Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/RgBtkwB9OBO-89gFJt-kR0t_o9M.roa
File: RgBtkwB9OBO-89gFJt-kR0t_o9M.roa (raw, json)
Hash identifier: aydZIEItPZxogwigCZx0iEXANaajXTbru+A12QhXJJM=
Subject key identifier: 46:00:6D:93:00:7D:38:13:BE:F3:D8:05:26:DF:A4:47:4B:7F:A3:D3
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 0193DE6817C6B9D8F856A338CABC05B144FA
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/RgBtkwB9OBO-89gFJt-kR0t_o9M.roa
Signing time: Thu 19 Dec 2024 10:13:03 +0000
ROA not before: Thu 19 Dec 2024 10:13:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6738
IP address blocks: 46.18.192.0/21 maxlen: 24
185.86.176.0/22 maxlen: 24
195.114.26.0/23 maxlen: 24
2a03:3280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:68:17:c6:b9:d8:f8:56:a3:38:ca:bc:05:b1:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Dec 19 10:13:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46006d93007d3813bef3d80526dfa4474b7fa3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:ea:bb:23:29:6c:5d:c2:1a:79:a2:e0:74:
02:fb:5d:da:ff:85:c9:fc:e8:e7:30:90:91:3e:2d:
74:29:96:c6:b5:80:0d:70:85:8d:b9:24:84:61:3a:
50:1a:74:a1:0e:17:0a:7c:5a:cb:da:6f:6a:33:18:
fd:84:01:a0:19:ac:ca:58:6c:05:24:0a:eb:c9:fb:
fe:73:fb:f1:79:a3:1e:26:51:c3:55:9c:67:d4:ed:
fc:6f:83:9c:5d:77:d1:26:fb:d8:d8:4e:95:99:27:
ba:e9:b5:5d:17:29:01:7a:68:36:04:41:c9:db:a5:
b7:90:fa:bd:41:f2:e8:8c:88:83:2b:c4:fe:93:10:
14:f3:56:2a:a6:73:de:d3:84:cb:e2:a2:4e:56:02:
9f:fb:dd:d4:69:bb:14:b5:ec:50:5f:c6:b2:ea:b0:
d9:11:4d:05:b1:38:7b:48:58:a4:40:da:1b:0c:78:
35:73:18:73:b9:8b:05:05:d2:dd:46:56:61:36:79:
f1:d4:64:b1:1b:db:45:25:ac:72:95:01:b8:26:38:
f8:93:60:78:3e:72:78:b3:0a:5c:36:42:72:5d:99:
04:77:9e:c3:36:df:3b:80:d8:59:e4:5d:cf:62:77:
a6:fb:f1:ed:ee:2f:22:74:dd:08:55:79:1e:6f:7b:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:6D:93:00:7D:38:13:BE:F3:D8:05:26:DF:A4:47:4B:7F:A3:D3
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/RgBtkwB9OBO-89gFJt-kR0t_o9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.192.0/21
185.86.176.0/22
195.114.26.0/23
IPv6:
2a03:3280::/32
Signature Algorithm: sha256WithRSAEncryption
41:89:b7:5d:36:06:99:15:92:65:da:48:6c:04:63:5b:13:57:
6c:3e:f5:46:ad:49:45:5c:ce:ea:b5:2e:96:ae:1d:77:42:6c:
7c:17:b5:cf:8f:b3:46:d8:07:54:2f:03:2a:b5:44:0f:ff:e2:
42:e0:a2:33:a0:81:60:5c:8b:27:54:62:5c:5e:86:f5:45:04:
13:f7:4c:1b:ff:1b:3e:c2:91:64:00:24:9b:db:e2:d4:00:a9:
02:50:a6:88:8a:20:c7:41:f2:36:45:fe:34:60:d6:f2:a5:05:
8e:73:5e:f4:93:5b:3b:f7:9a:9a:fd:1c:07:bd:7d:45:bb:8f:
15:d9:f9:e6:53:7f:a1:57:fd:b3:34:85:d2:20:bb:0e:f6:73:
d5:ca:0c:54:e9:5f:f1:97:2d:2d:b3:78:db:85:08:6b:ff:f6:
79:d3:99:9e:d1:2f:76:66:95:10:02:71:58:3d:27:a4:5e:fb:
c8:6c:df:1b:9a:9b:5a:11:01:38:5a:c3:8a:80:98:6b:8a:54:
ee:07:e9:b3:58:21:7a:47:8a:43:a0:29:a3:86:a2:a8:1c:5d:
a7:92:8b:a5:ac:2f:f4:f0:9e:a3:05:c9:1d:dc:3c:90:3a:c5:
10:49:0e:53:e3:3a:62:fe:40:d6:f2:09:53:ec:c4:ac:4b:c3:
76:e4:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net