Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/iNClIr4juAf7Ect1XxjVVHgkyeI.roa
File: iNClIr4juAf7Ect1XxjVVHgkyeI.roa (raw, json)
Hash identifier: /qeRZZnKMc1HK4Nqp9G2yjffpKEirWmqo0aJn5ulSfI=
Subject key identifier: 88:D0:A5:22:BE:23:B8:07:FB:11:CB:75:5F:18:D5:54:78:24:C9:E2
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 0193B04ACA410A61AD999CA67F203450E85A
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/iNClIr4juAf7Ect1XxjVVHgkyeI.roa
Signing time: Tue 10 Dec 2024 11:18:31 +0000
ROA not before: Tue 10 Dec 2024 11:18:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49436
IP address blocks: 185.248.188.0/22 maxlen: 22
185.248.188.0/23 maxlen: 23
185.248.190.0/24 maxlen: 24
185.248.191.0/24 maxlen: 24
2a0e:1b00::/32 maxlen: 32
2a0e:1b01::/32 maxlen: 32
2a0e:1b07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:4a:ca:41:0a:61:ad:99:9c:a6:7f:20:34:50:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Dec 10 11:18:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d0a522be23b807fb11cb755f18d5547824c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:86:a3:82:42:23:1e:0d:08:ac:bd:3b:4c:
f1:a3:85:f8:85:2f:e4:80:db:7d:8a:65:2b:f7:99:
7b:14:7a:17:46:1e:4e:40:8e:f6:9d:1b:70:fa:62:
36:64:73:36:49:70:28:5f:96:77:ea:1f:b1:12:d2:
3a:73:1d:8b:f2:b8:22:8d:17:a0:d1:07:aa:08:2e:
04:96:af:f9:e6:52:02:e0:06:d7:2f:20:45:e3:23:
99:a4:62:99:5b:c8:2b:ae:6d:4b:65:88:63:72:f4:
34:3f:4d:f3:d7:65:f2:67:44:a7:37:fe:64:6c:d2:
9c:84:d8:e6:b8:d7:17:ae:64:8b:41:a8:17:d8:64:
70:ab:fe:d6:7a:d0:ac:bf:01:05:c2:41:2e:44:74:
13:18:e1:95:7a:c0:f4:84:63:15:b5:a8:e0:f4:f8:
39:a3:05:81:f6:24:34:f2:bc:10:53:34:06:b9:38:
fa:fe:ad:b4:dc:f7:32:4d:63:03:91:ca:28:98:2b:
21:21:b4:5c:73:a0:26:27:14:b1:87:62:0a:0c:e8:
b5:8c:b9:29:17:58:3d:61:d2:cd:7f:2f:2b:06:c3:
0e:e3:d9:03:92:f0:4d:5c:3e:ed:ae:9c:59:71:70:
57:77:53:8e:4d:d1:2f:fd:84:a3:af:85:47:5b:df:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:A5:22:BE:23:B8:07:FB:11:CB:75:5F:18:D5:54:78:24:C9:E2
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/iNClIr4juAf7Ect1XxjVVHgkyeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.188.0/22
IPv6:
2a0e:1b00::/31
2a0e:1b07::/32
Signature Algorithm: sha256WithRSAEncryption
9d:ec:3c:2c:ab:46:66:01:8e:aa:74:a5:29:c5:32:56:93:5c:
70:25:3e:b1:91:ef:55:a3:fa:e2:fc:86:ab:8d:d0:58:f5:b5:
2d:25:f2:bd:87:b9:9a:52:e9:0d:ef:9d:33:65:57:6e:6b:b1:
69:12:56:da:0e:66:6f:bd:58:95:fd:2c:c3:00:ee:8f:c0:ac:
85:79:5a:d9:90:d4:4f:33:26:01:7b:cc:01:46:55:a0:37:1c:
ba:7b:22:a7:f8:27:35:a8:21:c1:49:28:76:e4:a2:70:c2:0e:
66:12:4e:8d:27:b0:ce:29:67:4d:eb:b3:96:00:30:58:37:f8:
aa:c2:88:12:3e:83:cd:53:ba:cb:26:90:23:a9:b9:3a:99:ca:
a4:35:ca:6f:63:c9:33:5f:04:f5:e5:01:f9:0c:f3:68:e9:31:
0d:af:e2:e3:b2:08:22:48:8f:1c:59:10:ea:d1:3d:07:61:a4:
8f:d8:b8:18:6a:33:e2:e6:77:ec:2a:4d:b3:d5:84:5f:d6:94:
7c:66:80:2e:d6:ba:c9:67:9f:47:c1:e4:1b:50:a5:f6:0e:51:
5f:06:2a:50:5b:f8:8b:1a:85:ba:0e:78:cc:f5:47:bb:12:ca:
01:7b:54:00:6c:82:62:72:47:54:cf:86:49:2e:f8:04:98:4a:
d3:1a:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net