Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Kyg_sqFzWlHc7EQv9uj_5k2ifTo.roa
File: Kyg_sqFzWlHc7EQv9uj_5k2ifTo.roa (raw, json)
Hash identifier: ToBo+PpeI7HTvr9tyiI9Kj9lbWBBfHz1rwCHPVLDw6E=
Subject key identifier: 2B:28:3F:B2:A1:73:5A:51:DC:EC:44:2F:F6:E8:FF:E6:4D:A2:7D:3A
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 019079E12D0A2E9BC2E5EDA5239A0D70715E
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Kyg_sqFzWlHc7EQv9uj_5k2ifTo.roa
Signing time: Wed 03 Jul 2024 18:35:18 +0000
ROA not before: Wed 03 Jul 2024 18:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.0.0/16 maxlen: 24
212.236.0.0/18 maxlen: 18
212.236.0.0/24 maxlen: 24
212.236.1.0/24 maxlen: 24
212.236.2.0/24 maxlen: 24
212.236.11.0/24 maxlen: 24
212.236.12.0/24 maxlen: 24
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 32
2a02:2750:cafe::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:e1:2d:0a:2e:9b:c2:e5:ed:a5:23:9a:0d:70:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jul 3 18:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b283fb2a1735a51dcec442ff6e8ffe64da27d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:e1:27:e9:1b:c9:88:cd:61:cb:e2:8f:1c:
5a:91:f7:ff:b4:c6:b1:0f:00:6b:46:78:4f:62:c0:
64:8b:59:02:f2:10:46:77:50:82:12:3f:cc:21:d3:
e8:81:c2:40:10:2f:3e:ac:fe:a4:c9:34:43:b8:a7:
d7:c0:fa:43:8a:11:2d:73:4a:37:33:08:8f:61:34:
fb:3a:27:e4:d2:a6:44:e7:95:13:98:15:78:31:8f:
48:c0:29:e6:8c:67:92:6f:7b:43:7c:41:6f:23:b9:
9d:9f:e5:ad:6a:ab:6f:d5:8c:d7:52:00:db:b7:00:
fd:87:5a:a3:4c:89:f3:05:12:c0:a1:08:e9:6c:9a:
cc:f4:a7:0c:a7:46:cb:9f:3b:31:ab:e7:21:e8:4b:
22:1a:58:c5:cd:ed:f5:8a:6d:88:c8:2a:01:40:4c:
fa:ad:12:9e:4e:b1:2a:7b:06:37:03:d9:97:74:8b:
5a:c0:4b:6f:c0:db:3a:45:14:0e:ec:9c:08:da:3b:
a3:40:3f:c6:6b:03:07:05:ed:14:3c:a7:ea:34:ac:
a0:fc:20:6d:fd:f4:93:cb:04:eb:be:c2:75:d5:0b:
0f:25:8f:62:db:d3:b4:c9:1e:04:b1:36:b5:67:5f:
2a:49:9d:fb:5e:2c:02:d1:ac:e0:0f:c8:84:8c:48:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:3F:B2:A1:73:5A:51:DC:EC:44:2F:F6:E8:FF:E6:4D:A2:7D:3A
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Kyg_sqFzWlHc7EQv9uj_5k2ifTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
a1:01:28:f4:36:07:a8:0a:11:a6:63:35:03:76:5c:41:43:2e:
cd:7e:ca:22:c9:30:6f:b1:49:cb:41:80:8c:fa:e8:e3:45:0b:
3a:c4:8f:e7:da:38:ff:16:77:15:c8:2b:a8:30:a5:88:94:a3:
e2:fb:17:0f:d2:db:00:92:2d:fe:d0:f7:92:20:35:9b:aa:4b:
d9:c9:fb:04:c6:db:6b:39:47:bb:b4:ec:70:7a:22:16:c3:62:
5b:30:2c:5a:b7:66:ec:72:7b:a3:ea:fa:a4:38:79:93:d3:f0:
be:52:15:19:ea:d4:b2:6b:08:3b:0d:a1:fb:0c:66:74:d4:6e:
99:d8:07:e3:be:d0:06:6b:bf:d7:eb:f1:a2:0d:43:1b:f7:e0:
a2:12:d4:cb:b2:27:90:d8:3b:62:a3:dc:7f:26:f2:fd:c4:2d:
fa:1d:fe:6b:36:f5:48:97:d4:2c:3d:6a:10:c3:8c:12:42:27:
bc:9d:2f:59:58:71:25:22:80:af:55:c9:00:65:de:9d:fa:3c:
de:5d:5e:c0:cb:3e:aa:2d:41:5e:f2:fe:2d:82:eb:df:a5:12:
49:de:ae:89:fc:5e:59:8e:87:92:d2:e9:96:65:e8:f4:cd:4e:
c7:23:05:ed:fe:7d:9c:dc:d0:b4:f6:0a:1c:f2:a3:bf:49:60:
ae:b5:79:cc
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZB54S0KLpvC5e2lI5oNcHFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjQwNzAzMTgzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjI4M2ZiMmExNzM1YTUxZGNlYzQ0MmZmNmU4ZmZlNjRkYTI3ZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBvhJ+kbyYjNYcvijxxakff/tMax
DwBrRnhPYsBki1kC8hBGd1CCEj/MIdPogcJAEC8+rP6kyTRDuKfXwPpDihEtc0o3
MwiPYTT7Oifk0qZE55UTmBV4MY9IwCnmjGeSb3tDfEFvI7mdn+Wtaqtv1YzXUgDb
twD9h1qjTInzBRLAoQjpbJrM9KcMp0bLnzsxq+ch6EsiGljFze31im2IyCoBQEz6
rRKeTrEqewY3A9mXdItawEtvwNs6RRQO7JwI2jujQD/GawMHBe0UPKfqNKyg/CBt
/fSTywTrvsJ11QsPJY9i29O0yR4EsTa1Z18qSZ37XiwC0azgD8iEjEjVawIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCsoP7Khc1pR3OxEL/bo/+ZNon06MB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvS3lnX3NxRnpXbEhjN0VRdjl1al81azJpZlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQFwxrAAwMA
1OwwDQQCAAIwBwMFACoCJ1AwDQYJKoZIhvcNAQELBQADggEBAKEBKPQ2B6gKEaZj
NQN2XEFDLs1+yiLJMG+xSctBgIz66ONFCzrEj+faOP8WdxXIK6gwpYiUo+L7Fw/S
2wCSLf7Q95IgNZuqS9nJ+wTG22s5R7u07HB6IhbDYlswLFq3Zuxye6Pq+qQ4eZPT
8L5SFRnq1LJrCDsNofsMZnTUbpnYB+O+0AZrv9fr8aINQxv34KIS1MuyJ5DYO2Kj
3H8m8v3ELfod/ms29UiX1Cw9ahDDjBJCJ7ydL1lYcSUigK9VyQBl3p36PN5dXsDL
PqotQV7y/i2C69+lEkneron8XlmOh5LS6ZZl6PTNTscjBe3+fZzc0LT2Chzyo79J
YK61ecw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:05:33 2024 by rpki-client on console.sobornost.net