Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/neSWMwrRk_nan89mSFsymJt_YoU.roa
File: neSWMwrRk_nan89mSFsymJt_YoU.roa (raw, json)
Hash identifier: H+BW9Mft8klHE+oXa4vZpDLn/q70TQaQI7UcO6FzkKs=
Subject key identifier: 9D:E4:96:33:0A:D1:93:F9:DA:9F:CF:66:48:5B:32:98:9B:7F:62:85
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 01936CEBC0CF775814156CEA67F3F2D9674B
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/neSWMwrRk_nan89mSFsymJt_YoU.roa
Signing time: Wed 27 Nov 2024 09:20:09 +0000
ROA not before: Wed 27 Nov 2024 09:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198297
IP address blocks: 185.86.132.0/22 maxlen: 22
185.86.132.0/23 maxlen: 23
185.86.132.0/24 maxlen: 24
185.86.132.9/32 maxlen: 32
185.86.133.0/24 maxlen: 24
185.86.134.0/23 maxlen: 23
185.86.134.0/24 maxlen: 24
185.86.135.0/24 maxlen: 24
2a03:7620::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:eb:c0:cf:77:58:14:15:6c:ea:67:f3:f2:d9:67:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Nov 27 09:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de496330ad193f9da9fcf66485b32989b7f6285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:32:fd:78:fd:b6:cd:05:fd:9c:97:32:f1:
27:2f:de:9d:58:f3:68:29:e9:1b:56:47:1a:28:f1:
30:0f:f2:8b:3c:ff:f4:8f:2a:36:1a:d6:6d:a6:28:
9e:6e:04:48:77:65:c3:0d:fa:c3:fb:d7:21:18:4d:
c1:9d:1d:aa:21:ce:4b:c1:4a:39:f8:25:d6:49:e7:
47:93:d2:b7:90:ae:af:53:06:22:ef:da:bf:a5:13:
e7:56:b2:8f:0f:8a:d8:cd:67:46:ac:2b:9c:74:7a:
44:66:a7:ee:c4:cd:2f:d9:1a:c1:00:0e:d2:f1:24:
70:42:9a:e1:55:e3:a6:7b:a7:35:3b:58:e9:55:a8:
ea:db:bd:61:a8:42:b3:1a:92:b7:04:04:6e:72:fc:
b9:e4:ae:09:ff:b9:4e:55:12:98:d4:73:61:9f:4b:
3b:ea:b1:f0:de:f6:f9:3e:09:1b:eb:cb:9b:3f:d7:
0e:d9:17:4c:5f:aa:22:04:e7:bf:17:79:ce:6e:77:
96:e1:8d:c5:8e:b2:0d:ab:76:0e:3d:9c:94:35:55:
7e:07:40:62:78:02:41:fd:94:de:f8:98:96:f3:6d:
02:61:12:91:5a:cc:94:90:b1:fa:3c:04:2d:d9:4f:
5e:0f:9e:56:cb:fa:09:c7:8f:a2:c4:c6:36:94:0a:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:96:33:0A:D1:93:F9:DA:9F:CF:66:48:5B:32:98:9B:7F:62:85
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/neSWMwrRk_nan89mSFsymJt_YoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.132.0/22
IPv6:
2a03:7620::/32
Signature Algorithm: sha256WithRSAEncryption
25:8e:1d:d1:d4:ce:7b:75:21:12:e6:a7:1c:4c:b2:86:a7:1a:
d4:27:b2:4b:d3:07:dc:56:92:27:28:11:ad:80:4a:46:6d:87:
1e:40:97:d0:1e:e4:5e:21:0e:64:08:d6:53:89:86:be:85:0e:
62:5a:a9:2c:b1:52:71:57:51:b0:01:89:6b:83:ab:dc:63:75:
ea:02:28:7b:5d:ca:8e:15:6d:25:9b:ad:b2:13:33:2d:d2:af:
a5:94:dc:ab:c6:fb:e7:05:a3:80:52:d9:68:a4:73:17:d0:29:
44:d6:0d:9d:30:45:b9:60:30:7e:d6:c4:b3:2c:25:0f:7c:69:
35:67:7b:c5:65:4f:61:a5:96:6c:f5:52:8e:c5:ef:9a:12:50:
f7:5e:76:f1:03:e6:66:28:84:bb:3a:c4:71:44:7a:b9:02:f2:
ff:fc:4f:0b:64:50:50:21:7e:87:ec:46:3f:e5:d2:fc:63:83:
00:9d:c9:11:13:d0:72:d3:c4:28:51:5c:14:aa:be:3a:e3:cd:
e3:1e:f1:ca:69:3b:e8:0f:6d:ef:ee:12:88:98:f1:b5:87:f3:
93:71:65:b1:db:70:aa:e7:58:09:dc:de:6d:14:01:6c:d3:b9:
3e:ec:24:26:65:bc:71:03:2a:18:65:7a:85:eb:77:cb:c5:80:
d6:29:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net