1E:CB:60:36:84:99:45:B0:9A:FD:41:35:7D:59:25
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0192B63CE54C4319D8553A77CEEC74BDCBFA
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/GCghi-0ey2A2hJlFsJr9QTV9WSU.roa
Signing time: Tue 22 Oct 2024 21:58:17 +0000
ROA not before: Tue 22 Oct 2024 21:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.0.0/18 maxlen: 18
83.132.64.0/18 maxlen: 18
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.134.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
212.113.160.0/19 maxlen: 19
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b6:3c:e5:4c:43:19:d8:55:3a:77:ce:ec:74:bd:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 22 21:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1828218bed1ecb6036849945b09afd41357d5925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:f1:b8:8f:76:29:6b:d1:d0:0d:a3:fa:ec:
8e:5a:b8:ed:55:f2:e8:e5:62:9d:bc:5a:b0:6a:87:
e0:1c:b9:e6:38:20:4a:b8:e6:ae:fb:fa:9e:d2:b0:
dd:5d:38:b6:e3:6e:d1:35:dd:73:67:c2:74:d2:3c:
8d:7a:26:4c:fc:80:1f:39:c7:a7:79:bd:7b:92:3a:
23:35:0f:0b:35:31:e0:fc:86:a8:f4:39:fc:d7:b2:
e4:35:2c:01:cc:ea:ac:27:b6:79:ac:1b:f4:d5:4e:
79:f9:7a:5b:85:29:55:3e:01:56:a5:54:1f:03:8a:
7f:85:d5:af:75:1d:9f:fc:51:58:ac:e2:16:c7:15:
80:52:8c:36:7e:5a:f3:fa:97:52:f3:2c:b5:81:78:
89:57:fb:20:5a:73:1d:f7:dc:1e:13:04:3f:47:78:
d3:80:56:6e:6d:b1:d7:5a:05:6a:33:1a:9a:d6:55:
c7:63:f6:2b:29:bd:17:da:87:d2:ce:49:9e:40:3e:
26:f4:27:57:84:5d:48:01:8b:8c:da:28:6c:96:4f:
fe:cd:4b:35:63:eb:4e:b6:9e:4c:66:56:85:fd:0b:
d0:5f:95:80:de:2c:83:58:4e:b9:9a:65:47:d9:ea:
f7:e6:11:71:35:43:8a:ae:5c:f6:cc:d6:5f:9f:dd:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:21:8B:ED:1E:CB:60:36:84:99:45:B0:9A:FD:41:35:7D:59:25
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/GCghi-0ey2A2hJlFsJr9QTV9WSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.134.0/24
88.157.230.0/23
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
212.113.160.0/19
213.22.0.0/16
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:81:4c:77:61:9a:54:24:b0:9e:cc:51:52:3a:e7:9f:14:68:
04:f8:b6:f2:c7:a0:ea:b8:30:60:78:b7:4f:ce:70:00:5a:62:
f0:d2:95:01:64:3f:11:65:a0:3a:fd:25:46:d5:69:00:88:f3:
d3:92:94:9c:34:b4:74:3f:40:c9:9b:8e:ce:22:1f:9e:8d:f4:
88:9d:2e:86:a6:4d:40:7c:16:8a:f9:b8:bc:9d:78:00:73:eb:
f3:a3:03:da:59:97:34:04:ce:62:0a:e7:2b:30:f7:03:f8:4e:
a1:ce:a5:33:ad:e8:41:db:9e:25:4d:11:4b:a6:34:32:94:d7:
2d:17:de:9e:19:dc:27:31:27:ff:07:b9:e6:66:80:e1:3a:02:
59:5e:2a:55:11:03:c9:a7:b8:c2:b4:3e:e8:38:c3:18:da:34:
fc:b7:54:90:52:42:07:06:a8:70:32:80:33:9d:b4:bc:4a:b3:
1e:e5:cf:b9:1b:0f:1b:94:40:e1:6b:6b:d9:6b:40:52:0c:c0:
f7:2c:c3:d4:bd:f6:24:e1:31:46:0f:10:63:57:d9:53:75:c5:
b4:07:12:9f:c7:12:9a:56:31:b0:77:94:8a:30:2f:57:e1:1e:
82:d8:4a:75:81:a8:1e:8a:24:ff:b2:0f:a1:af:c8:71:4d:e4:
06:ca:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:57 2024 by rpki-client on console.sobornost.net