Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6_-7geqVROcKidEHOE6tHfkqM74.roa
File: 6_-7geqVROcKidEHOE6tHfkqM74.roa (raw, json)
Hash identifier: bULB/wCcp3529b1LxA/ZQ8ZMV9w9v9r1jov6NVAqRHA=
Subject key identifier: EB:FF:BB:81:EA:95:44:E7:0A:89:D1:07:38:4E:AD:1D:F9:2A:33:BE
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0193B55F9D02CC16385B99F60D36718EE4B1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6_-7geqVROcKidEHOE6tHfkqM74.roa
Signing time: Wed 11 Dec 2024 10:59:22 +0000
ROA not before: Wed 11 Dec 2024 10:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:5f:9d:02:cc:16:38:5b:99:f6:0d:36:71:8e:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 11 10:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebffbb81ea9544e70a89d107384ead1df92a33be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:7b:6f:b3:32:86:c7:d0:4f:a5:5a:4e:65:
46:a9:0d:05:df:8e:34:10:02:62:7f:4f:cb:5a:9f:
88:27:84:07:7c:67:7f:4e:95:08:23:5c:5c:72:6f:
66:b8:c9:58:82:4f:01:04:58:c1:f7:20:91:19:56:
64:08:f1:9c:23:77:41:f4:e7:e4:1c:6c:48:7b:d5:
66:5f:68:15:40:0b:f4:6a:5b:b6:b9:45:eb:77:06:
83:23:80:45:b1:28:f8:f9:ec:f9:5a:6e:4d:94:4e:
da:3f:41:ea:4e:ae:9d:db:ba:e8:3e:fd:40:14:35:
54:85:82:9f:62:1e:f8:d0:e0:9f:eb:80:94:2e:d6:
c3:fb:54:b0:ce:96:3f:75:16:0e:12:e3:48:5e:68:
48:68:97:7b:f0:fc:ac:3b:a4:03:03:e2:bc:be:9b:
9d:e9:c8:ab:06:ed:d1:28:79:3a:f7:a3:ad:3a:aa:
a8:15:df:4f:1f:0f:50:40:f0:a7:86:bf:f1:46:97:
fd:b5:71:80:ef:ba:a6:0c:a9:2d:63:01:cc:f8:da:
91:2f:b0:1d:28:e4:28:c2:9a:41:fd:8d:dd:3d:13:
27:61:e6:97:b3:bd:00:7c:d9:c8:ee:38:13:1a:31:
3c:21:e6:d2:a6:a6:e4:e4:26:de:c4:61:1c:8d:1a:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FF:BB:81:EA:95:44:E7:0A:89:D1:07:38:4E:AD:1D:F9:2A:33:BE
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6_-7geqVROcKidEHOE6tHfkqM74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.138.0/23
46.38.148.0/24
185.29.222.0/24
212.80.11.0/24
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:02:db:00:f1:ec:54:65:a8:a7:b9:bf:6b:c8:d1:20:dd:ac:
d5:f5:36:f9:c9:55:bc:f0:c7:32:5b:11:9e:6e:11:fe:d1:34:
9f:d1:1a:fb:53:d6:34:cb:25:3f:2f:e8:b8:a4:c8:cd:e7:c5:
89:12:04:b4:19:50:22:aa:c6:bb:1c:77:41:fa:7e:a0:4f:a2:
d4:06:b9:6f:7e:39:60:e1:42:a4:dd:23:f1:77:f7:2e:34:0e:
bd:32:07:d9:2a:f7:63:f6:a0:18:34:a4:c6:0c:46:94:75:6d:
b8:44:2e:4e:24:52:8d:3d:96:18:b4:8d:22:48:e2:04:a2:06:
91:17:f1:14:32:46:d5:66:7d:2b:40:c1:0d:53:d9:ea:25:14:
5d:64:7b:7d:aa:97:af:f3:45:b0:e3:41:44:ae:73:1a:34:af:
7e:23:10:64:b3:8e:54:8c:4b:96:b1:ec:7e:a8:59:0b:66:27:
99:45:82:74:31:d9:07:f0:9a:71:e7:4c:37:4c:4d:2e:69:55:
e7:2c:07:9f:fd:06:7e:97:e7:f2:8f:22:fb:0d:ce:f1:7a:d0:
53:3f:b2:d4:4e:fd:e8:67:ac:59:3e:45:51:20:43:df:82:8b:
a5:ac:f1:a1:fd:8c:58:12:2f:0b:a9:dd:4c:dd:1a:61:83:a8:
a8:58:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net