Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/vuZQ4zGFkn5tAGdP2wCCbQXzzDA.roa
File: vuZQ4zGFkn5tAGdP2wCCbQXzzDA.roa (raw, json)
Hash identifier: 9AT9S0fIAlY0+SAOya7pn2rN53L9fean1YBfPMjP+Jg=
Subject key identifier: BE:E6:50:E3:31:85:92:7E:6D:00:67:4F:DB:00:82:6D:05:F3:CC:30
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 018CC64B450C886A319A41DAD9A142CF12BA
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/vuZQ4zGFkn5tAGdP2wCCbQXzzDA.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47902
IP address blocks: 185.100.108.0/22 maxlen: 24
93.189.184.0/21 maxlen: 24
82.193.32.0/19 maxlen: 24
31.223.240.0/20 maxlen: 24
46.19.232.0/21 maxlen: 24
46.254.232.0/21 maxlen: 24
185.202.184.0/22 maxlen: 24
2a02:9a8::/29 maxlen: 48
2a03:6800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:45:0c:88:6a:31:9a:41:da:d9:a1:42:cf:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bee650e33185927e6d00674fdb00826d05f3cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6b:b9:64:60:66:b5:7e:0f:8f:55:f1:cc:d9:
f4:56:a6:03:b2:83:81:4e:a3:2c:37:06:aa:a5:6e:
7b:56:4c:95:ec:be:b6:5d:49:01:4f:5b:2f:c1:b3:
49:9c:bc:4b:30:86:ed:bd:55:64:62:2f:26:4a:5d:
0e:63:f0:07:16:c9:e2:89:5e:22:b7:9e:4a:e8:0f:
7c:bc:9c:14:ab:ec:3d:41:09:d7:82:70:14:a1:73:
e2:45:4e:a3:b4:e9:12:9f:e6:11:dc:55:85:92:2c:
9a:a4:06:3e:f8:f6:8d:5a:ab:b3:5f:34:81:01:59:
46:88:c6:db:ff:03:dd:d7:80:9a:5b:25:93:e0:f8:
e0:03:f4:e8:b4:3e:3f:02:16:47:98:c2:bc:73:50:
a6:17:48:30:79:0d:b2:85:50:3e:ca:26:db:a3:c1:
4d:f0:0c:e2:2a:22:18:ce:fa:f9:60:89:95:e2:6a:
da:58:90:64:c5:95:e8:50:57:63:b8:36:30:1c:67:
ad:09:ed:9a:98:ba:19:11:b6:12:8e:1e:6a:41:47:
06:64:98:42:c8:12:77:16:3d:1c:1f:d3:ff:fd:e8:
28:76:80:85:d2:c4:17:18:17:8d:fb:95:cc:9d:9d:
e0:71:0c:a4:39:0c:f9:33:27:0e:a0:59:68:6b:fd:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:50:E3:31:85:92:7E:6D:00:67:4F:DB:00:82:6D:05:F3:CC:30
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/vuZQ4zGFkn5tAGdP2wCCbQXzzDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.240.0/20
46.19.232.0/21
46.254.232.0/21
82.193.32.0/19
93.189.184.0/21
185.100.108.0/22
185.202.184.0/22
IPv6:
2a02:9a8::/29
2a03:6800::/29
Signature Algorithm: sha256WithRSAEncryption
16:52:f0:47:60:1f:be:37:91:e0:84:b5:d6:79:f7:26:64:60:
30:f8:14:27:ce:34:3e:4b:31:50:f0:5f:67:94:87:d4:3b:5c:
be:c9:76:b2:d2:0c:2e:2e:0f:21:dc:5c:bb:50:92:98:a2:4f:
b9:b2:ab:23:bf:36:65:56:af:18:6c:01:e6:16:73:d6:65:9f:
c6:b7:21:81:f2:ff:d9:94:dd:ad:97:7a:ae:1f:76:1e:f7:3e:
ae:bd:25:b6:97:5a:73:6e:49:89:0c:28:a5:5e:0c:26:b0:45:
2c:6d:0f:d8:8c:c5:30:68:76:be:4e:d0:1c:ce:21:06:b7:96:
e9:bf:06:ad:be:00:38:2e:47:7d:4a:4b:18:e1:5d:13:3f:c7:
fb:f5:ae:79:52:aa:f2:c3:1e:0a:43:5e:dc:d8:8d:7f:85:0d:
01:bd:1e:83:07:69:b6:9f:10:d7:99:8f:75:c9:7f:d0:43:78:
d0:fc:34:33:b0:95:a1:45:9e:66:53:4a:c7:2b:4c:b4:3b:6c:
18:f6:45:9f:97:28:8a:5f:1d:82:49:11:1a:47:0b:de:96:40:
36:f8:a3:b8:b9:10:c8:c1:d7:91:6a:ab:da:c8:ad:dc:ad:b7:
0e:30:02:4e:ab:4b:ae:0f:00:56:1c:ff:88:d5:55:87:b4:4a:
f2:c3:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:38 2024 by rpki-client on console.sobornost.net