Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XN0tR-YL0YeSeinF2RRkxasNnqU.roa
File: XN0tR-YL0YeSeinF2RRkxasNnqU.roa (raw, json)
Hash identifier: esiAOBGPewbmHwlpsX3062gDyz2a8vQqoWjwmKuaBCE=
Subject key identifier: 5C:DD:2D:47:E6:0B:D1:87:92:7A:29:C5:D9:14:64:C5:AB:0D:9E:A5
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0193EE98035CAC0EE0878BEB9452CC7BE495
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XN0tR-YL0YeSeinF2RRkxasNnqU.roa
Signing time: Sun 22 Dec 2024 13:39:19 +0000
ROA not before: Sun 22 Dec 2024 13:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.111.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.10.248.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.83.132.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:98:03:5c:ac:0e:e0:87:8b:eb:94:52:cc:7b:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 22 13:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cdd2d47e60bd187927a29c5d91464c5ab0d9ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:30:b6:a4:58:7a:82:41:0c:73:1f:dd:c1:
a3:e5:c4:74:ab:15:cf:bc:20:8b:4d:56:85:c8:22:
10:00:5e:d8:e1:f4:a3:b0:aa:5b:95:8f:14:22:14:
8b:20:22:bb:51:3a:c5:dc:a6:4f:a6:65:8c:e2:2d:
f8:08:e0:24:c0:fb:e1:ca:4f:c5:94:f8:f1:82:ba:
7a:4c:70:d8:53:9f:b0:c3:4b:cc:f5:89:87:67:77:
a6:c5:9b:99:dc:3f:37:2a:ff:d4:00:53:53:11:d0:
4e:21:bd:b5:a7:73:19:c2:f8:5d:3c:f2:ea:63:44:
ee:cf:a4:fc:ef:e3:77:a2:cf:83:a1:6c:45:9a:b9:
38:f2:a7:31:28:21:33:55:65:80:f8:38:a4:7c:86:
77:00:86:cf:d4:1c:7f:c5:62:a9:46:5a:78:1d:8a:
ab:69:16:b2:6e:04:90:b3:05:ad:69:db:69:99:17:
8e:64:91:8d:52:97:4a:a1:e3:5e:ff:4b:b4:7d:76:
0a:dc:58:d1:7e:d6:73:80:f2:9e:e4:11:54:fd:c8:
81:de:54:18:8a:98:78:c9:ee:1f:be:44:a0:30:91:
cd:1b:aa:4a:7b:34:8f:9a:f0:0e:f4:ee:9a:5f:db:
f5:b5:e6:33:cd:56:b2:31:53:42:dd:d4:89:b7:c4:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:2D:47:E6:0B:D1:87:92:7A:29:C5:D9:14:64:C5:AB:0D:9E:A5
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XN0tR-YL0YeSeinF2RRkxasNnqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
31.25.176.0/21
37.122.219.0/24
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.70.152.0/22
185.83.132.0/22
185.103.148.0/22
185.153.16.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
193.246.154.0-193.246.157.255
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
74:70:13:17:a1:2c:fc:a5:3a:cd:e9:8b:f1:53:1c:f8:f0:79:
e7:84:9f:fe:06:62:9f:f3:b7:f5:49:01:68:8b:16:4b:c2:15:
63:76:35:6d:70:91:2c:63:59:cf:92:4c:aa:1d:28:71:a6:08:
46:0a:30:00:7f:50:6d:07:92:97:86:ba:ec:fe:4f:d1:65:fa:
09:01:a8:0e:41:68:ca:b0:64:93:70:e3:5b:02:87:c8:3f:48:
d7:c1:cf:6e:dc:09:91:8a:e1:47:52:17:8c:29:93:b8:e9:05:
cb:e9:56:74:6a:9b:28:25:a5:e8:91:8f:c0:c7:91:3b:4d:3a:
c9:b3:60:a3:89:70:d7:20:7c:22:f3:97:06:b9:19:d8:2c:1e:
66:b4:34:5f:9d:41:35:d9:e8:1b:4d:c0:75:b6:19:59:ad:e1:
db:58:dc:fc:a0:b8:95:13:e8:02:38:af:f3:88:ef:f6:b4:c2:
26:c8:a0:df:41:7c:4b:94:a5:23:d3:88:69:3b:ab:b8:24:be:
81:55:28:ed:71:20:62:6f:e1:56:01:ff:07:8a:97:c2:a9:d9:
8b:c8:9f:e3:00:84:fd:14:df:37:93:c4:cd:46:e5:6a:b6:37:
77:b5:74:7c:cb:93:b4:ae:dc:75:6b:a8:81:35:1b:bd:09:07:
37:dc:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:35 2024 by rpki-client on console.sobornost.net