Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/g5qya4X3a_DwYpOeF48lKWo3qAg.roa
File: g5qya4X3a_DwYpOeF48lKWo3qAg.roa (raw, json)
Hash identifier: 0dEd/UEnplc0weHVGMWhUE0TCp6UZKgfEf+anQJuhzU=
Subject key identifier: 83:9A:B2:6B:85:F7:6B:F0:F0:62:93:9E:17:8F:25:29:6A:37:A8:08
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019382FDE8582F4DE9453B360838582F577C
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/g5qya4X3a_DwYpOeF48lKWo3qAg.roa
Signing time: Sun 01 Dec 2024 16:11:38 +0000
ROA not before: Sun 01 Dec 2024 16:11:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47527
IP address blocks: 45.95.208.0/24 maxlen: 24
46.30.120.0/21 maxlen: 21
62.69.152.0/21 maxlen: 21
91.223.235.0/24 maxlen: 24
91.230.239.0/24 maxlen: 24
178.23.176.0/21 maxlen: 21
185.31.76.0/22 maxlen: 22
185.126.152.0/23 maxlen: 23
185.208.212.0/22 maxlen: 24
188.116.39.0/24 maxlen: 24
194.247.61.0/24 maxlen: 24
195.182.36.0/24 maxlen: 24
213.142.140.0/23 maxlen: 23
2a00:1b18::/29 maxlen: 32
2a00:1cf0::/29 maxlen: 32
2a00:b920::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:82:fd:e8:58:2f:4d:e9:45:3b:36:08:38:58:2f:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Dec 1 16:11:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=839ab26b85f76bf0f062939e178f25296a37a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:ff:27:52:84:1b:6a:3a:39:d7:af:e2:b8:
c6:ba:99:ab:c2:71:ab:14:2f:cb:59:59:31:19:dd:
72:9f:3b:e6:13:3a:3f:19:2b:88:4a:c9:84:e0:4e:
f7:20:18:3c:f8:27:e1:85:e8:c2:66:c0:8a:29:53:
e8:b9:49:56:49:b0:86:14:1a:f2:46:61:67:b1:62:
87:5c:13:09:43:89:b7:e2:2e:1e:de:e1:9d:16:dc:
70:fc:e8:8b:11:06:c8:22:4e:66:81:67:a0:93:43:
49:6e:d3:a9:65:fe:f8:0f:35:51:2f:a5:f5:34:03:
e0:af:1d:88:d8:d6:7d:1f:cb:78:47:55:2e:58:13:
1b:be:81:10:70:96:aa:28:8b:61:b7:ac:8e:7b:42:
7f:66:e2:fd:aa:d6:8b:b2:f8:49:f5:aa:fa:d9:e3:
1e:50:f9:d5:f1:46:b1:bb:d3:7a:ef:46:43:5d:f2:
fc:cd:8b:20:95:db:d1:0a:78:0d:05:dc:69:cd:e9:
c2:d6:d5:91:c9:ba:aa:12:1a:57:a1:4e:f4:ac:81:
31:c8:67:85:b8:bd:c1:e4:52:3c:c5:b4:42:06:58:
9c:9a:ab:e0:d7:98:0e:b8:6b:15:c1:45:e8:ee:b3:
6f:dd:a6:8b:51:8d:54:77:ef:79:3d:56:6d:96:26:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:B2:6B:85:F7:6B:F0:F0:62:93:9E:17:8F:25:29:6A:37:A8:08
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/g5qya4X3a_DwYpOeF48lKWo3qAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
46.30.120.0/21
62.69.152.0/21
91.223.235.0/24
91.230.239.0/24
178.23.176.0/21
185.31.76.0/22
185.126.152.0/23
185.208.212.0/22
188.116.39.0/24
194.247.61.0/24
195.182.36.0/24
213.142.140.0/23
IPv6:
2a00:1b18::/29
2a00:1cf0::/29
2a00:b920::/29
Signature Algorithm: sha256WithRSAEncryption
cb:86:ae:37:79:51:d5:6b:57:b3:cd:1b:96:16:fb:7d:59:cd:
7c:b4:42:39:a3:c2:c1:77:38:fc:fc:67:08:07:e5:85:95:b5:
5b:bf:63:7e:2e:1d:35:f3:d4:d2:40:be:71:75:c4:1b:55:c6:
70:13:23:93:a3:5f:37:3c:d4:21:b8:d4:5b:cf:fd:c8:aa:26:
88:fc:e0:0c:66:b3:2a:7c:b5:c0:c3:e0:a4:15:59:9b:18:3f:
fc:88:32:9b:52:a2:e9:1a:0e:b8:53:0c:07:c7:7d:7b:5e:61:
f4:06:6f:79:99:76:dc:9a:66:b7:66:07:2d:aa:bb:11:36:3b:
64:6d:f1:04:73:33:75:0f:e4:78:ce:2c:6d:38:06:77:c1:76:
59:0f:1f:75:e8:9f:0f:d6:b3:87:ea:d6:27:77:df:de:74:15:
60:8d:1f:22:01:04:85:b2:ff:53:f4:5a:52:6d:13:5e:c4:ac:
4b:2f:21:81:ce:26:a7:6d:48:65:f6:67:6d:a1:19:90:13:98:
ed:a6:8c:96:0b:2d:ff:ab:fc:7f:fb:49:b3:44:38:e8:b6:97:
4f:05:c2:03:b6:18:6b:35:51:0c:1b:2f:41:3d:2a:ee:7e:0f:
78:2b:33:c4:ff:c3:5d:b3:9f:91:62:bb:e8:c4:c0:52:fb:58:
01:0a:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:29 2024 by rpki-client on console.sobornost.net