Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/fu3fTbfY5aLM6ermTRPSe6KlEAA.roa
File: fu3fTbfY5aLM6ermTRPSe6KlEAA.roa (raw, json)
Hash identifier: Lz5cOpD94hz261SSe3ANu3kztdBah33gSQOps3Urlvs=
Subject key identifier: 7E:ED:DF:4D:B7:D8:E5:A2:CC:E9:EA:E6:4D:13:D2:7B:A2:A5:10:00
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 019300B14B486267CD4AA73B4F42E7B2C437
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/fu3fTbfY5aLM6ermTRPSe6KlEAA.roa
Signing time: Wed 06 Nov 2024 08:57:19 +0000
ROA not before: Wed 06 Nov 2024 08:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48305
IP address blocks: 45.148.0.0/22 maxlen: 22
91.242.128.0/22 maxlen: 24
91.242.128.0/24 maxlen: 24
91.242.130.0/23 maxlen: 23
91.242.132.0/22 maxlen: 22
185.86.184.0/22 maxlen: 22
2a03:77e0:3301::/48 maxlen: 48
2a03:77e0:3302::/48 maxlen: 48
2a03:77e0:4401::/48 maxlen: 48
2a03:77e0:5301::/48 maxlen: 48
2a0f:4400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:b1:4b:48:62:67:cd:4a:a7:3b:4f:42:e7:b2:c4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Nov 6 08:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eeddf4db7d8e5a2cce9eae64d13d27ba2a51000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:39:88:e8:d0:d9:58:9c:ac:b5:10:0c:65:
62:a7:eb:a6:93:ca:ab:47:09:f3:62:cb:fb:c9:86:
1f:03:80:4b:2d:40:3a:ec:2f:bf:6e:9c:86:22:3d:
3f:4a:54:11:4b:b6:d8:69:96:c8:18:2e:3c:5c:20:
3c:db:da:c2:d4:8a:b7:5a:53:cc:18:85:8a:cd:35:
fc:c1:b9:c2:33:43:db:41:8c:4a:36:68:66:17:a5:
31:ac:e4:41:ff:ff:5b:f5:8a:7d:cc:a1:32:83:c0:
ce:ae:41:b6:d9:8e:28:c2:a6:e0:fd:fa:c4:66:76:
d3:12:d8:ca:1b:a6:ee:8e:da:89:74:bd:39:cd:7a:
e2:ae:ba:a8:51:65:82:16:85:30:f7:0d:40:16:74:
5b:aa:cc:a0:10:1d:71:5b:6a:3d:30:e1:fb:66:b1:
8b:bb:a9:e1:d9:e0:04:04:90:cf:7b:b6:a6:13:b2:
e5:e2:83:cb:4c:10:99:41:16:87:b4:7c:b3:4c:be:
be:b2:53:a3:c5:f9:c9:92:a5:59:47:fe:b7:cf:56:
a6:59:7a:d6:cb:43:a2:ed:78:03:be:7f:26:25:0c:
9c:cd:14:94:ed:7f:9b:18:2a:3c:76:3e:56:d6:75:
b9:a1:86:3c:ec:fc:be:ba:bb:fc:62:92:cb:6c:55:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:DF:4D:B7:D8:E5:A2:CC:E9:EA:E6:4D:13:D2:7B:A2:A5:10:00
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/fu3fTbfY5aLM6ermTRPSe6KlEAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.0.0/22
91.242.128.0/21
185.86.184.0/22
IPv6:
2a03:77e0:3301::-2a03:77e0:3302:ffff:ffff:ffff:ffff:ffff
2a03:77e0:4401::/48
2a03:77e0:5301::/48
2a0f:4400::/29
Signature Algorithm: sha256WithRSAEncryption
03:36:66:f4:92:ad:0b:c2:3b:bd:ea:ef:da:95:1e:74:68:49:
04:ab:7e:9c:39:b8:2a:28:05:fc:f3:da:26:96:26:a9:d7:08:
09:d5:23:92:81:e2:0f:e3:b3:b4:0b:50:c2:ee:32:bd:e9:2c:
3f:45:9d:37:4d:57:eb:83:76:49:88:30:03:a3:ec:83:55:52:
0b:e4:f4:d1:01:d7:53:09:e4:28:0d:17:6a:04:2b:fe:eb:a2:
55:de:e5:4d:f1:80:e1:18:d8:00:f7:4e:db:67:e6:97:ac:19:
de:8f:1f:b2:c0:0c:06:1f:73:ab:7a:c9:3d:c5:bb:d7:b3:29:
33:5e:b0:0b:d8:17:56:a0:24:30:f8:fb:79:2e:81:0d:28:6d:
28:e8:ad:ad:cc:1a:aa:f4:ae:57:5d:ae:03:29:1b:67:c5:34:
3c:ad:27:f3:01:3f:21:87:ad:13:0e:18:ee:3f:03:15:1b:1f:
d4:9e:69:a9:af:b0:1a:65:6a:d0:3c:06:1b:a8:0c:c1:43:cf:
9e:4c:5f:89:1c:b9:e6:3d:b5:ea:92:6e:c3:ff:9a:29:32:27:
a1:95:13:62:de:fd:f4:60:94:fb:57:92:8f:ef:1b:f3:60:16:
01:d9:eb:30:ad:7c:3b:96:7e:9f:5f:d8:65:39:cb:f1:f7:5f:
14:48:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:16 2024 by rpki-client on console.sobornost.net