Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/syOMELE5dRbhPLcyE3yK9ZXCbls.roa
File: syOMELE5dRbhPLcyE3yK9ZXCbls.roa (raw, json)
Hash identifier: iS8HN0PM/0n5RejZBLo3hyyRrKvyZZwOdQCjKKwvDJ8=
Subject key identifier: B3:23:8C:10:B1:39:75:16:E1:3C:B7:32:13:7C:8A:F5:95:C2:6E:5B
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019372CBF8A764923FB4E5A351AD5E7F980C
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/syOMELE5dRbhPLcyE3yK9ZXCbls.roa
Signing time: Thu 28 Nov 2024 12:43:10 +0000
ROA not before: Thu 28 Nov 2024 12:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39089
IP address blocks: 31.133.56.0/21 maxlen: 24
31.133.56.0/24 maxlen: 24
31.133.57.0/24 maxlen: 24
31.133.58.0/24 maxlen: 24
31.133.59.0/24 maxlen: 24
31.133.60.0/24 maxlen: 24
31.133.61.0/24 maxlen: 24
31.133.62.0/24 maxlen: 24
31.133.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:cb:f8:a7:64:92:3f:b4:e5:a3:51:ad:5e:7f:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Nov 28 12:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3238c10b1397516e13cb732137c8af595c26e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:e4:dc:94:46:16:cb:97:90:e7:31:98:e7:
58:53:54:a3:e9:e7:95:55:e1:a3:15:6b:6a:4f:d5:
2f:c0:51:32:f4:9f:bf:d6:ec:a2:19:2e:8f:91:db:
8f:de:e4:8d:bf:6d:a2:b2:2e:03:cc:b2:62:39:42:
1e:78:2a:64:7e:e5:80:f8:b6:66:43:cb:54:95:61:
60:9a:18:ac:30:b0:15:1f:5f:75:40:34:68:89:4a:
d4:e4:89:45:60:49:f6:dd:49:e7:95:33:8a:c0:2b:
23:44:2c:aa:11:41:44:31:6b:a3:8b:f8:6d:99:b0:
94:40:d6:df:53:47:ac:18:eb:21:ee:ce:ee:5a:6c:
e5:ff:76:4c:f2:18:4d:5b:d2:8a:cf:4a:55:1b:d4:
ad:bc:c4:ea:eb:60:66:e7:7f:bf:ce:ad:cc:1c:66:
76:93:fd:b6:6a:7c:1d:93:05:05:4d:96:5d:3d:7d:
d3:f3:3f:5e:67:a9:41:f2:6f:1f:37:0f:10:e2:cf:
fd:a5:9b:95:2f:83:0b:43:1d:23:b0:82:34:8c:18:
5a:cb:60:c4:aa:f1:8c:38:29:e8:48:6b:1c:7b:05:
56:fe:65:d7:0c:f9:fa:c4:87:4c:de:a4:86:1a:db:
63:8a:68:bb:1f:b0:71:bf:77:14:65:e4:4b:d8:b9:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:8C:10:B1:39:75:16:E1:3C:B7:32:13:7C:8A:F5:95:C2:6E:5B
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/syOMELE5dRbhPLcyE3yK9ZXCbls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.56.0/21
Signature Algorithm: sha256WithRSAEncryption
64:d3:98:84:8d:55:0e:40:3d:60:7c:9a:a2:fb:14:f0:c1:0c:
ec:01:bd:ef:0a:60:bb:ca:d6:fa:e8:1c:eb:4f:87:f3:dd:6e:
01:53:f5:e1:1e:b7:ab:d3:25:ca:fe:b7:aa:55:54:5c:4b:5c:
28:e4:50:43:3f:06:13:d6:31:e8:c4:82:1f:06:13:12:50:5f:
d4:01:08:a4:0e:07:70:a1:ad:f8:70:77:4d:ee:90:f9:b1:e1:
01:d4:ab:82:b1:f8:9c:db:10:b2:5c:77:4b:b3:3d:1d:43:79:
44:5f:b7:8b:12:8e:66:8c:ee:e2:63:fd:9e:29:2f:bf:61:61:
6c:19:c7:ce:cf:5d:62:5f:d8:d8:dc:bd:ef:85:28:dc:f1:22:
5a:21:2d:b7:65:bb:2c:b3:78:6b:1c:01:25:cb:a0:96:f9:c2:
69:7d:97:d9:fe:1c:7c:0d:fd:a9:c5:79:43:31:9a:8a:92:72:
ea:a1:65:cc:c9:74:4f:0c:5b:3c:19:11:06:0e:c3:07:aa:dd:
9c:66:2c:7d:ef:ba:45:06:9f:dd:ea:60:52:27:1f:21:52:c0:
65:a4:7d:6d:2f:a7:1d:af:32:55:2c:23:5e:1f:3a:78:60:c8:
7b:7f:68:e6:85:7a:c3:45:9d:fb:fd:82:d3:43:5d:c1:c8:24:
6c:6f:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net