Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mDHK5V_4axmCrP5eIjL9dAqjXCU.roa
File: mDHK5V_4axmCrP5eIjL9dAqjXCU.roa (raw, json)
Hash identifier: spkWcKnKduXR0JqjeTqPN9/lGSNj/SnejemVMNbEIdA=
Subject key identifier: 98:31:CA:E5:5F:F8:6B:19:82:AC:FE:5E:22:32:FD:74:0A:A3:5C:25
Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial: 0193A1B0DB25E34F6BD02763EFF791597B3A
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mDHK5V_4axmCrP5eIjL9dAqjXCU.roa
Signing time: Sat 07 Dec 2024 15:15:42 +0000
ROA not before: Sat 07 Dec 2024 15:15:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60880
IP address blocks: 5.133.84.0/22 maxlen: 22
5.133.84.0/24 maxlen: 24
185.197.188.0/22 maxlen: 22
185.205.240.0/22 maxlen: 22
192.145.24.0/22 maxlen: 22
194.164.116.0/23 maxlen: 23
2a0a:7cc0::/29 maxlen: 29
2a0a:7cc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:b0:db:25:e3:4f:6b:d0:27:63:ef:f7:91:59:7b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
Validity
Not Before: Dec 7 15:15:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9831cae55ff86b1982acfe5e2232fd740aa35c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:ba:fc:19:b7:c9:70:8d:56:80:ee:6c:3c:
86:46:e3:e9:28:dc:57:cc:12:91:3c:e4:2f:39:9b:
67:71:6a:bb:01:19:2e:06:d1:30:e1:47:c2:13:03:
86:22:c9:8b:79:92:08:38:aa:f9:81:ab:ce:61:84:
e7:ff:72:41:6f:93:a5:01:08:47:5c:f0:b8:6f:da:
ce:fd:27:82:0a:42:42:31:02:19:ce:ed:cf:0f:53:
c7:e1:b7:ae:28:15:91:3d:3a:8d:24:7a:f0:ce:ef:
0d:99:d3:c2:d2:f6:1b:d8:48:c5:51:cc:bb:53:53:
12:c2:ea:0a:b2:6c:69:4e:59:fa:c8:f9:a0:00:7f:
a2:88:ff:85:94:6b:d7:ba:84:12:d5:d1:b8:1f:2e:
55:01:1b:c1:4b:34:97:f8:6f:52:fa:6d:72:ec:10:
d2:1f:37:14:6e:62:72:1e:71:3d:e1:00:f2:90:34:
60:51:1c:cc:0a:77:47:0d:68:63:c4:5c:51:da:62:
63:80:f4:10:0e:f6:6c:ab:01:97:be:ab:22:10:c9:
2f:c9:5f:1b:44:d6:f6:9a:b4:6b:09:08:d9:a3:0c:
2f:33:5e:36:38:ac:1c:b3:54:a7:21:80:4b:14:49:
16:5a:59:21:88:00:84:16:ff:6d:9e:a8:62:08:30:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:CA:E5:5F:F8:6B:19:82:AC:FE:5E:22:32:FD:74:0A:A3:5C:25
X509v3 Authority Key Identifier:
keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/mDHK5V_4axmCrP5eIjL9dAqjXCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.84.0/22
185.197.188.0/22
185.205.240.0/22
192.145.24.0/22
194.164.116.0/23
IPv6:
2a0a:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:b4:61:c9:59:41:94:e3:da:6d:bd:3a:7e:a7:c2:94:b8:5a:
02:b0:cd:3f:43:d2:68:14:5c:e0:19:83:ab:b3:9e:61:53:8d:
fb:c2:c2:fa:88:94:cd:08:87:04:4f:9d:f6:2e:5e:c4:64:25:
00:c8:34:fe:e9:5a:40:1e:74:90:32:50:01:35:4f:8f:fb:f2:
0d:7b:c2:36:45:b1:fa:aa:77:23:3c:11:16:86:e0:bf:36:1c:
eb:96:0c:21:b9:ca:1a:f1:4a:5a:df:53:92:ca:22:95:11:e2:
32:bc:aa:10:d2:92:53:d4:54:a1:cd:29:2d:f5:a0:e2:de:a3:
0c:97:45:a5:fa:96:22:57:df:3a:01:56:14:e6:08:4f:4d:3b:
72:5b:db:a6:12:71:9e:31:99:df:c1:23:a9:cf:17:d8:9b:46:
eb:83:32:f6:1e:f8:c4:11:28:d7:5b:84:d4:ec:b2:b7:5a:f0:
30:47:9a:0d:6a:d9:92:27:be:1d:a6:38:87:c0:ff:52:85:03:
c8:ed:6b:b0:2b:cb:ef:5f:fb:97:bb:bb:0c:38:a4:eb:32:ea:
d7:5f:65:c3:81:6f:c9:7a:6f:52:1f:5c:40:4a:d8:26:37:17:
c8:ee:ba:67:87:e1:9f:29:49:0a:d9:28:e8:69:b9:6f:93:a0:
b6:65:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:23 2024 by rpki-client on console.sobornost.net