Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/jK-fgL-84H-nz8P2-unUlt_zDp0.roa
File: jK-fgL-84H-nz8P2-unUlt_zDp0.roa (raw, json)
Hash identifier: 42XHQLdf3D3MRHHZnH6gHRYg1CDTU+XIr/vbKYGS13k=
Subject key identifier: 8C:AF:9F:80:BF:BC:E0:7F:A7:CF:C3:F6:FA:E9:D4:96:DF:F3:0E:9D
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 01936CDA09D8F4EB1A10DE785040690299BF
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/jK-fgL-84H-nz8P2-unUlt_zDp0.roa
Signing time: Wed 27 Nov 2024 09:00:48 +0000
ROA not before: Wed 27 Nov 2024 09:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47253
IP address blocks: 46.18.16.0/21 maxlen: 21
46.18.16.0/24 maxlen: 24
46.18.17.0/24 maxlen: 24
46.18.18.0/24 maxlen: 24
46.18.19.0/24 maxlen: 24
46.18.20.0/24 maxlen: 24
46.18.21.0/24 maxlen: 24
46.18.22.0/24 maxlen: 24
46.18.23.0/24 maxlen: 24
62.16.64.0/20 maxlen: 20
62.16.64.0/24 maxlen: 24
62.16.65.0/24 maxlen: 24
62.16.66.0/24 maxlen: 24
62.16.67.0/24 maxlen: 24
62.16.68.0/24 maxlen: 24
62.16.69.0/24 maxlen: 24
62.16.70.0/24 maxlen: 24
62.16.71.0/24 maxlen: 24
62.16.72.0/24 maxlen: 24
62.16.73.0/24 maxlen: 24
62.16.74.0/24 maxlen: 24
62.16.75.0/24 maxlen: 24
62.16.76.0/24 maxlen: 24
62.16.77.0/24 maxlen: 24
62.16.78.0/24 maxlen: 24
62.16.79.0/24 maxlen: 24
93.184.0.0/20 maxlen: 20
93.184.0.0/22 maxlen: 22
93.184.0.0/24 maxlen: 24
93.184.1.0/24 maxlen: 24
93.184.2.0/24 maxlen: 24
93.184.3.0/24 maxlen: 24
93.184.4.0/22 maxlen: 22
93.184.4.0/24 maxlen: 24
93.184.5.0/24 maxlen: 24
93.184.6.0/24 maxlen: 24
93.184.7.0/24 maxlen: 24
93.184.8.0/22 maxlen: 22
93.184.8.0/24 maxlen: 24
93.184.9.0/24 maxlen: 24
93.184.10.0/24 maxlen: 24
93.184.11.0/24 maxlen: 24
93.184.12.0/22 maxlen: 22
93.184.12.0/24 maxlen: 24
93.184.13.0/24 maxlen: 24
93.184.14.0/24 maxlen: 24
93.184.15.0/24 maxlen: 24
185.6.56.0/22 maxlen: 24
185.6.56.0/24 maxlen: 24
185.6.57.0/24 maxlen: 24
185.6.58.0/24 maxlen: 24
185.6.59.0/24 maxlen: 24
193.124.248.0/22 maxlen: 22
193.124.248.0/24 maxlen: 24
193.124.249.0/24 maxlen: 24
193.124.250.0/24 maxlen: 24
193.124.251.0/24 maxlen: 24
194.58.72.0/22 maxlen: 22
194.58.72.0/24 maxlen: 24
194.58.73.0/24 maxlen: 24
194.58.74.0/24 maxlen: 24
194.58.75.0/24 maxlen: 24
194.58.76.0/23 maxlen: 23
194.58.76.0/24 maxlen: 24
194.58.77.0/24 maxlen: 24
194.58.152.0/23 maxlen: 23
194.58.152.0/24 maxlen: 24
194.58.153.0/24 maxlen: 24
194.58.220.0/23 maxlen: 23
194.58.220.0/24 maxlen: 24
194.58.221.0/24 maxlen: 24
194.58.240.0/24 maxlen: 24
194.58.242.0/23 maxlen: 23
194.58.244.0/23 maxlen: 23
194.58.247.0/24 maxlen: 24
2a02:26d0::/32 maxlen: 32
2a02:26d0::/48 maxlen: 48
