Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/nyYAuwsK1jK017RJE5Fsal9MQcg.roa
File: nyYAuwsK1jK017RJE5Fsal9MQcg.roa (raw, json)
Hash identifier: mxIGrXdJnZvbWEfGhreU4zmdB2Vlla4UG/M2aEybNxw=
Subject key identifier: 9F:26:00:BB:0B:0A:D6:32:B4:D7:B4:49:13:91:6C:6A:5F:4C:41:C8
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 018E853A294A43CBCC2E4B8277739C10F40A
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/nyYAuwsK1jK017RJE5Fsal9MQcg.roa
Signing time: Thu 28 Mar 2024 13:22:45 +0000
ROA not before: Thu 28 Mar 2024 13:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57877
IP address blocks: 37.139.120.0/21 maxlen: 21
178.174.110.0/23 maxlen: 23
185.76.216.0/22 maxlen: 22
195.135.12.0/23 maxlen: 23
195.135.48.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
2a05:5cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:3a:29:4a:43:cb:cc:2e:4b:82:77:73:9c:10:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Mar 28 13:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2600bb0b0ad632b4d7b44913916c6a5f4c41c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:99:dd:b1:72:37:31:6d:50:50:6d:13:9d:
ae:0f:1b:18:7e:a4:39:e4:76:ea:ec:85:b8:e7:95:
86:38:76:71:37:57:a4:d3:1a:d4:d1:9f:d6:fb:21:
e0:0a:e8:5d:14:6e:7a:64:4e:7a:37:92:18:1a:8c:
bf:45:2b:80:9d:40:40:72:30:12:ba:f8:09:ae:63:
56:2d:34:59:c5:32:db:ce:d2:02:5a:92:ec:8a:85:
1b:f0:ba:30:72:fc:22:48:44:0f:d5:07:a1:58:0a:
8e:a8:6f:b2:2d:c1:66:c3:e5:d4:8f:6f:3a:a4:98:
f4:aa:12:7f:b6:70:cb:eb:e0:38:82:8a:3e:6d:ca:
f0:8b:6b:2a:66:7f:e6:af:3e:03:5d:13:45:0f:33:
e7:e6:6b:be:12:1f:70:0a:86:3e:9c:7c:03:9b:f4:
0b:39:2d:6e:af:e2:ba:43:ca:bc:96:37:cc:25:bf:
8e:50:6f:69:da:ca:73:17:c7:e7:92:6f:f0:10:be:
88:ca:55:9b:39:d3:58:ea:93:a6:dd:4d:98:bf:df:
c8:21:49:d5:51:43:bd:ee:72:2c:15:df:0c:93:86:
c1:fb:5a:ea:7d:07:66:94:55:aa:eb:54:be:a1:de:
6c:8c:f7:68:f7:31:f7:a0:df:04:5e:af:cc:83:45:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:26:00:BB:0B:0A:D6:32:B4:D7:B4:49:13:91:6C:6A:5F:4C:41:C8
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/nyYAuwsK1jK017RJE5Fsal9MQcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.120.0/21
178.174.110.0/23
185.76.216.0/22
195.135.12.0/23
195.135.48.0/20
IPv6:
2a05:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:1c:0e:63:34:bc:35:4e:c7:a8:1f:24:42:03:89:25:19:ec:
f1:8c:8a:2c:96:e9:f9:2c:9a:41:90:d2:98:f5:d6:bb:04:d8:
4c:d8:39:17:b2:a8:ca:64:2c:3e:a1:d9:3b:6d:2e:f8:19:9f:
b5:46:3d:c1:25:55:47:ed:94:48:51:bd:5a:9f:90:09:6e:d6:
44:bf:a8:af:7b:41:1d:b4:9a:3a:5b:bc:46:be:ed:19:5f:ee:
61:54:18:bc:b0:7a:ca:dc:ac:97:dd:4f:90:2d:9c:8a:4f:d0:
48:f7:5a:78:69:b4:08:4d:a9:ed:16:d9:43:0c:01:e1:c1:3c:
0f:11:d1:c7:35:80:80:0c:61:05:28:c3:96:5c:d1:08:0c:f1:
12:fd:18:b8:3c:ba:41:46:26:94:1a:91:59:b1:93:e7:e4:c8:
ee:ea:b9:0d:5d:1c:fa:38:29:07:5c:de:5f:b2:1a:a6:7d:0c:
c5:ff:03:fc:10:d5:95:34:8a:d2:34:68:c3:75:91:c4:05:a4:
62:ec:6d:b7:7b:e3:49:df:ad:53:df:6c:75:f9:7d:69:f6:35:
34:30:d5:93:55:8b:e4:92:48:96:ff:35:04:0f:bd:7f:36:31:
17:d5:20:40:d9:b4:23:25:56:6b:79:ad:db:a4:a9:90:eb:50:
2c:b1:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net