Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/47aft48JoLRR-03wOHcNfB-BxWU.roa
File: 47aft48JoLRR-03wOHcNfB-BxWU.roa (raw, json)
Hash identifier: lVRGcDzjpYk1rrYKId3l1Hba/o/tlKM1PsiI+UJxmzE=
Subject key identifier: E3:B6:9F:B7:8F:09:A0:B4:51:FB:4D:F0:38:77:0D:7C:1F:81:C5:65
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 0191E4F2E3B59CAF2AA0A256A79B6BC19318
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/47aft48JoLRR-03wOHcNfB-BxWU.roa
Signing time: Thu 12 Sep 2024 06:36:48 +0000
ROA not before: Thu 12 Sep 2024 06:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.231.0/24 maxlen: 24
212.74.232.0/24 maxlen: 24
212.74.233.0/24 maxlen: 24
212.74.234.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:f2:e3:b5:9c:af:2a:a0:a2:56:a7:9b:6b:c1:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Sep 12 06:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3b69fb78f09a0b451fb4df038770d7c1f81c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:e6:03:be:a3:70:7b:ed:2b:64:95:d2:5a:
75:73:da:70:f5:b4:13:62:d1:74:67:8e:1c:90:1d:
4c:fc:80:79:f1:a3:d6:67:d0:03:9c:b4:4d:1d:73:
d3:11:2a:8a:31:1e:ca:e7:50:84:19:c3:48:7d:79:
d9:2e:b6:4f:c1:23:00:3c:ed:63:61:d6:02:29:15:
a4:0f:38:3b:ef:04:0d:47:29:f9:7f:07:ed:34:ad:
99:92:77:78:ef:52:55:4f:ee:8d:dc:db:f0:5b:ac:
09:31:19:1d:15:ec:9b:ee:e6:be:09:d6:48:de:dc:
5f:d2:d2:0f:d6:14:86:c4:9c:a8:02:34:bb:22:15:
53:fa:3d:ea:e3:38:ae:3d:fe:e9:62:31:39:d1:d0:
4a:19:a7:73:05:34:19:7b:3c:ff:64:fc:a5:ce:e0:
ad:5f:91:e0:f9:23:50:d3:81:c3:51:1f:24:c3:a1:
c5:6d:40:dc:e5:5a:97:60:ee:78:f9:a5:3e:9c:0e:
e6:93:9d:0d:52:26:eb:ea:0e:b9:21:ae:ae:a8:8a:
c2:21:9d:7f:7a:62:f0:06:0b:6b:48:40:57:ff:6c:
40:d1:83:c4:2b:1a:d9:d4:75:7e:f3:a4:14:b8:3f:
fc:00:7b:e1:a2:6c:9a:c0:df:ab:df:0d:f3:36:90:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:9F:B7:8F:09:A0:B4:51:FB:4D:F0:38:77:0D:7C:1F:81:C5:65
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/47aft48JoLRR-03wOHcNfB-BxWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.231.0-212.74.235.255
212.74.237.0/24
212.74.240.0/21
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
88:19:e0:75:55:b6:fd:58:c1:9f:92:33:a3:cc:a2:9c:03:fc:
f7:be:bc:80:89:8c:58:52:cd:ca:03:72:ca:8f:fe:74:15:5b:
3f:bc:67:57:7c:da:45:54:35:20:1c:49:f9:c2:46:ff:17:50:
e9:b2:4c:fb:a7:9b:14:cd:30:4d:17:8a:9e:3e:5c:73:64:de:
64:2c:b8:0f:5a:81:b8:3d:6a:9c:88:3e:fe:45:83:61:22:a3:
99:bf:ac:57:4b:76:bf:66:12:5e:7c:b0:45:bf:09:f9:17:5d:
44:12:81:75:27:45:21:1e:23:8b:21:86:e1:50:85:2f:84:12:
56:7a:50:6d:6e:3a:96:5a:90:ad:09:2c:87:1c:2b:f9:11:cb:
db:0b:36:9e:28:35:23:6a:d7:f0:fe:32:b7:1f:6f:a0:0d:ad:
95:e8:7b:22:2a:45:ac:3d:7a:72:1d:7c:77:50:e6:d8:bc:39:
21:af:51:19:24:3e:89:33:c6:69:bb:0e:38:65:da:1c:8a:bf:
e8:e3:fc:e7:b6:12:79:50:0d:ad:82:05:4b:2d:fd:e0:6c:2f:
3e:3a:c7:03:fb:8e:8b:ef:26:32:fd:c5:1b:ae:a8:f3:45:92:
33:51:ab:10:81:34:46:c6:dd:2f:de:3f:a4:da:77:5e:e8:43:
fb:1e:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:03 2024 by rpki-client on console.sobornost.net