Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/poiu5zrput2Qq3a7Uvl6XJpZUTM.roa
File: poiu5zrput2Qq3a7Uvl6XJpZUTM.roa (raw, json)
Hash identifier: fbHbNpajp2jGDeLH6vIebsOlwsYmguVaOy3V9cMIxVQ=
Subject key identifier: A6:88:AE:E7:3A:E9:BA:DD:90:AB:76:BB:52:F9:7A:5C:9A:59:51:33
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 0193D4747617B6864608F2AAE593446FA0B0
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/poiu5zrput2Qq3a7Uvl6XJpZUTM.roa
Signing time: Tue 17 Dec 2024 11:50:22 +0000
ROA not before: Tue 17 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15544
IP address blocks: 185.104.144.0/22 maxlen: 22
185.104.144.0/24 maxlen: 24
185.104.145.0/24 maxlen: 24
185.104.146.0/24 maxlen: 24
185.104.147.0/24 maxlen: 24
213.140.128.0/19 maxlen: 19
213.140.128.0/24 maxlen: 24
213.140.129.0/24 maxlen: 24
213.140.130.0/24 maxlen: 24
213.140.131.0/24 maxlen: 24
213.140.132.0/24 maxlen: 24
213.140.133.0/24 maxlen: 24
213.140.134.0/24 maxlen: 24
213.140.135.0/24 maxlen: 24
213.140.136.0/24 maxlen: 24
213.140.137.0/24 maxlen: 24
213.140.138.0/24 maxlen: 24
213.140.139.0/24 maxlen: 24
213.140.143.0/24 maxlen: 24
213.140.146.0/24 maxlen: 24
213.140.148.0/24 maxlen: 24
2a02:2298::/32 maxlen: 32
2a02:2298::/36 maxlen: 36
2a02:2298:4000::/36 maxlen: 36
2a02:2298:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:74:76:17:b6:86:46:08:f2:aa:e5:93:44:6f:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Dec 17 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a688aee73ae9badd90ab76bb52f97a5c9a595133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:3c:7f:a7:66:ea:81:50:53:64:d0:de:8a:
d3:6e:fd:a1:b2:6d:a1:1f:66:8f:30:69:e6:89:ba:
e3:8c:51:f9:4f:ba:d9:b5:4c:10:13:3d:1f:6a:9d:
6a:bf:61:1e:6c:d8:83:b6:09:fd:00:59:02:89:fb:
8c:10:ea:f0:e3:21:3d:30:1f:ea:f3:0d:15:71:12:
87:ec:f2:88:c9:38:95:cc:da:8a:2b:e2:4d:be:6a:
67:ec:c9:ac:0f:d4:11:b7:4d:32:9d:00:d6:3a:23:
67:bf:f5:a6:cc:a3:10:b8:e9:61:2c:83:35:df:2d:
42:5d:ff:dd:e9:ea:c4:a7:38:c4:86:4c:e3:8e:e6:
a1:30:96:80:80:e5:8d:e0:c1:bb:ea:b4:3c:02:e9:
6c:a4:8b:a3:f7:80:93:89:f3:e6:fa:ee:96:5e:fb:
6b:56:23:0a:ff:98:a5:4a:1d:4b:6c:df:92:88:ef:
15:e6:c9:ef:b8:23:6f:cf:b3:57:d4:bc:88:a6:8d:
a0:cd:c4:27:13:c5:86:76:af:50:c4:31:bb:ba:8e:
52:b6:1d:91:13:6d:37:7d:41:ab:b8:58:61:08:d9:
43:c3:7e:d3:d7:15:a1:71:4c:75:8f:96:38:68:3e:
ca:b8:75:12:34:d2:a0:16:5a:1a:84:72:79:16:40:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:AE:E7:3A:E9:BA:DD:90:AB:76:BB:52:F9:7A:5C:9A:59:51:33
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/poiu5zrput2Qq3a7Uvl6XJpZUTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.144.0/22
213.140.128.0/19
IPv6:
2a02:2298::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ce:27:86:4c:12:b6:2e:3a:1b:11:16:1f:a5:dd:7c:26:04:
22:2f:05:7b:b6:93:7b:f1:67:16:73:9e:ef:e0:0b:6e:f4:26:
b3:54:fb:83:7a:9a:3a:41:c8:f3:98:ee:da:4f:a4:cd:39:f0:
37:0f:03:3c:d6:34:26:3e:c5:9a:6a:4e:73:1a:e0:5e:34:2c:
03:8b:52:98:fd:03:b3:1d:e0:bc:b9:12:2d:1b:44:27:a3:d4:
5b:dc:c7:83:50:2e:80:c0:37:86:ea:f7:98:91:0a:7f:09:ae:
04:cc:1f:eb:e4:53:0f:94:be:d0:b4:65:2c:d1:85:96:82:b3:
54:23:3c:af:8b:e1:43:aa:a0:14:ae:1d:7e:85:f7:f6:3c:fa:
25:70:38:8f:e2:f7:4f:87:28:4d:ae:55:82:60:0f:9a:a4:87:
62:d0:c7:18:61:cb:47:1e:22:8c:86:8e:fb:da:12:3d:ab:22:
e8:0b:46:f8:87:25:aa:d2:1c:e0:49:a2:99:60:fb:7a:90:ec:
cf:d3:2b:dc:77:e3:03:62:99:78:1b:de:35:f5:57:84:e9:67:
19:89:7d:34:29:ca:b2:c9:ac:b0:d8:9c:02:17:d8:09:79:13:
ef:98:68:c7:b5:0a:9e:cf:5b:e3:63:f8:7f:31:11:4f:9e:81:
f2:00:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:29 2024 by rpki-client on console.sobornost.net