Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/51DPg8I5H_MHDHU5SVivI1xwPNE.roa
File: 51DPg8I5H_MHDHU5SVivI1xwPNE.roa (raw, json)
Hash identifier: TqKxcZ7uS3WpuOa3ylmUlCRcE/E/nDIzfYWbxuvO9Ds=
Subject key identifier: E7:50:CF:83:C2:39:1F:F3:07:0C:75:39:49:58:AF:23:5C:70:3C:D1
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018CC86EFAD3CE71C5BC2C557667E9B748A6
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/51DPg8I5H_MHDHU5SVivI1xwPNE.roa
Signing time: Tue 02 Jan 2024 04:29:25 +0000
ROA not before: Tue 02 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50606
IP address blocks: 194.126.245.0/24 maxlen: 24
194.127.97.0/24 maxlen: 24
185.56.172.0/22 maxlen: 22
194.126.251.0/24 maxlen: 24
193.42.154.0/24 maxlen: 24
109.232.28.0/22 maxlen: 22
185.215.72.0/23 maxlen: 23
194.126.233.0/24 maxlen: 24
213.156.100.0/22 maxlen: 22
2a02:54e0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fa:d3:ce:71:c5:bc:2c:55:76:67:e9:b7:48:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e750cf83c2391ff3070c75394958af235c703cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:be:58:1c:ca:d5:84:73:58:fc:e6:2e:56:
ba:34:49:07:6e:9d:96:27:a9:dd:a3:01:2b:ab:c1:
0b:f9:c8:aa:e7:3f:f9:c9:1a:31:e8:8b:bc:bd:05:
1b:c1:f0:73:ba:b1:ce:a9:69:29:a8:7e:af:ac:b2:
87:d2:56:3c:4e:90:14:af:b2:4b:77:a8:c1:a3:88:
fe:10:84:57:64:e2:18:c0:6e:c4:d6:88:17:28:98:
14:5f:d2:c1:d6:83:ec:13:7d:c7:f1:83:14:ce:1a:
f2:d5:69:67:df:f2:03:b9:77:f7:d9:1d:a2:05:d4:
01:a0:b8:ea:6a:77:53:27:88:12:fb:8b:6a:65:8b:
f3:b2:de:30:7a:ef:4c:15:04:06:64:fc:e6:b5:fa:
f6:c8:53:2c:96:5b:d4:23:c1:6d:4e:4d:23:b0:e3:
8f:21:68:c6:7d:6a:8a:0b:71:26:dd:81:e7:ce:a1:
c2:2c:a1:60:1d:93:23:ed:04:6f:98:c1:81:cb:92:
5f:d5:d4:4a:87:82:e6:7a:15:f0:4a:5e:a7:72:2d:
6a:ed:fc:88:4e:e0:25:11:99:b7:ee:7d:16:a8:e0:
7c:54:1d:dc:b4:98:24:7b:7f:73:70:24:d5:22:9b:
8e:e3:e4:e0:24:55:57:f3:6d:01:45:b3:20:ac:f4:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:CF:83:C2:39:1F:F3:07:0C:75:39:49:58:AF:23:5C:70:3C:D1
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/51DPg8I5H_MHDHU5SVivI1xwPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.28.0/22
185.56.172.0/22
185.215.72.0/23
193.42.154.0/24
194.126.233.0/24
194.126.245.0/24
194.126.251.0/24
194.127.97.0/24
213.156.100.0/22
IPv6:
2a02:54e0::/29
Signature Algorithm: sha256WithRSAEncryption
54:cd:a0:cc:57:64:b2:3d:40:a4:af:e5:ec:9e:e4:7b:da:2c:
7a:d8:d8:c5:c5:60:19:b3:b5:15:15:43:f6:3c:21:18:9e:91:
bb:18:6b:14:88:8d:63:ed:a8:5d:83:ba:97:b8:33:cf:82:f6:
ea:f4:bb:cf:c3:58:e8:a8:e1:a6:4b:b1:02:f9:88:bb:8a:d8:
16:38:b6:b7:dc:a9:5f:b4:18:73:99:c4:29:26:6a:3b:a4:a9:
15:f6:43:5b:7f:6d:c8:9b:29:6b:d3:ca:50:11:3f:e2:60:f0:
e6:0e:44:06:bf:fe:63:d8:e9:fc:a1:23:1b:0f:5b:34:02:c6:
f2:b2:12:88:7b:cd:c9:09:9d:83:e8:65:82:74:63:34:d3:db:
33:0a:0c:f6:26:70:4e:02:ea:bd:1b:12:9e:7f:3f:4d:f5:49:
de:10:89:c3:81:12:ca:46:15:d4:a7:d3:c4:02:75:03:27:0a:
85:68:b7:df:9b:4c:15:36:b3:fe:5b:44:a0:98:a7:3c:94:29:
f6:4d:dc:2f:04:72:2d:39:f4:11:08:a6:b8:53:f9:ed:12:d1:
99:1b:1a:f6:03:d8:6d:27:d7:f4:07:f9:2f:b1:4b:c6:2e:08:
03:56:be:9e:30:5a:66:3c:04:29:06:13:c9:cb:bb:53:57:ff:
ae:6d:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 03:51:56 2024 by rpki-client on console.sobornost.net