Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/ABIMNM-eevlJMiZ77fDlM3iiL_c.roa
File: ABIMNM-eevlJMiZ77fDlM3iiL_c.roa (raw, json)
Hash identifier: BLY4dduGfB0cpjA0AXqCFF1f3x/TVX8dEQK7HNl+ZCw=
Subject key identifier: 00:12:0C:34:CF:9E:7A:F9:49:32:26:7B:ED:F0:E5:33:78:A2:2F:F7
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 018CC500E91319F02C3F187033584514538E
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/ABIMNM-eevlJMiZ77fDlM3iiL_c.roa
Signing time: Mon 01 Jan 2024 12:30:20 +0000
ROA not before: Mon 01 Jan 2024 12:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199496
IP address blocks: 185.13.76.0/22 maxlen: 32
95.129.248.0/21 maxlen: 32
185.65.156.0/22 maxlen: 32
185.249.76.0/22 maxlen: 32
185.235.220.0/22 maxlen: 32
185.165.252.0/22 maxlen: 32
2a00:83e0::/32 maxlen: 64
2a02:f4c0::/29 maxlen: 64
2a09:d00::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e9:13:19:f0:2c:3f:18:70:33:58:45:14:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00120c34cf9e7af94932267bedf0e53378a22ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:dc:6c:4c:ee:b4:6d:0e:ec:5b:4d:a4:df:
bd:6c:5b:d4:b1:08:c1:f5:11:fb:33:12:68:bf:47:
4b:67:32:c1:49:a5:b3:c7:9a:75:8d:c3:60:dd:7c:
08:82:ff:4b:dd:3f:77:87:31:af:e7:3c:d9:31:4e:
1a:0d:78:63:7f:83:59:69:16:99:6f:2b:55:ef:05:
84:d1:ba:a9:c8:62:95:35:44:c8:1d:62:18:2e:02:
c8:ca:d8:9f:01:68:76:bc:42:26:2d:72:9e:f7:fb:
ca:5d:6d:b9:fb:e1:42:75:18:b0:53:d9:fd:33:b9:
7e:51:4e:6d:f3:46:ec:16:70:ba:5b:f5:25:6c:3c:
7b:10:80:3c:3c:19:df:5b:35:ed:ee:d5:18:cf:d4:
1a:a7:b7:1f:64:67:a8:35:9a:57:2e:94:0e:ac:4f:
74:0e:8b:27:5e:2c:c0:92:ac:8f:14:ba:c3:45:2b:
a9:05:d9:24:27:4a:07:89:5d:b5:9e:ba:0f:b5:27:
0d:f6:86:12:88:64:65:7f:fe:c0:b8:f1:5f:58:16:
fd:17:6f:d8:6f:07:13:da:f1:25:c3:76:7e:9c:d2:
30:0d:ab:e0:6f:e3:3e:c6:00:f7:da:34:12:fc:47:
92:e8:85:bc:f4:65:7b:37:c8:f8:09:76:67:e9:98:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:0C:34:CF:9E:7A:F9:49:32:26:7B:ED:F0:E5:33:78:A2:2F:F7
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/ABIMNM-eevlJMiZ77fDlM3iiL_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.248.0/21
185.13.76.0/22
185.65.156.0/22
185.165.252.0/22
185.235.220.0/22
185.249.76.0/22
IPv6:
2a00:83e0::/32
2a02:f4c0::/29
2a09:d00::/29
Signature Algorithm: sha256WithRSAEncryption
54:a7:f4:71:60:8d:61:ad:d2:77:f4:28:50:6e:14:f8:f8:b5:
ed:a5:52:aa:72:a5:2b:0e:3c:20:06:43:b3:f1:5e:71:97:1e:
cd:06:9f:51:ba:d6:b6:91:eb:61:14:85:82:09:b5:fd:63:b4:
9f:33:58:9f:f0:73:5e:90:2d:0a:55:cb:86:c1:10:78:26:64:
4d:c6:48:d6:60:2d:1b:6b:36:12:ea:da:db:f0:5d:09:42:c5:
2c:d0:86:76:0e:a8:dd:e6:66:64:bf:2d:63:20:c7:2b:44:12:
7a:ba:8d:d1:96:e9:da:2b:80:f8:21:c1:a8:11:2b:e7:04:60:
db:93:0f:0e:24:cf:bc:6e:66:98:9c:c3:98:91:ed:75:7d:ee:
df:ce:30:f4:4c:37:44:da:12:aa:c6:78:19:4b:3d:13:0b:fb:
76:32:9b:40:25:da:e9:35:32:41:54:c6:5d:87:d0:b0:83:29:
62:42:4c:cd:32:55:a2:6d:c4:bf:48:b5:0c:2f:37:bf:d0:91:
44:dd:ba:e6:9b:94:26:4c:0e:87:0d:54:18:ec:83:29:48:d3:
94:d6:c0:53:9d:b1:3d:f2:98:e5:47:1f:30:4c:ef:6f:82:91:
4d:79:56:83:71:bd:58:45:39:d1:57:cb:d9:5f:14:c7:af:2e:
fb:17:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net