Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/keJboxATsEaOgQAUMNfaljZClus.roa
File: keJboxATsEaOgQAUMNfaljZClus.roa (raw, json)
Hash identifier: tqkndoykOC8jBUJGKRHIPVWQtrnegCOJq6TIVRFoJAY=
Subject key identifier: 91:E2:5B:A3:10:13:B0:46:8E:81:00:14:30:D7:DA:96:36:42:96:EB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0193ED27FA8A909B2D00C2B008B925D2EA4C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/keJboxATsEaOgQAUMNfaljZClus.roa
Signing time: Sun 22 Dec 2024 06:57:20 +0000
ROA not before: Sun 22 Dec 2024 06:57:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 46.38.143.0/24 maxlen: 24
212.16.86.0/24 maxlen: 24
212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
212.80.20.0/22 maxlen: 22
212.80.20.0/24 maxlen: 24
212.80.21.0/24 maxlen: 24
212.80.22.0/24 maxlen: 24
212.80.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ed:27:fa:8a:90:9b:2d:00:c2:b0:08:b9:25:d2:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 22 06:57:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91e25ba31013b0468e81001430d7da96364296eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:77:cb:96:ff:0c:f3:c3:ce:ec:e4:a2:dd:
71:8a:9d:d6:89:de:d5:04:52:75:a3:10:7f:51:78:
1c:c5:6b:5b:63:57:fc:28:74:36:98:04:f4:65:ed:
16:eb:cd:af:c1:cf:f8:0f:7a:9c:4b:25:c6:79:cf:
1a:38:99:d2:08:41:98:75:d4:ac:fb:7d:8c:6a:5a:
96:d5:53:d8:e7:75:ee:80:f9:ed:94:ad:fc:1b:e2:
cb:94:6b:e6:6e:96:38:43:f2:c6:43:d3:66:4d:98:
c0:ae:30:cd:2c:1d:12:bf:96:3d:82:29:3c:8d:b4:
20:8e:0c:b9:18:f2:38:cd:67:2c:c0:d1:d6:9a:ae:
0d:89:7a:4e:9c:48:4d:b3:c2:f0:d6:1d:cf:34:e5:
98:6b:f3:d8:78:a3:96:42:22:c4:c6:a0:d6:f1:f4:
c7:e2:cd:93:d8:09:cd:fc:17:f7:45:3a:81:2b:d7:
62:ba:4a:c2:93:25:d0:03:12:e7:11:ea:ce:d4:ed:
3e:64:62:d0:ca:6c:91:3d:10:b5:f2:bc:93:33:00:
74:9c:15:92:ae:71:47:d8:72:8d:bd:99:f1:e0:05:
23:5a:39:15:da:64:bf:56:5b:ab:d7:b1:42:4b:d2:
ec:6a:13:4c:d2:3a:b2:0b:2f:0c:16:8b:c8:eb:27:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:5B:A3:10:13:B0:46:8E:81:00:14:30:D7:DA:96:36:42:96:EB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/keJboxATsEaOgQAUMNfaljZClus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.143.0/24
212.16.86.0/24
212.80.18.0-212.80.23.255
Signature Algorithm: sha256WithRSAEncryption
31:26:e4:bd:8f:c7:95:4f:4b:1f:f0:56:1c:11:c8:79:2f:90:
55:50:7c:ce:f9:36:7d:47:95:c8:b8:bd:34:a3:a3:54:2b:21:
fc:dd:05:fe:bb:c0:5f:9f:55:eb:9f:8b:01:f3:b5:e8:32:88:
1e:3e:70:01:c5:57:86:19:e9:f2:a7:1a:62:2d:9b:e2:40:d2:
4c:4c:e9:24:74:de:6d:e9:57:a2:08:38:27:21:7f:51:a6:6c:
d8:bf:0f:38:19:de:98:5f:8a:34:4a:45:45:9f:0c:57:5b:33:
9d:df:8b:a7:55:ee:37:3a:5a:88:d3:51:c8:86:ff:6d:6a:39:
9d:ff:ec:cb:5e:0b:e3:9b:f8:37:25:b8:87:c8:d2:18:a5:f0:
16:f4:6b:f8:63:ca:a8:f2:46:91:f6:bc:e6:75:bb:3c:c3:9d:
19:af:b3:2b:01:c2:05:5b:8b:b1:2b:77:26:67:db:69:d6:b4:
e5:a7:d8:9c:4c:2e:d8:e4:80:2e:03:23:a2:1f:af:4d:a8:08:
cd:2f:62:e1:d1:0a:ad:d0:4b:93:6a:d7:f6:a1:75:14:21:d7:
34:7a:d7:46:84:ec:58:71:6b:cc:ae:12:f1:06:b7:17:30:4f:
7d:b0:18:bb:eb:b1:13:e3:64:ad:18:c9:77:cb:4f:f3:50:9d:
07:4b:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net