Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/E1DYjdwa4Z9eif88oJqM-rWumFM.roa
File: E1DYjdwa4Z9eif88oJqM-rWumFM.roa (raw, json)
Hash identifier: yZZqQxIclQP6U3g5JfGW2/FYwKOnH0qOtHidRLThBnI=
Subject key identifier: 13:50:D8:8D:DC:1A:E1:9F:5E:89:FF:3C:A0:9A:8C:FA:B5:AE:98:53
Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial: 01910EAF23A264815C2FE56EB06E165B26C4
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/E1DYjdwa4Z9eif88oJqM-rWumFM.roa
Signing time: Thu 01 Aug 2024 16:04:04 +0000
ROA not before: Thu 01 Aug 2024 16:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39217
IP address blocks: 185.53.148.0/22 maxlen: 22
185.53.148.0/24 maxlen: 24
185.132.168.0/22 maxlen: 22
194.79.56.0/22 maxlen: 22
2a00:4760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:af:23:a2:64:81:5c:2f:e5:6e:b0:6e:16:5b:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Validity
Not Before: Aug 1 16:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1350d88ddc1ae19f5e89ff3ca09a8cfab5ae9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:c1:5e:cc:28:40:ca:eb:b3:a1:2d:c6:13:
71:d4:e6:65:9b:72:41:fa:67:e4:34:0e:2c:8a:36:
5f:5d:ab:c9:ab:47:9b:bc:13:76:63:ab:1e:8b:d9:
88:fb:f0:06:75:ca:cb:d7:eb:3c:94:88:4a:b7:d8:
b1:1e:78:88:86:5b:cb:5c:2d:04:5d:a0:c2:83:96:
32:18:ce:bf:e2:e4:b6:94:04:1a:f9:2c:1e:23:50:
a4:9e:96:18:60:27:7c:6b:23:32:ad:0e:be:3d:0f:
03:a5:2b:81:b4:39:0a:6c:10:72:4a:e2:56:f8:0e:
87:c5:8d:1b:dd:1e:c6:9d:53:f9:44:36:12:86:60:
8d:72:6c:c6:bd:1a:e1:0a:de:06:7a:69:f7:61:4b:
21:b8:c6:47:f5:f1:b5:1e:7a:57:ed:f2:c4:fb:84:
3b:38:51:4c:ba:d0:06:07:ab:ef:a6:ab:4b:37:6e:
db:2a:fd:1b:48:3f:42:57:d1:de:14:c7:ec:0b:8c:
3c:2c:24:a5:38:35:60:3c:bf:9d:e7:5c:58:e5:64:
0c:a8:c7:01:56:d4:88:20:90:d3:e2:a2:6f:d4:85:
19:db:a3:0b:9b:79:60:54:1e:06:c0:6f:dd:3b:6a:
9b:e4:14:f9:51:aa:7b:68:03:b2:02:86:7c:20:f9:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:D8:8D:DC:1A:E1:9F:5E:89:FF:3C:A0:9A:8C:FA:B5:AE:98:53
X509v3 Authority Key Identifier:
keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/E1DYjdwa4Z9eif88oJqM-rWumFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.148.0/22
185.132.168.0/22
194.79.56.0/22
IPv6:
2a00:4760::/32
Signature Algorithm: sha256WithRSAEncryption
5c:6a:77:8e:65:00:43:1b:f1:f7:7f:d8:9e:42:d9:5b:80:bd:
34:69:34:06:e8:88:57:74:ac:5a:a5:17:b6:96:6f:cf:55:ee:
93:a1:21:0e:56:ec:54:d4:39:7f:fc:82:7f:1a:7b:99:da:62:
ef:41:bb:12:24:3e:0f:83:6b:a3:16:ca:a4:f8:76:94:98:f0:
06:14:63:20:77:7a:04:17:c0:e7:f5:ba:c0:20:57:41:1b:fb:
3a:3b:8e:93:f7:e0:d9:e5:e3:c6:12:8d:f4:a8:c1:42:73:de:
29:09:6d:bc:77:38:fe:58:5a:8a:e6:1e:2c:41:cb:64:0d:90:
2e:32:8b:bd:ff:d5:7a:e4:c4:d8:30:45:0f:b4:62:3d:27:1c:
e5:6f:17:b6:71:1a:e2:de:cc:da:99:74:a5:8a:16:b2:6d:4e:
08:a3:19:33:9a:33:de:51:e1:c1:be:89:4e:a0:dc:77:0e:cc:
af:c3:bf:ec:64:84:1b:1e:83:59:fa:eb:02:5c:53:47:92:63:
de:fd:e2:01:c7:86:ed:d8:e5:63:14:48:d9:83:cc:6e:f0:5e:
73:91:c6:47:c4:06:79:96:50:9c:e2:be:d0:90:d5:18:16:7e:
ed:d3:ee:f0:61:62:aa:30:a9:0d:0c:6e:76:26:e4:cf:d3:d1:
a0:ba:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:13:21 2024 by rpki-client on console.sobornost.net