Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/mbTBfa30Vn-aGArwr8egm43xlOI.roa
File: mbTBfa30Vn-aGArwr8egm43xlOI.roa (raw, json)
Hash identifier: p7SBJ+F5C7TuTbBvVY/saxVOx6Pp2xVPnAzgHs1DVz8=
Subject key identifier: 99:B4:C1:7D:AD:F4:56:7F:9A:18:0A:F0:AF:C7:A0:9B:8D:F1:94:E2
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 018CC42545F088EA98E8360C6CB166F63A97
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/mbTBfa30Vn-aGArwr8egm43xlOI.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209905
IP address blocks: 185.191.72.0/24 maxlen: 24
185.191.73.0/24 maxlen: 24
185.191.74.0/24 maxlen: 24
185.191.75.0/24 maxlen: 24
185.191.74.0/23 maxlen: 23
185.191.72.0/23 maxlen: 23
185.191.72.0/22 maxlen: 22
45.65.74.0/24 maxlen: 24
45.65.75.0/24 maxlen: 24
45.65.72.0/23 maxlen: 23
45.65.72.0/22 maxlen: 22
45.65.72.0/24 maxlen: 24
45.65.73.0/24 maxlen: 24
45.65.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:f0:88:ea:98:e8:36:0c:6c:b1:66:f6:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b4c17dadf4567f9a180af0afc7a09b8df194e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:32:69:36:76:43:28:d8:3d:3e:8d:ea:e4:
70:5b:fb:79:5a:53:cb:ad:d5:f8:9d:d3:34:b3:8e:
a9:ec:39:dd:31:2b:94:34:bf:55:c6:4d:00:58:38:
c8:ca:cd:4a:96:25:d2:56:49:5b:85:14:25:43:19:
64:5a:5c:98:39:52:b6:5c:02:e0:81:10:fe:17:87:
f6:76:8b:b3:61:9d:2f:f4:69:63:86:eb:1c:80:20:
2f:b9:4f:49:82:1b:ad:4d:45:f1:06:eb:d3:06:4c:
ee:38:a8:73:2f:5d:f2:1c:4c:37:e7:c7:fd:40:6b:
a4:78:32:12:46:79:82:01:eb:be:81:17:98:bb:0d:
60:f6:84:32:fe:8e:5e:b5:ec:bc:f3:c0:5d:23:ed:
1f:f8:5d:12:c1:46:b1:74:a4:b9:7e:d9:42:f6:ec:
ab:65:e8:d3:a9:92:0e:c1:ac:4b:ce:e6:08:f2:54:
a8:ed:31:48:0d:ed:24:99:c3:c7:00:85:2d:9e:a4:
67:4b:0b:48:c2:d2:41:e5:37:d1:38:ac:a3:cc:e0:
11:11:1b:3a:55:0a:5c:64:25:0f:2b:67:1d:e4:62:
9d:3d:ba:11:56:ee:bc:90:73:95:83:d9:41:19:33:
a8:88:bd:b5:a5:49:03:cc:d9:e2:47:fe:bd:48:58:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:C1:7D:AD:F4:56:7F:9A:18:0A:F0:AF:C7:A0:9B:8D:F1:94:E2
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/mbTBfa30Vn-aGArwr8egm43xlOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.72.0/22
185.191.72.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e5:da:6c:4c:0e:7b:8c:50:89:5b:5f:73:96:f5:d6:0b:cf:
f8:f8:20:af:2c:2a:0c:65:f0:4b:8d:b2:ce:fa:64:7d:7d:66:
51:2d:27:de:68:c8:ac:74:25:cc:54:a4:89:b9:20:85:45:cd:
f0:d3:2e:b4:8f:8b:ec:17:d0:c8:18:cd:a3:3d:12:02:63:06:
c3:97:76:82:4a:ae:81:cb:22:39:a6:c8:f4:42:f4:be:60:43:
8b:52:20:4e:f7:6d:c8:f4:c2:de:7d:14:b9:3a:d6:0a:38:f0:
75:8d:d9:56:50:73:67:3a:5f:0f:1f:ab:a8:28:6a:9c:e1:32:
ab:09:95:ab:de:bf:05:28:6b:2f:a7:2a:10:10:c9:48:c4:2a:
c6:f0:c0:0a:c9:f8:87:0b:cc:09:a7:f5:2e:ab:49:d7:7a:d4:
a8:25:07:0b:07:e3:4b:37:7e:cc:ef:35:34:5f:41:c1:88:ad:
99:17:74:9c:f7:9b:9e:53:86:21:25:a9:62:f4:4f:13:30:ad:
53:a5:c6:c7:54:18:45:71:d6:13:6e:05:60:28:a4:cb:48:d6:
19:d5:5c:cb:c7:75:67:24:b6:98:ad:31:69:98:e0:de:61:e6:
fd:46:ce:50:7e:aa:bc:bf:ec:11:b1:ef:8e:78:ca:cf:5b:93:
70:0e:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net