Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BZ3yxs21nHgRD2ZkYltXABAdwg0.roa
File: BZ3yxs21nHgRD2ZkYltXABAdwg0.roa (raw, json)
Hash identifier: mNAwySpWpUAONhD0JlNQEL0VkKRo4zfjmg7u+PjYm30=
Subject key identifier: 05:9D:F2:C6:CD:B5:9C:78:11:0F:66:64:62:5B:57:00:10:1D:C2:0D
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 0190BA74A50F7DB7924CEA640F225475298E
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BZ3yxs21nHgRD2ZkYltXABAdwg0.roa
Signing time: Tue 16 Jul 2024 07:32:04 +0000
ROA not before: Tue 16 Jul 2024 07:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.231.0/24 maxlen: 24
212.74.232.0/24 maxlen: 24
212.74.233.0/24 maxlen: 24
212.74.234.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
212.74.252.0/22 maxlen: 22
212.74.253.0/24 maxlen: 24
212.74.254.0/24 maxlen: 24
2a01:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:74:a5:0f:7d:b7:92:4c:ea:64:0f:22:54:75:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jul 16 07:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=059df2c6cdb59c78110f6664625b5700101dc20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:3f:25:a3:5f:4d:59:c7:6a:3a:a7:3e:5b:
79:bb:19:ec:ba:53:21:8d:8e:66:1b:35:58:ee:3e:
4f:b5:c6:ad:ae:67:bc:88:ab:99:e9:13:61:1c:64:
f0:34:5c:76:12:57:fe:c7:4f:13:26:8c:b0:1d:57:
e6:42:c9:60:5b:2e:88:56:20:18:48:39:7b:c8:e5:
a3:80:25:80:c3:89:bd:71:51:6e:2a:4a:16:01:9d:
a2:de:70:06:dd:b2:ef:cf:ee:0c:60:c8:c6:00:4f:
3b:cd:4e:4a:e4:3d:c6:69:17:f0:97:1f:8e:f3:1b:
ca:bc:44:96:94:ef:19:d3:25:0a:84:2f:48:65:6e:
f5:be:b3:d7:cf:b9:8d:47:b0:99:95:f3:6e:bc:7c:
92:56:4a:f8:4b:8b:86:ca:8f:09:a5:64:56:9c:93:
be:d7:9a:13:71:1a:27:db:0a:cc:43:c8:4d:3b:1b:
0d:74:bf:6c:da:75:8d:ae:9c:85:b1:db:d7:24:6b:
e8:b6:b2:b5:cf:ab:26:c4:b9:ad:ab:4c:ed:68:25:
57:64:de:20:ed:a5:07:bc:37:ea:21:97:8d:1a:f3:
63:1d:23:7a:68:8c:82:df:bc:eb:21:61:7a:9b:9b:
b6:e6:88:90:df:41:7d:b2:82:4e:b2:0c:8e:c1:49:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:F2:C6:CD:B5:9C:78:11:0F:66:64:62:5B:57:00:10:1D:C2:0D
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BZ3yxs21nHgRD2ZkYltXABAdwg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.231.0-212.74.235.255
212.74.237.0/24
212.74.240.0/21
212.74.252.0/22
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
96:16:79:52:d3:a7:2f:c9:50:12:2b:d9:cf:33:95:a1:a4:79:
0f:ef:17:0e:d7:05:6a:a6:84:85:bb:8a:1f:d9:c7:98:9b:9e:
84:a2:3d:6f:4d:05:64:ff:8e:62:76:46:52:d8:8e:3a:87:a9:
ec:10:1e:82:56:2d:66:49:62:27:95:25:ee:5f:21:5d:9f:b3:
cb:2d:b0:fb:54:e6:5f:20:ba:6b:26:a8:60:72:36:35:f1:e3:
a7:75:f7:00:5c:83:30:7c:2c:4e:65:ed:70:0e:2e:d2:5a:39:
6e:46:4d:e9:ed:0b:24:58:86:e7:ae:9d:d5:33:67:eb:5a:a8:
d3:28:03:39:79:2d:05:c8:7a:01:ac:64:7e:92:2d:d5:59:a5:
90:41:f3:22:65:cb:cd:b9:d5:c1:3a:9f:f8:cd:d2:91:31:79:
67:73:63:c6:c9:ac:58:57:aa:63:13:64:c1:d8:98:ca:80:21:
56:75:33:e5:a5:02:f2:06:59:8c:78:eb:e1:2f:77:31:5c:87:
c3:56:c0:33:c8:37:16:50:ac:d6:d8:db:df:90:80:e7:39:96:
d6:af:65:26:c4:35:d0:c0:32:3c:46:d1:b8:d5:3b:4a:7a:16:
54:49:52:07:17:a5:24:ee:ed:5f:b4:1f:1c:c2:3a:70:50:39:
2f:f4:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:46:38 2024 by rpki-client on console.sobornost.net