Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/G0HaB9ng4PC2isV132dGE0GPpfM.roa
File: G0HaB9ng4PC2isV132dGE0GPpfM.roa (raw, json)
Hash identifier: st5iz1ZhKq/sMOxoV0PmOsq3fIj44V4qMJXJlKMMMpE=
Subject key identifier: 1B:41:DA:07:D9:E0:E0:F0:B6:8A:C5:75:DF:67:46:13:41:8F:A5:F3
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01936873586D5E457AD0DF3C3FF767001D84
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/G0HaB9ng4PC2isV132dGE0GPpfM.roa
Signing time: Tue 26 Nov 2024 12:30:09 +0000
ROA not before: Tue 26 Nov 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35766
IP address blocks: 31.184.166.0/23 maxlen: 24
31.184.172.0/24 maxlen: 24
31.184.175.0/24 maxlen: 24
37.130.204.0/22 maxlen: 24
37.130.204.0/24 maxlen: 24
37.130.205.0/24 maxlen: 24
37.130.206.0/24 maxlen: 24
37.130.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:73:58:6d:5e:45:7a:d0:df:3c:3f:f7:67:00:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Nov 26 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b41da07d9e0e0f0b68ac575df674613418fa5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:e9:a0:1e:aa:66:7c:e7:ee:7f:27:aa:42:
ea:4e:79:12:d5:85:cd:68:d5:b9:3b:6e:05:4f:d4:
84:46:bd:5d:7d:5c:36:57:5d:ac:3c:8a:fc:92:59:
8d:d0:0d:6e:54:43:4f:f4:40:37:14:73:90:bd:a0:
71:b3:bb:e1:45:ef:b8:8e:95:8d:13:09:ab:71:ee:
67:6b:de:71:63:39:c7:99:47:5a:28:55:e4:df:51:
89:ad:31:d4:52:94:00:23:39:49:10:ad:89:da:b7:
94:a6:40:d0:70:07:77:91:31:2b:74:bd:14:80:21:
57:f9:b4:49:ad:af:ce:af:6b:a2:03:6d:27:68:4b:
fb:94:f9:30:22:02:c7:d8:6f:d3:1e:c2:c7:24:26:
4e:e4:50:1c:11:9a:c3:ab:65:fd:e5:f2:1c:9b:d4:
70:bc:68:a3:da:c8:4f:e4:62:b7:32:0f:d4:10:94:
08:97:b4:56:5a:65:46:f7:c9:c0:b4:4c:1b:e8:52:
5a:8d:94:48:2f:d7:e7:15:6e:30:26:07:59:4e:7a:
cc:11:43:cd:b2:ee:79:75:c0:de:05:98:ab:43:32:
4f:b4:6b:02:4b:7b:68:77:f0:f2:f4:3e:e4:7e:36:
9b:11:0c:16:9a:46:2c:73:03:02:74:a9:1f:26:2b:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:DA:07:D9:E0:E0:F0:B6:8A:C5:75:DF:67:46:13:41:8F:A5:F3
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/G0HaB9ng4PC2isV132dGE0GPpfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.166.0/23
31.184.172.0/24
31.184.175.0/24
37.130.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d3:54:f6:39:22:d9:91:9f:28:ca:d4:19:59:ce:ed:55:b4:
69:f5:54:af:18:fe:a4:10:b7:58:0c:e6:e0:f0:7c:59:b1:9b:
7a:81:b5:3b:0e:f0:d2:c9:70:5d:cc:00:41:d1:47:49:cb:21:
ae:a2:ae:23:8f:04:78:0e:15:ec:1e:78:6d:8c:da:86:3c:94:
37:06:b1:f7:9a:7c:eb:46:f2:bb:29:f5:1e:37:5c:0f:58:1e:
4c:22:29:35:4c:89:b5:94:bb:5b:63:7e:b6:8a:49:6f:ff:0b:
a2:83:da:88:ee:1a:89:d7:7e:f2:15:1b:b6:12:02:26:7a:71:
9c:9c:62:c2:87:71:c2:87:7c:c6:71:cb:53:d1:a4:78:0f:ae:
94:a1:6c:9c:fe:8d:02:aa:42:3d:36:a9:b9:57:32:2d:f0:25:
32:e3:93:73:04:f1:dd:10:69:c4:5b:ef:59:a5:01:0e:a5:d0:
2a:50:68:cd:1a:40:1a:be:3c:b2:76:2f:3a:c0:43:28:6e:5c:
dc:64:1a:91:7c:a9:89:89:24:3c:6c:0a:4b:ba:fe:c3:b9:f0:
ee:ab:97:34:77:85:81:f5:76:05:53:d2:d6:e0:58:f6:78:64:
63:e7:4f:46:bd:7a:8c:ad:f7:8f:a5:52:1d:b9:ff:61:b4:86:
23:04:97:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net