Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/nI56b2cqwBFaxbNOUMrVlpmF49c.roa
File: nI56b2cqwBFaxbNOUMrVlpmF49c.roa (raw, json)
Hash identifier: xpNIbDggONzuzkaoYNkfcw/n7T1G/QrqlynI6TKLiQ8=
Subject key identifier: 9C:8E:7A:6F:67:2A:C0:11:5A:C5:B3:4E:50:CA:D5:96:99:85:E3:D7
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 019025E616FE2A8876F471AB4DC27320502A
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/nI56b2cqwBFaxbNOUMrVlpmF49c.roa
Signing time: Mon 17 Jun 2024 11:12:34 +0000
ROA not before: Mon 17 Jun 2024 11:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25106
IP address blocks: 46.56.40.0/21 maxlen: 21
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
46.216.0.0/17 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
46.216.152.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.192.0/21 maxlen: 21
46.216.246.0/24 maxlen: 24
134.17.0.0/20 maxlen: 24
134.17.0.0/23 maxlen: 23
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
134.17.64.0/20 maxlen: 20
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
134.17.96.0/19 maxlen: 19
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
134.17.208.0/20 maxlen: 24
134.17.208.0/22 maxlen: 24
134.17.224.0/20 maxlen: 24
176.60.0.0/18 maxlen: 24
176.60.4.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
176.60.44.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.176.0/23 maxlen: 23
176.60.184.0/22 maxlen: 24
176.60.192.0/18 maxlen: 24
176.60.192.0/20 maxlen: 20
176.60.208.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
178.168.144.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
178.168.168.0/21 maxlen: 24
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
178.168.242.0/23 maxlen: 23
178.168.253.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
185.20.114.0/23 maxlen: 23
2a02:bf0::/32 maxlen: 32
2a02:bf0::/48 maxlen: 48
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:25::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:100::/44 maxlen: 44
2a02:bf0:110::/44 maxlen: 44
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:1003::/48 maxlen: 48
2a02:bf0:3000::/36 maxlen: 44
2a02:bf0:4000::/36 maxlen: 44
2a02:bf0:5000::/36 maxlen: 44
2a02:bf0:6000::/36 maxlen: 44
2a02:bf0:7000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:e6:16:fe:2a:88:76:f4:71:ab:4d:c2:73:20:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jun 17 11:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c8e7a6f672ac0115ac5b34e50cad5969985e3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:a5:2d:07:42:17:e6:32:86:33:15:e1:66:
f3:25:75:ce:a2:ca:c3:a1:59:c3:2f:c5:8e:4c:93:
73:e3:85:5e:e4:37:5a:55:8b:ef:4b:de:61:29:f1:
f8:8a:e6:78:4f:6b:d2:c9:93:4b:a3:5b:92:34:6d:
fe:bb:af:95:91:f1:4d:d9:ef:9b:9b:fc:1c:f4:fc:
eb:1c:63:fd:60:b7:f1:38:db:af:55:4c:c2:4d:43:
a4:9f:d5:29:ca:72:f2:ba:e3:22:3a:45:e3:d8:92:
01:eb:4b:4e:ca:8c:51:05:bc:fb:24:b4:3d:5b:a1:
83:74:91:70:1f:01:ef:c5:a3:c4:56:d6:bc:3a:fa:
d0:af:9a:1d:53:c1:39:9c:4b:5a:9d:a5:18:48:b6:
e2:89:90:e9:1c:a5:95:2e:6c:d5:2f:59:5c:f2:2f:
b9:01:d8:ab:78:dc:a9:c7:73:50:e5:bc:2f:3c:c8:
33:10:e1:7f:21:28:a7:bc:1a:dc:2c:41:20:23:b5:
11:bb:ad:3e:bb:69:d0:ba:22:2c:5e:aa:4a:57:45:
ce:67:14:ad:e4:ba:23:66:e5:4d:d1:53:ba:21:89:
34:da:83:e9:d6:11:6c:3f:ff:e4:6c:f9:16:8a:6c:
88:34:76:ed:8c:57:0f:3f:ae:44:ad:8e:ca:a1:17:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:7A:6F:67:2A:C0:11:5A:C5:B3:4E:50:CA:D5:96:99:85:E3:D7
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/nI56b2cqwBFaxbNOUMrVlpmF49c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
84:d9:b0:56:ca:c9:b6:a7:0d:d5:67:05:2a:bc:33:61:fd:a0:
f7:c5:84:4a:ad:5c:a9:21:d8:2b:7e:29:f9:6b:0e:83:ff:3c:
09:14:0d:20:37:fb:af:72:4f:65:8a:c3:09:24:ce:9f:13:f0:
ec:86:66:57:69:15:42:66:da:d8:c6:2d:ca:1d:b9:ff:bc:fa:
8b:46:94:fb:85:9e:89:98:28:97:4e:04:ce:52:30:1d:87:40:
00:c8:30:89:f6:09:95:ee:43:e3:f6:94:e9:6b:6e:22:71:ae:
47:2f:22:c4:aa:21:7c:f7:b8:66:9d:c5:d8:15:6e:2d:24:01:
bb:91:28:f6:8b:49:22:3a:fc:23:7a:ea:9e:31:94:e7:bd:56:
a8:83:96:b5:1b:2a:d4:e4:93:09:6a:25:45:4c:a1:f7:25:87:
6e:46:0f:33:99:b6:e1:97:36:b7:d2:4c:a8:8e:0d:b2:43:cd:
82:ac:66:0b:ef:a7:5f:8a:12:7d:2e:c3:0f:97:ae:49:2d:79:
93:de:11:39:6c:85:8c:93:d9:d9:56:92:29:c0:81:dd:ef:a1:
59:0f:5a:2a:ff:e7:9c:5b:bf:3c:21:06:f6:66:f0:bb:57:a1:
4b:cb:85:b4:a2:5f:df:ca:d4:ee:07:b1:66:bd:a9:5f:8c:36:
81:e0:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net