Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/aa-BTRJ13sE6hQSm1j-1BdCHn2g.roa
File: aa-BTRJ13sE6hQSm1j-1BdCHn2g.roa (raw, json)
Hash identifier: +QyksayQZvXwqYYkzjIGwW/3pfAUUMEaTLrK+nj6mpQ=
Subject key identifier: 69:AF:81:4D:12:75:DE:C1:3A:85:04:A6:D6:3F:B5:05:D0:87:9F:68
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 0192040FF9ECEF65A8A51D1A30CBBDE44A4D
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/aa-BTRJ13sE6hQSm1j-1BdCHn2g.roa
Signing time: Wed 18 Sep 2024 07:36:48 +0000
ROA not before: Wed 18 Sep 2024 07:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57653
IP address blocks: 94.156.96.0/24 maxlen: 24
94.156.186.0/24 maxlen: 24
109.69.232.0/21 maxlen: 21
109.69.232.0/24 maxlen: 24
109.69.233.0/24 maxlen: 24
109.69.234.0/24 maxlen: 24
109.69.235.0/24 maxlen: 24
109.69.236.0/24 maxlen: 24
109.69.237.0/24 maxlen: 24
109.69.238.0/24 maxlen: 24
109.69.239.0/24 maxlen: 24
185.191.84.0/22 maxlen: 22
185.191.84.0/24 maxlen: 24
185.191.85.0/24 maxlen: 24
185.191.86.0/24 maxlen: 24
185.191.87.0/24 maxlen: 24
2a00:1ba8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:0f:f9:ec:ef:65:a8:a5:1d:1a:30:cb:bd:e4:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: Sep 18 07:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69af814d1275dec13a8504a6d63fb505d0879f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:5b:44:05:4b:27:f9:cf:ca:07:60:dc:38:
20:c4:00:0e:76:9d:14:98:81:f9:f8:0c:8e:d9:a1:
07:6c:b0:04:fd:97:40:78:f1:12:2c:a0:24:85:36:
80:14:66:02:4e:cf:14:46:d9:0e:20:e1:e8:0e:f9:
ae:93:61:da:c1:d6:60:25:17:9b:76:a9:ba:72:07:
ad:73:d3:de:73:92:53:27:91:8f:23:7b:4a:b4:13:
75:0b:4c:fb:b4:d0:c8:e3:3d:8e:df:9a:e5:9b:4a:
62:ea:6f:c4:3a:9d:9c:6c:27:9a:fc:09:41:69:6c:
3f:10:16:5b:26:dc:ac:81:2d:7c:64:9f:7a:7a:be:
1d:f1:33:ce:c5:cf:3c:c0:c9:46:3c:9b:62:2f:af:
c2:3a:42:a8:2c:6a:f2:5c:f0:95:2f:62:16:05:ed:
ca:c9:a6:5d:38:3b:73:a0:2c:37:b8:c9:d5:c5:73:
09:30:b6:e8:33:e9:33:e8:79:e6:97:60:45:9b:9d:
b0:84:34:78:3f:2d:8d:c4:25:97:8a:7a:5d:49:3c:
83:d5:0b:88:3a:33:75:81:f0:1e:c1:43:b6:0e:b9:
34:c6:7e:c1:88:17:3c:a3:c0:8c:78:4c:ea:9d:ae:
9f:c9:ce:6c:c0:a9:32:d1:0e:8b:9a:1a:04:1c:70:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:81:4D:12:75:DE:C1:3A:85:04:A6:D6:3F:B5:05:D0:87:9F:68
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/aa-BTRJ13sE6hQSm1j-1BdCHn2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.96.0/24
94.156.186.0/24
109.69.232.0/21
185.191.84.0/22
IPv6:
2a00:1ba8::/32
Signature Algorithm: sha256WithRSAEncryption
33:fd:09:bb:ef:a1:89:b6:0c:8d:b6:d4:35:5f:d7:2e:27:5f:
7e:8c:17:a9:f1:05:7b:ae:5c:b0:2c:8f:07:93:78:8e:04:61:
19:7f:34:21:0e:5b:43:fe:11:d2:d0:bc:10:59:30:a0:27:aa:
0e:dd:7d:be:20:df:25:b8:fe:6e:03:66:18:45:7c:0f:10:06:
66:2d:d6:d2:32:ec:82:5c:63:96:af:87:d2:66:1a:54:d5:51:
05:42:d3:a7:a1:f1:be:71:49:57:a5:15:1b:80:69:4d:38:2b:
31:a0:94:cd:cb:70:bf:56:94:bc:59:87:4a:3d:53:23:16:35:
7e:72:c2:8a:85:75:7d:64:48:9c:a0:09:84:2c:8e:67:ed:73:
a5:09:bd:c0:84:26:aa:3a:d6:a8:92:47:1d:0e:70:16:4e:b8:
79:d2:58:cc:ef:50:07:2d:b6:17:ab:08:06:dd:f3:b0:69:3c:
78:ad:f7:c8:9e:dd:29:e2:5a:49:7e:1f:6f:a3:f6:25:1d:8e:
cc:19:27:45:80:19:63:52:ad:5d:b5:77:11:6c:bb:fb:6e:8c:
db:31:22:0e:d7:d7:b3:eb:b8:27:13:8c:a9:ce:08:4c:5f:8f:
26:26:0a:e3:4b:12:92:bc:d9:52:55:63:1e:33:22:c5:42:e1:
4a:3c:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net