Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/f_TXT3tCShUGGepzIdu1bfhIi9Y.roa
File: f_TXT3tCShUGGepzIdu1bfhIi9Y.roa (raw, json)
Hash identifier: ZGhJgkN7yZmdLm68RSIC7Ltljic/mujR+BEQTmHqgbA=
Subject key identifier: 7F:F4:D7:4F:7B:42:4A:15:06:19:EA:73:21:DB:B5:6D:F8:48:8B:D6
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 018CC50070C10DB9DD807F9DCF6F26D5A9BB
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/f_TXT3tCShUGGepzIdu1bfhIi9Y.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202877
IP address blocks: 185.151.253.0/24 maxlen: 24
185.151.252.0/22 maxlen: 22
185.151.252.0/24 maxlen: 24
185.151.255.0/24 maxlen: 24
185.151.254.0/24 maxlen: 24
2a07:7300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:70:c1:0d:b9:dd:80:7f:9d:cf:6f:26:d5:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ff4d74f7b424a150619ea7321dbb56df8488bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:5f:b8:a5:15:55:0f:cd:5c:c1:fd:f4:ba:
db:86:12:d5:fb:f9:ca:51:bd:38:c8:28:4d:c5:cc:
f4:89:df:e2:1f:4e:79:39:72:50:d6:24:aa:c5:8a:
12:14:99:ac:03:9a:65:c6:9c:4f:e4:2b:e1:16:02:
66:4c:dd:8c:a7:ff:79:4a:63:ae:5e:41:05:ac:e2:
1b:3c:ea:21:71:81:27:6d:12:8d:af:bc:e3:44:31:
52:d3:50:8b:1c:da:18:fb:a2:5d:e5:46:37:57:b2:
0c:c5:db:53:08:56:a7:1c:ba:6b:9d:6c:a5:f1:d8:
75:e5:18:fc:56:95:0e:75:cf:61:88:bd:5c:85:d7:
8b:6f:c2:8c:c1:a8:97:1e:18:e9:b0:a8:42:78:f8:
02:22:90:87:e1:4c:0d:81:a6:6e:db:27:bf:7d:4b:
1e:09:4e:c6:43:f6:63:b5:fe:f9:4f:d4:5c:f3:f3:
b7:84:a4:ee:59:10:cc:36:b1:61:d9:5d:4f:c2:08:
40:d4:a5:11:7a:34:6f:6c:8f:44:75:13:6c:b3:48:
19:a2:18:e6:83:c9:39:ad:88:b5:55:e8:01:04:cd:
37:a7:67:01:9f:5f:c8:0b:45:15:9f:6c:96:36:af:
75:2e:ae:18:4d:65:3e:a9:32:8c:c5:47:a2:4c:44:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:D7:4F:7B:42:4A:15:06:19:EA:73:21:DB:B5:6D:F8:48:8B:D6
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/f_TXT3tCShUGGepzIdu1bfhIi9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.252.0/22
IPv6:
2a07:7300::/29
Signature Algorithm: sha256WithRSAEncryption
4c:b8:de:fd:48:33:8b:15:43:75:26:d2:1c:81:e7:8d:b3:a8:
4b:38:3e:47:e3:96:d1:0a:15:31:b7:22:e6:77:13:23:1a:4f:
4b:d9:a6:21:04:c5:8b:2d:4d:fb:44:6b:e2:fc:05:3c:62:b3:
9f:c3:2f:83:1a:fa:f8:3c:d7:41:f9:3b:9c:82:17:00:8d:88:
66:38:9c:4d:6c:f4:43:7c:75:cc:6b:ab:e7:47:6a:e7:3d:10:
25:37:c6:99:6b:2b:56:4f:3d:85:07:84:b7:4c:d4:4c:f3:6f:
9f:2e:1c:85:26:42:8d:43:60:64:3f:02:1c:ca:78:83:2b:0e:
00:4a:e6:64:90:9d:24:57:d6:5f:90:3f:17:b2:c7:96:f6:4a:
67:fe:27:cc:1f:90:c3:21:4c:e3:7f:7f:ee:1e:2c:74:c2:d1:
76:d6:67:34:db:91:b5:5a:5f:5b:12:2f:6d:09:3f:16:2c:4e:
0d:19:76:46:6f:7f:54:ad:4f:60:ce:0e:ee:47:51:6c:0d:74:
30:ac:f4:8e:1d:48:c9:17:6c:37:62:b0:b9:b5:63:11:02:b5:
0b:8b:c5:b8:19:26:7e:01:4e:81:be:58:bc:22:b1:dd:16:2a:
8c:6b:94:1b:3e:c2:af:e3:c4:e0:4a:c5:65:4d:3c:cb:0f:54:
e3:2b:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net