Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/fBaUYn5MogESh1FFh8BJXBDTzio.roa
File: fBaUYn5MogESh1FFh8BJXBDTzio.roa (raw, json)
Hash identifier: OSbsES9DE3l15gmadgRtmd1HIWiTEpJjZ9s8fQ3XfS0=
Subject key identifier: 7C:16:94:62:7E:4C:A2:01:12:87:51:45:87:C0:49:5C:10:D3:CE:2A
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 01919D1E2054BD4266B212221635CED5AC72
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/fBaUYn5MogESh1FFh8BJXBDTzio.roa
Signing time: Thu 29 Aug 2024 07:51:22 +0000
ROA not before: Thu 29 Aug 2024 07:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206805
IP address blocks: 45.84.152.0/23 maxlen: 24
45.84.154.0/24 maxlen: 24
45.84.155.0/24 maxlen: 24
45.145.188.0/23 maxlen: 23
45.145.190.0/23 maxlen: 23
45.145.190.0/24 maxlen: 24
45.145.191.0/24 maxlen: 24
80.85.248.0/23 maxlen: 23
80.85.250.0/23 maxlen: 23
80.85.252.0/24 maxlen: 24
80.85.253.0/24 maxlen: 24
80.85.254.0/23 maxlen: 24
176.119.0.0/21 maxlen: 21
178.159.32.0/23 maxlen: 24
185.159.111.0/24 maxlen: 24
185.228.48.0/22 maxlen: 24
185.247.192.0/22 maxlen: 24
188.64.149.0/24 maxlen: 24
188.64.150.0/23 maxlen: 24
193.19.100.0/23 maxlen: 24
193.141.230.0/23 maxlen: 23
193.142.20.0/23 maxlen: 23
193.246.144.0/24 maxlen: 24
193.246.150.0/24 maxlen: 24
193.246.153.0/24 maxlen: 24
193.246.159.0/24 maxlen: 24
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00:200::/40 maxlen: 40
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00:300::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:1e:20:54:bd:42:66:b2:12:22:16:35:ce:d5:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Aug 29 07:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c1694627e4ca2011287514587c0495c10d3ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:b0:cd:d3:f6:09:61:65:b5:57:b4:cf:35:
8a:d2:55:ac:42:f0:58:1a:b4:1e:e8:97:94:a6:1b:
64:b3:70:71:58:12:3f:c1:ba:41:f6:de:8a:bf:09:
10:4e:2a:8e:05:7d:f1:c3:fe:31:7b:7f:a1:53:75:
36:9e:e2:56:bb:5e:f3:fd:e3:a9:db:f1:14:2c:44:
1d:0a:c2:f1:43:8e:a2:da:7b:1e:79:99:72:76:78:
be:e9:8e:b9:e3:80:d0:9e:38:da:41:50:6a:24:07:
aa:57:60:3f:a0:48:f2:c3:95:8e:c2:2a:b5:0d:b5:
7e:9e:80:ef:49:f4:5b:dd:19:3e:ce:1f:d1:b3:c3:
44:68:50:e1:9a:40:39:08:3e:92:e8:ce:2a:e8:03:
de:e3:dd:9e:78:6d:be:ec:8a:eb:61:f0:44:37:ce:
69:94:3d:92:ff:eb:e6:8a:ec:73:bb:29:e9:08:48:
b8:ce:57:d7:11:7b:90:3f:ae:65:90:08:78:1a:6f:
e8:8a:5a:de:88:83:b8:b0:89:46:0c:07:94:c2:82:
7b:16:b1:83:e8:85:5f:e6:48:b0:d8:6b:fc:99:8e:
22:84:c3:27:3a:e8:4a:2e:71:3b:19:94:0c:b0:9a:
8b:7e:02:a7:47:d2:f8:1b:a7:43:ef:9c:5d:1c:86:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:16:94:62:7E:4C:A2:01:12:87:51:45:87:C0:49:5C:10:D3:CE:2A
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/fBaUYn5MogESh1FFh8BJXBDTzio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
80.85.248.0/21
176.119.0.0/21
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0-188.64.151.255
193.19.100.0/23
193.141.230.0/23
193.142.20.0/23
193.246.144.0/24
193.246.150.0/24
193.246.153.0/24
193.246.159.0/24
IPv6:
2a0c:ee00::/38
Signature Algorithm: sha256WithRSAEncryption
1e:ea:dd:94:5d:50:55:70:a7:bb:55:5a:ee:f4:20:d4:8e:79:
2c:ee:65:ae:78:9f:9f:24:9f:17:03:cc:43:2c:c1:04:2d:f7:
6f:04:37:ea:2c:39:92:18:9d:7e:40:28:cd:a1:17:38:89:73:
44:c8:45:0a:76:50:cc:98:c1:a0:af:d2:87:99:0e:e4:e9:cb:
e5:3a:a3:a0:7f:63:5f:5a:7f:d7:e3:dd:b8:0b:43:94:94:9c:
a5:68:4a:2e:6e:bf:b1:a2:c6:5e:0c:62:3e:79:db:f1:d6:5d:
0f:33:31:6a:40:d8:4c:50:56:4d:aa:c1:d5:88:a1:82:2d:5c:
0e:34:8c:71:02:ac:2c:6e:9a:cc:c9:a0:da:4c:14:88:f9:72:
0f:88:22:66:ac:dd:a8:c6:30:af:8f:77:ca:cc:2e:6b:f4:66:
90:04:3e:cf:84:71:0c:56:5d:32:40:13:70:15:34:23:05:09:
ed:2b:af:96:ed:ac:ac:53:51:5d:65:63:99:28:e4:4b:d0:3a:
b2:22:48:d5:db:0f:e1:41:bb:75:4b:eb:05:4a:d3:d0:f9:ba:
33:bc:d0:92:cf:77:1b:db:3b:29:df:bf:df:bf:c1:9c:35:3c:
e8:4a:16:5f:31:04:82:0e:22:66:56:57:eb:3f:4f:c0:bf:37:
bf:b7:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:29:40 2024 by rpki-client on console.sobornost.net