Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/sM66hPH6v0N-zOFiOcmV4D1POPU.roa
File: sM66hPH6v0N-zOFiOcmV4D1POPU.roa (raw, json)
Hash identifier: wgHXpCCGg41NwT/AgiX0IpNv7WDbh8/DIZMVp8mZzCs=
Subject key identifier: B0:CE:BA:84:F1:FA:BF:43:7E:CC:E1:62:39:C9:95:E0:3D:4F:38:F5
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0193E8514480A7584010AB9E1E5775F996F1
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/sM66hPH6v0N-zOFiOcmV4D1POPU.roa
Signing time: Sat 21 Dec 2024 08:24:20 +0000
ROA not before: Sat 21 Dec 2024 08:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60976
IP address blocks: 91.232.73.0/24 maxlen: 24
185.222.120.0/22 maxlen: 22
185.222.120.0/24 maxlen: 24
185.222.121.0/24 maxlen: 24
185.222.122.0/24 maxlen: 24
185.222.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:51:44:80:a7:58:40:10:ab:9e:1e:57:75:f9:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Dec 21 08:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ceba84f1fabf437ecce16239c995e03d4f38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:1d:53:d0:13:96:1a:05:5a:86:c1:28:d9:
99:fc:6d:80:5d:dd:d5:e7:5b:7b:61:ca:7f:61:40:
5c:fd:2c:d7:c8:a8:97:18:3e:65:7f:13:17:b6:5d:
ef:59:6f:49:94:ad:4d:15:15:82:a3:a3:da:f9:9a:
70:29:be:6d:e5:3f:f1:26:61:be:d3:3b:db:be:55:
77:cd:48:ad:17:c7:9f:32:08:2b:11:c6:29:c2:94:
58:fe:cc:a7:8f:f5:19:6f:ff:3e:83:0d:fb:7a:3a:
f0:a1:a9:84:f3:4a:12:87:5e:db:c8:7e:27:8b:ac:
7b:dc:9d:45:19:26:82:8b:4a:79:c3:e5:77:98:b9:
a2:06:8d:17:0d:68:83:63:c2:c2:a4:46:74:c3:61:
8c:d7:f5:ef:f3:16:63:38:19:1d:21:97:14:20:d0:
8f:b1:d0:64:d5:7a:7f:ad:78:31:43:34:83:58:1b:
0d:5e:0f:9a:5a:1a:3d:0a:07:ff:28:ec:2c:da:17:
22:e5:5d:de:7a:10:7d:fd:cd:66:57:c6:7c:86:ea:
79:96:5c:10:18:57:1d:d6:56:95:34:10:98:c8:05:
a5:a6:4d:3a:16:cd:7e:2d:e3:67:10:f0:e3:84:89:
bb:6b:9c:9e:5f:29:31:31:f3:32:d6:16:86:90:82:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:BA:84:F1:FA:BF:43:7E:CC:E1:62:39:C9:95:E0:3D:4F:38:F5
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/sM66hPH6v0N-zOFiOcmV4D1POPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.73.0/24
185.222.120.0/22
Signature Algorithm: sha256WithRSAEncryption
90:d7:3a:1c:30:80:07:f1:e9:d1:d4:62:4a:b1:75:6b:91:d7:
0e:6e:bf:db:98:d0:31:54:d4:ad:4f:93:58:6b:a1:4d:22:0f:
28:a9:87:3d:84:dd:82:78:41:e3:39:af:cd:8b:3c:63:2c:8a:
94:6b:08:39:f7:65:b6:f6:c3:2d:a1:cd:1b:e3:1a:fc:24:1b:
65:44:59:bd:3a:ac:be:f4:4c:18:33:2d:03:f6:58:a0:57:f7:
60:1a:1d:3f:e1:2a:ee:58:ad:13:cb:78:ad:11:f7:a5:53:50:
99:bf:40:66:43:c1:e1:c6:68:cf:1c:88:fa:a5:d8:d2:b0:fd:
57:8f:7e:b1:c8:d1:2c:cc:b8:73:e9:b4:9e:f5:d2:6d:4c:39:
b4:ab:55:04:a4:53:96:e6:e6:12:4b:87:8a:72:ce:5d:7b:d9:
07:8c:78:55:5c:61:82:15:3d:96:13:9b:d3:d6:36:55:2c:5d:
49:8a:ab:d7:26:27:c2:15:7f:ad:d0:1b:20:22:2d:14:9f:38:
d4:52:47:4f:03:c0:86:fa:27:02:fe:96:4f:72:f0:ff:8d:1a:
38:8c:a0:03:40:96:2c:1c:ce:ab:b6:e8:e3:e1:60:f4:f0:e1:
7e:72:5c:6e:f1:83:1d:3e:fb:fc:53:be:42:a1:ed:c2:32:5a:
e5:ca:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:58 2024 by rpki-client on console.sobornost.net