Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Jm3I-nHJHsfkUoZy9w7_0xYlu5I.roa
File: Jm3I-nHJHsfkUoZy9w7_0xYlu5I.roa (raw, json)
Hash identifier: wHEkJcc/3Ymo4/Wn1mYfftJWtGM0qnzX9yOfUi8brdY=
Subject key identifier: 26:6D:C8:FA:71:C9:1E:C7:E4:52:86:72:F7:0E:FF:D3:16:25:BB:92
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0193D5101ACF39D20864BCF31602FB120E9D
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Jm3I-nHJHsfkUoZy9w7_0xYlu5I.roa
Signing time: Tue 17 Dec 2024 14:40:22 +0000
ROA not before: Tue 17 Dec 2024 14:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 45.135.192.0/24 maxlen: 24
45.153.33.0/24 maxlen: 24
92.246.87.0/24 maxlen: 24
195.62.32.0/24 maxlen: 24
2a10:ca80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:10:1a:cf:39:d2:08:64:bc:f3:16:02:fb:12:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Dec 17 14:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=266dc8fa71c91ec7e4528672f70effd31625bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:03:0c:bb:af:9f:f3:30:64:e3:68:60:82:
8e:fd:4a:53:7b:77:40:b8:84:22:a4:0e:f6:a4:d7:
6f:a5:af:4a:98:45:cb:d2:35:9e:5c:7b:79:36:6a:
5e:ea:1b:5f:02:b1:84:86:0d:e7:f1:d7:09:d0:5b:
de:1f:c6:a4:06:42:08:5c:9d:7d:b9:3a:96:39:b7:
1f:75:d0:5e:0e:b6:d0:9b:ee:1d:9b:5c:8c:41:8f:
da:ed:fd:5b:70:05:72:a7:55:19:4b:be:94:f4:b4:
f8:61:ee:ce:16:8d:81:76:b3:56:5c:46:7e:6d:78:
a2:e2:3c:24:89:68:ce:cc:0c:02:c5:d7:fa:88:ff:
1c:72:72:f4:25:3b:4d:6f:5e:21:24:39:2b:f3:8f:
25:13:3f:be:27:b0:d5:e1:55:7e:dc:a0:49:c0:90:
c0:cf:4a:be:96:07:a3:85:27:3e:df:3c:9a:c6:5e:
5c:9f:1f:60:a6:a0:9f:fa:82:dd:a9:4e:07:d0:1f:
8d:88:b4:a1:34:60:69:3c:86:1e:0f:f3:b5:bb:79:
22:b7:c3:5c:94:a8:f2:13:3d:53:14:d8:70:c0:dc:
49:2f:fe:10:7c:cb:29:83:70:f9:cc:6a:96:1a:46:
38:6c:e1:48:97:5e:51:c2:ac:de:a7:4a:3d:f8:bc:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:C8:FA:71:C9:1E:C7:E4:52:86:72:F7:0E:FF:D3:16:25:BB:92
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Jm3I-nHJHsfkUoZy9w7_0xYlu5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.192.0/24
45.153.33.0/24
92.246.87.0/24
195.62.32.0/24
IPv6:
2a10:ca80::/48
Signature Algorithm: sha256WithRSAEncryption
81:f6:90:fc:65:bc:39:1a:fa:8a:21:ea:66:8b:ba:0f:a2:8a:
61:e9:f5:2d:3b:e6:2d:31:b0:ae:4e:4f:0d:37:6b:5a:89:58:
58:b2:09:3a:5a:20:2a:51:d6:c7:b5:e3:a1:97:fd:de:33:4b:
0a:7c:d0:ad:db:07:fa:d6:e2:1e:25:e8:39:b5:ed:81:65:d1:
99:11:e7:31:ab:a4:7e:8c:fa:1e:ce:2a:4c:0f:05:9a:f3:c9:
d9:59:81:d6:07:cc:22:21:c1:7d:88:70:20:33:f8:61:e5:8b:
b4:04:12:ec:42:bc:bf:f2:a7:6c:0c:c5:a2:ba:4a:aa:04:51:
e8:fc:db:18:67:da:33:3d:fc:30:17:cf:b3:2d:5c:13:a5:34:
74:31:e4:e3:95:bf:8b:66:89:9c:39:44:68:76:ab:4b:60:3a:
bc:0e:5e:e4:eb:50:f1:5c:e7:e6:39:1b:98:41:1a:cc:07:45:
b4:68:df:2c:5d:14:c5:2e:78:2f:c1:9f:31:a4:5b:2b:5e:7e:
98:f0:e7:e6:cb:3b:5f:74:82:0d:49:c5:1b:a5:75:c6:4c:53:
0e:6e:99:76:3f:20:cd:2c:7b:31:df:5d:95:36:8a:11:34:8f:
5e:15:3f:65:08:ee:c1:2c:4b:cc:79:74:a8:32:90:ad:1d:39:
be:5c:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:12 2024 by rpki-client on console.sobornost.net