2a02:26d0:1::/48 maxlen: 48
2a02:26d0:2::/48 maxlen: 48
2a02:26d0:4::/48 maxlen: 48
2a02:26d0:9::/48 maxlen: 48
2a02:26d0:a::/48 maxlen: 48
2a02:26d0:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:da:09:d8:f4:eb:1a:10:de:78:50:40:69:02:99:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Nov 27 09:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8caf9f80bfbce07fa7cfc3f6fae9d496dff30e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:01:52:2a:03:ca:23:1e:38:c3:a5:2b:9b:
83:f4:2e:2d:47:54:a0:df:e0:97:04:1d:53:2e:cf:
dd:84:f4:c2:5c:39:6e:86:24:9c:31:dc:88:3d:87:
d0:d2:32:4d:54:10:35:1f:f2:ed:60:8a:bd:1a:b3:
dc:4e:b4:d1:0c:94:40:99:65:c0:3f:1a:a5:93:79:
17:60:11:ea:1e:52:3e:da:65:c1:ec:4b:48:1d:da:
78:4c:7c:24:0a:3f:0d:d7:ef:64:f3:0c:50:d8:73:
cb:d7:5d:e4:9e:0e:8c:4c:7d:de:92:a1:50:5f:86:
46:9d:53:cd:20:83:57:64:00:98:94:37:87:5d:64:
f5:3f:af:8f:f0:53:79:26:29:e6:aa:bf:31:3b:04:
33:28:bb:ed:36:35:19:aa:e3:fa:c4:a8:27:a0:98:
5d:d7:b0:fe:0d:fe:b9:13:e4:52:63:3f:36:e8:55:
31:6f:05:e2:dd:12:b4:be:94:2e:a2:cb:4a:d9:40:
2c:60:45:e6:9d:35:fd:10:4b:47:fb:cc:8d:f7:6b:
c2:f5:e2:35:b6:6e:ea:dd:1f:f9:78:7c:5a:cf:25:
09:a6:9f:8c:93:e9:d7:09:ff:47:05:e0:87:1d:35:
fc:32:db:33:46:7b:7d:8d:af:f2:0d:6e:3b:5a:0d:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:9F:80:BF:BC:E0:7F:A7:CF:C3:F6:FA:E9:D4:96:DF:F3:0E:9D
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/jK-fgL-84H-nz8P2-unUlt_zDp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.16.0/21
62.16.64.0/20
93.184.0.0/20
185.6.56.0/22
193.124.248.0/22
194.58.72.0-194.58.77.255
194.58.152.0/23
194.58.220.0/23
194.58.240.0/24
194.58.242.0-194.58.245.255
194.58.247.0/24
IPv6:
2a02:26d0::/32
Signature Algorithm: sha256WithRSAEncryption
47:0f:97:73:af:63:6c:54:7b:60:d0:24:81:35:6b:22:de:35:
0e:b1:1e:69:3d:dd:49:eb:df:b3:b5:32:b4:04:86:05:89:1d:
5f:c9:6b:2e:b1:d8:c9:11:a1:5e:fc:de:be:35:80:03:06:2a:
89:54:f7:87:f8:94:2c:f7:f2:1e:9e:39:1f:07:f8:52:a5:e3:
cc:35:3a:43:a1:3c:89:a0:12:f3:9f:67:44:c6:dd:a9:9d:b9:
0c:ea:b2:a8:d4:2a:1f:f2:25:46:32:d8:4e:93:73:a4:b2:33:
84:16:9a:8c:0f:cd:14:c7:e5:12:d5:ca:f2:e2:4e:0e:78:00:
94:72:32:16:d1:e1:ce:c1:75:52:0c:81:5e:c7:7e:8f:16:5f:
11:f6:fa:16:a2:97:99:ce:b7:f5:0e:bc:28:f4:7b:e9:a6:17:
1e:42:a2:14:17:f6:53:55:3e:07:e6:71:2e:be:91:5c:0f:83:
3f:54:41:e0:eb:a9:23:6b:45:61:f3:a8:de:87:f0:b6:98:07:
1b:1f:c4:95:30:a4:05:3e:9b:40:bc:d9:df:e5:45:de:ac:31:
d5:a5:b2:b5:c7:6f:77:07:c9:b2:d6:9b:39:e3:d9:5a:49:5a:
79:2b:db:59:d5:d9:1b:22:38:68:46:1b:20:5f:71:ce:30:c7:
43:64:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:26 2024 by rpki-client on console.sobornost.net