Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/UrlXLdjRTjOXuDgPAm5vac1bfEY.roa
File: UrlXLdjRTjOXuDgPAm5vac1bfEY.roa (raw, json)
Hash identifier: bnO1adIJt/bp+ojlXX5sbMj8VnHEx78mYXHTDzM72Bc=
Subject key identifier: 52:B9:57:2D:D8:D1:4E:33:97:B8:38:0F:02:6E:6F:69:CD:5B:7C:46
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0193CE90964BA3BB1277C5A27BCAEE51DF0D
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/UrlXLdjRTjOXuDgPAm5vac1bfEY.roa
Signing time: Mon 16 Dec 2024 08:23:22 +0000
ROA not before: Mon 16 Dec 2024 08:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:3d1::/48 maxlen: 48
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
2a14:3f87:9800::/38 maxlen: 38
2a14:3f87:f000::/38 maxlen: 38
2a14:3f87:fc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:90:96:4b:a3:bb:12:77:c5:a2:7b:ca:ee:51:df:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Dec 16 08:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b9572dd8d14e3397b8380f026e6f69cd5b7c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:82:db:33:78:ad:76:b4:29:85:aa:bf:31:
39:e1:7e:02:51:a3:f7:f5:d7:58:66:68:d0:7a:7f:
3d:37:51:38:fa:2b:da:a6:85:21:f1:8e:ce:2f:23:
8a:06:4d:26:eb:62:77:d2:2d:c9:a6:9d:c4:76:84:
4f:d8:3b:aa:d3:d9:de:aa:99:11:39:46:53:9a:f1:
07:05:01:27:61:12:6f:ce:d9:98:d1:9f:24:64:06:
50:f2:7d:da:c6:d5:de:26:1c:7b:71:68:71:b9:ff:
b0:1e:60:e9:a2:ce:f9:15:ff:3d:e7:44:20:07:fd:
47:9f:28:f9:7c:b6:1d:90:ba:0d:df:72:7c:0c:7a:
a5:7d:35:ab:fd:ec:e5:00:6d:b9:7f:99:ef:6f:d7:
d5:1c:dc:7a:71:4c:69:d7:26:a5:94:b1:31:4e:a4:
8e:8b:ec:50:07:79:cf:ab:93:88:5b:b4:42:fc:d7:
ee:1f:a2:bc:90:eb:8c:37:51:d6:dd:38:8c:c0:90:
ca:50:67:ab:c9:29:77:16:88:ba:dd:ed:3f:83:d6:
e3:05:f4:91:fc:cd:4b:02:5b:1c:37:57:b8:aa:32:
4e:ac:d4:da:1c:8f:88:f2:0c:ca:39:61:bb:9c:80:
3e:17:c1:11:e9:20:3f:db:49:d7:a6:ee:0b:14:0f:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:57:2D:D8:D1:4E:33:97:B8:38:0F:02:6E:6F:69:CD:5B:7C:46
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/UrlXLdjRTjOXuDgPAm5vac1bfEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:3d1::/48
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
2a14:3f87:9800::/38
2a14:3f87:f000::/38
2a14:3f87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
2b:07:1a:db:2b:3d:de:46:28:61:34:58:2e:5a:31:de:c8:05:
f0:0f:68:9b:79:26:1c:05:c2:f5:3e:91:53:15:af:0a:7a:fb:
ea:9e:d4:8b:77:26:96:1d:57:07:bb:18:64:70:a7:8f:94:df:
6e:da:05:54:b9:58:e0:20:2e:2e:e6:0c:35:16:11:a1:4b:93:
c9:fc:72:c5:17:57:37:b8:69:7c:5b:b7:5a:58:e0:4a:32:af:
19:83:be:35:ba:c9:be:af:e8:e4:08:57:f9:84:67:a9:18:08:
64:18:e0:45:a3:4f:93:ee:e0:aa:98:33:20:ce:1c:46:bb:e3:
d9:b0:d5:38:3c:61:33:44:f6:36:99:3e:d0:3f:d2:df:df:ff:
23:73:0d:36:fa:8c:1d:e1:de:74:80:1a:9d:4b:19:e9:35:5c:
64:a8:bf:db:18:0f:57:d9:98:38:e1:dc:d0:1f:55:4c:11:d1:
e8:72:eb:dc:99:cd:fc:f3:5b:0c:44:e8:b4:04:50:25:dc:45:
56:f0:f2:c5:11:21:46:59:54:44:7b:f4:0f:67:02:3d:3d:3e:
97:7b:4b:17:6a:0b:e4:18:59:c7:65:8a:94:93:5e:97:cc:6c:
d7:62:ae:d3:d3:a5:06:a5:f9:02:c1:54:4a:aa:25:d4:12:cb:
5b:78:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net