Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0-o26vuuXTyHYAyvPg0LkAk_ZU.roa
File: b0-o26vuuXTyHYAyvPg0LkAk_ZU.roa (raw, json)
Hash identifier: 6BcIWLGjL7j8xCL20npXBO2wY3MQutjIFFpko2wPFMA=
Subject key identifier: 6F:4F:A8:DB:AB:EE:B9:74:F2:1D:80:32:BC:F8:34:2E:40:24:FD:95
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01938818D98C344BA4DB45899D570086AE6C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0-o26vuuXTyHYAyvPg0LkAk_ZU.roa
Signing time: Mon 02 Dec 2024 15:59:10 +0000
ROA not before: Mon 02 Dec 2024 15:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39640
IP address blocks: 167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
185.226.195.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:18:d9:8c:34:4b:a4:db:45:89:9d:57:00:86:ae:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Dec 2 15:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f4fa8dbabeeb974f21d8032bcf8342e4024fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:90:d5:0c:fe:03:35:6f:03:53:b6:46:7d:
2e:01:d9:2c:70:02:9f:7b:21:87:d0:b2:a2:31:7c:
52:02:a3:ea:9b:b8:b7:ca:c8:e5:62:0f:4f:b3:c6:
0a:a8:3f:f6:99:36:23:50:5c:51:76:44:6b:e1:fd:
98:25:51:d3:a6:6d:55:89:21:e8:88:a1:60:a0:24:
4d:1a:26:72:3a:f0:b7:c4:1d:00:6c:fe:23:c5:b7:
67:78:40:78:5a:37:d5:7c:20:f5:bb:47:36:c0:3b:
f9:ed:12:a5:f6:e3:97:62:40:73:c6:7a:43:22:2f:
8b:f6:41:f1:54:9c:ce:ff:0c:67:fd:11:ec:f6:ad:
3a:ce:51:dd:11:84:89:a5:a5:41:01:eb:cd:96:b0:
8c:7c:50:a4:9a:ae:58:c0:2d:91:70:36:2b:29:5f:
8b:af:69:0c:23:a0:ee:57:68:da:08:7f:b5:a6:73:
09:85:fc:1d:80:a5:a9:b1:96:42:f7:bb:e7:5c:2b:
93:75:48:b9:c6:5d:1d:30:f2:ce:1f:50:be:34:48:
3a:90:1e:1e:57:04:49:53:ca:f0:c9:8f:0e:ad:cb:
5f:02:66:ff:28:e1:0a:9c:b9:76:8c:45:18:84:64:
9f:df:7e:d2:4e:3b:d4:ea:4d:f5:4a:b5:d6:68:ef:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:A8:DB:AB:EE:B9:74:F2:1D:80:32:BC:F8:34:2E:40:24:FD:95
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0-o26vuuXTyHYAyvPg0LkAk_ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.31.0/24
178.19.32.0/23
185.226.195.0/24
201.49.188.0/22
Signature Algorithm: sha256WithRSAEncryption
77:b1:8b:22:f3:94:54:c7:55:77:aa:fd:ff:19:d1:dc:3c:ea:
7e:f9:0b:f8:38:eb:c8:da:04:04:e2:8b:c1:a3:27:d6:e8:36:
3c:fe:ab:58:ac:93:a0:32:ee:e6:3d:78:28:48:7e:5a:f4:f7:
5e:6d:e6:d4:a8:b9:57:1b:e3:66:d9:69:16:3c:88:43:32:21:
3f:cf:ba:da:4d:2d:1a:a7:3d:ef:27:f0:5c:a8:81:b8:4b:53:
2f:3d:f9:21:9a:93:b3:58:6f:42:26:0f:df:01:07:bb:23:5a:
c2:fe:e9:d1:17:92:f9:af:e9:ee:5d:2d:18:8d:bf:df:f9:94:
7a:02:4e:36:16:17:c8:4f:d9:07:73:41:3b:41:d3:34:ee:a9:
d9:d3:1d:26:f5:5f:b7:84:e1:57:96:07:09:49:93:87:90:43:
f8:09:54:c6:b1:c6:09:e5:98:53:7e:07:4b:db:80:43:2a:29:
dc:a1:79:f3:a6:6f:f9:05:b3:eb:ca:6d:b0:30:16:02:e3:81:
aa:d1:bf:fc:e8:78:f5:58:06:99:ca:fb:86:7a:7d:6d:0a:2a:
5e:f1:32:98:d8:60:42:99:3e:ed:8f:bc:0c:b6:7d:91:33:08:
7f:d5:45:29:fa:6a:f7:65:b2:b5:49:61:ed:72:db:fe:d9:c8:
fe:30:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:41 2024 by rpki-client on console.sobornost.net