Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/qUAvIqlcvAPLDyh8jbnT6odOO6s.roa
File: qUAvIqlcvAPLDyh8jbnT6odOO6s.roa (raw, json)
Hash identifier: lOQBBvouwVpha6RZ2pcVLRbFyie4fMg7aVFDdWyzpVc=
Subject key identifier: A9:40:2F:22:A9:5C:BC:03:CB:0F:28:7C:8D:B9:D3:EA:87:4E:3B:AB
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 0191B31F5CBB696C329B7235CE19BE755A28
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/qUAvIqlcvAPLDyh8jbnT6odOO6s.roa
Signing time: Mon 02 Sep 2024 14:24:22 +0000
ROA not before: Mon 02 Sep 2024 14:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21056
IP address blocks: 45.84.140.0/22 maxlen: 32
45.143.36.0/22 maxlen: 32
45.151.12.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
78.152.96.0/19 maxlen: 32
79.135.32.0/19 maxlen: 32
80.93.128.0/20 maxlen: 32
83.137.56.0/21 maxlen: 24
87.247.232.0/21 maxlen: 32
91.143.192.0/20 maxlen: 32
94.138.160.0/19 maxlen: 32
103.26.124.0/22 maxlen: 22
103.43.232.0/22 maxlen: 22
103.61.184.0/22 maxlen: 22
103.248.184.0/22 maxlen: 24
103.248.186.0/24 maxlen: 24
109.122.208.0/21 maxlen: 21
144.48.192.0/22 maxlen: 32
185.125.64.0/22 maxlen: 22
185.158.116.0/22 maxlen: 32
185.170.36.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
185.224.104.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
185.230.192.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
185.231.160.0/22 maxlen: 32
185.234.164.0/22 maxlen: 32
185.241.20.0/22 maxlen: 32
188.240.32.0/22 maxlen: 22
193.124.240.0/22 maxlen: 22
194.58.216.0/22 maxlen: 22
213.182.64.0/19 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:1f:5c:bb:69:6c:32:9b:72:35:ce:19:be:75:5a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Sep 2 14:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9402f22a95cbc03cb0f287c8db9d3ea874e3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:a8:d9:62:af:17:12:7e:9e:59:64:12:7f:
f9:63:18:9b:36:cd:91:c4:59:57:70:fe:ad:98:0a:
a7:a1:24:4f:b8:11:f9:09:5d:96:70:0c:ef:3f:9a:
77:15:c9:5b:c5:f1:b3:8c:5a:1c:38:62:89:0c:f3:
4c:40:73:0d:f3:18:d9:7c:69:5a:ac:23:b0:37:30:
95:c5:57:d3:82:f6:cc:f1:20:43:db:38:a1:4e:a8:
29:63:ac:5e:11:b8:a5:56:bd:56:67:6f:f9:41:51:
cb:6b:53:76:33:14:ba:7c:ec:db:25:91:e6:98:98:
03:48:8b:04:af:37:91:ec:36:02:ec:e8:3e:9d:22:
95:b4:16:d7:f8:80:4a:99:0a:7c:21:32:48:fc:e9:
a4:ec:70:c5:71:e2:b8:b5:38:f2:b0:01:02:fa:8c:
79:b2:e4:4c:fe:32:37:e5:67:f2:8b:ac:a9:8f:ac:
1b:dc:50:5e:34:2c:ba:29:67:af:62:0e:d5:9e:f4:
26:fe:7e:7a:8a:77:da:c0:fe:91:de:da:b7:a9:2c:
35:12:ad:d8:bd:7f:9c:94:0e:68:9c:ac:e0:bc:0f:
12:9c:6c:26:ae:ad:ca:c6:76:bb:c2:90:32:77:8c:
fa:b9:06:a5:8d:02:40:9d:63:a0:a7:41:d9:88:3b:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:2F:22:A9:5C:BC:03:CB:0F:28:7C:8D:B9:D3:EA:87:4E:3B:AB
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/qUAvIqlcvAPLDyh8jbnT6odOO6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.12.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.135.32.0/19
80.93.128.0/20
83.137.56.0/21
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
103.26.124.0/22
103.43.232.0/22
103.61.184.0/22
103.248.184.0/22
109.122.208.0/21
144.48.192.0/22
185.125.64.0/22
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
188.240.32.0/22
193.124.240.0/22
194.58.216.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
b6:35:90:f3:08:3c:91:0b:04:8e:c5:4d:24:05:77:85:7f:34:
32:0d:78:b8:9e:79:ad:9d:23:e7:0e:99:6e:29:21:f4:82:c5:
28:c7:17:e5:47:d9:8e:b7:fe:cb:e8:9b:17:51:f6:ad:14:9e:
09:80:72:37:2a:a9:03:20:ed:bd:40:eb:9c:62:a3:24:a4:7f:
65:ad:a2:67:72:46:15:88:a0:98:b2:e4:39:57:4d:0c:11:cf:
dc:8f:96:f4:8d:7c:e4:44:ae:b4:5c:6c:5a:a4:0c:24:1e:af:
93:c1:94:b8:ff:8b:55:b6:d1:7e:c0:22:85:a9:95:d5:0d:91:
33:53:9e:65:3c:2b:dd:a2:37:c1:33:25:06:bc:34:ae:30:82:
1b:02:3d:dc:e9:6b:81:9e:10:5d:ad:e5:bf:54:8b:e6:5a:9b:
7d:15:ab:4f:7e:29:3a:a9:b3:03:1b:12:cd:0b:87:41:9f:63:
26:29:b1:55:2e:6e:8b:35:f9:7f:73:2c:f3:61:a6:17:43:73:
3a:d7:bb:b4:e7:e1:05:c0:74:83:c8:fd:0e:bd:47:c7:d3:c7:
9e:25:31:68:f7:d5:1c:ca:22:08:44:7f:f4:8b:32:c3:5f:b7:
3d:c5:d4:ce:62:f8:20:b0:c5:d3:a6:e1:d7:42:d2:86:1e:a8:
5e:13:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net