Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/p0c248yV5og5hwyd1o9EZJOmULc.roa
File: p0c248yV5og5hwyd1o9EZJOmULc.roa (raw, json)
Hash identifier: 2yrVxjFfER0OGQJ3k7dDaBony7tY2+1tYFltVymY0XE=
Subject key identifier: A7:47:36:E3:CC:95:E6:88:39:87:0C:9D:D6:8F:44:64:93:A6:50:B7
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 0193C576939DD38911650AF849A6BC0AADD6
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/p0c248yV5og5hwyd1o9EZJOmULc.roa
Signing time: Sat 14 Dec 2024 13:58:22 +0000
ROA not before: Sat 14 Dec 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6775
IP address blocks: 5.154.186.0/24 maxlen: 24
79.134.224.0/19 maxlen: 24
79.134.225.0/24 maxlen: 24
79.134.227.0/24 maxlen: 24
79.134.228.0/24 maxlen: 24
79.134.229.0/24 maxlen: 24
79.134.230.0/24 maxlen: 24
79.134.231.0/24 maxlen: 24
79.134.232.0/24 maxlen: 24
79.134.233.0/24 maxlen: 24
79.134.234.0/24 maxlen: 24
79.134.235.0/24 maxlen: 24
79.134.236.0/23 maxlen: 23
79.134.236.0/24 maxlen: 24
79.134.237.0/24 maxlen: 24
79.134.238.0/23 maxlen: 23
79.134.240.0/20 maxlen: 24
79.134.247.0/24 maxlen: 24
79.134.250.0/23 maxlen: 23
79.134.250.0/24 maxlen: 24
79.134.251.0/24 maxlen: 24
79.134.252.0/24 maxlen: 24
79.134.254.0/23 maxlen: 23
85.209.172.0/22 maxlen: 24
128.0.33.0/24 maxlen: 24
185.22.52.0/22 maxlen: 22
185.22.52.0/24 maxlen: 24
2001:4b28::/32 maxlen: 32
2a01:528::/32 maxlen: 32
2a04:1d40::/29 maxlen: 29
2a04:1d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:76:93:9d:d3:89:11:65:0a:f8:49:a6:bc:0a:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Dec 14 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a74736e3cc95e68839870c9dd68f446493a650b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:bf:a9:67:83:8a:84:9a:55:f1:9c:8d:89:
e2:ff:9d:bb:a0:df:9a:b5:dc:e0:e5:83:52:db:ba:
49:48:32:79:27:9e:d2:c0:90:a8:58:5c:a9:be:20:
93:02:9e:59:c0:52:67:33:c3:fd:34:12:57:ee:92:
9f:9f:46:da:78:a2:8c:a5:b8:be:55:66:68:dd:c8:
c2:a8:f9:ee:71:f7:6f:f4:d8:7c:47:a7:30:a8:83:
d5:d0:6f:0e:3a:ef:b3:e3:63:18:99:ec:90:b1:f7:
fa:a8:ce:d2:be:ee:c3:29:74:44:ac:d1:ec:f2:e0:
24:db:9d:f4:d5:0f:45:9a:7b:90:02:45:11:ad:43:
c3:ae:47:c8:f2:86:1a:c8:eb:db:c7:b7:30:2b:ed:
57:4e:c7:42:81:87:55:91:03:cf:b6:40:50:1e:38:
c8:86:bc:5b:3e:c7:db:a9:0e:59:5e:a4:5e:d4:73:
92:aa:8d:a1:ec:e5:85:04:cb:8a:05:51:78:6c:e9:
c4:95:75:c3:64:b9:1a:83:92:c2:be:a4:4a:d2:97:
1b:d2:ce:88:e6:af:14:8e:58:e4:02:60:21:28:b4:
d9:d5:54:09:c2:1b:aa:db:cd:ae:62:78:39:65:ed:
bf:7d:ca:5b:ba:07:8c:8e:85:16:0b:8d:25:a8:07:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:36:E3:CC:95:E6:88:39:87:0C:9D:D6:8F:44:64:93:A6:50:B7
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/p0c248yV5og5hwyd1o9EZJOmULc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.186.0/24
79.134.224.0/19
85.209.172.0/22
128.0.33.0/24
185.22.52.0/22
IPv6:
2001:4b28::/32
2a01:528::/32
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
99:97:5f:98:6e:66:96:a3:fc:13:3f:16:b6:cc:d3:b6:c7:19:
20:84:68:3f:09:27:4a:7b:d8:51:38:65:c2:36:1e:45:09:85:
58:ea:19:fd:ec:ab:4a:7b:49:87:55:95:75:b5:ec:a2:0a:44:
81:2d:ea:66:ee:4b:fd:76:c5:48:8c:b6:64:5c:c4:27:ab:a9:
84:62:6c:63:a9:d5:3c:d9:43:c4:15:1d:1c:63:c6:be:96:2a:
3d:48:e0:04:cd:77:d3:da:42:f8:74:50:47:17:f2:eb:13:ae:
f0:44:03:3d:7e:91:a2:38:9e:9e:9d:ff:de:3f:fb:0a:c4:cf:
85:72:7f:9d:1d:cc:3d:29:0f:f1:95:ab:4f:04:27:f2:5f:8f:
bf:db:bd:40:da:cd:98:97:24:47:b2:ad:c5:48:ac:37:c3:b9:
51:bc:a3:60:05:e8:08:e4:c6:78:42:3d:c6:83:8d:62:ef:4e:
58:b0:a9:93:1e:5a:2c:9d:2d:b2:c2:07:f6:bd:39:df:dd:50:
73:fd:b4:af:60:f6:de:e2:f7:0b:6d:ef:46:43:98:06:28:2e:
92:26:32:f5:c4:a3:89:02:da:a2:5b:66:1a:e8:fe:61:13:df:
d8:f7:5f:cb:d8:35:cf:85:83:60:80:1a:bc:15:39:f5:66:04:
3d:d2:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net