Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/C7DRrbJAabdZC9xMx4I7SZA7EXY.roa
File: C7DRrbJAabdZC9xMx4I7SZA7EXY.roa (raw, json)
Hash identifier: FZw7hn6ceWUz0vN8Z3fOWMNA2YobKhoSSfIRNEl/3uA=
Subject key identifier: 0B:B0:D1:AD:B2:40:69:B7:59:0B:DC:4C:C7:82:3B:49:90:3B:11:76
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 018F90A7C2D8E355F0324A82A2A1E51C165E
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/C7DRrbJAabdZC9xMx4I7SZA7EXY.roa
Signing time: Sun 19 May 2024 11:41:04 +0000
ROA not before: Sun 19 May 2024 11:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47956
IP address blocks: 5.102.192.0/18 maxlen: 24
31.210.176.0/20 maxlen: 24
37.46.32.0/20 maxlen: 24
91.205.152.0/22 maxlen: 24
94.230.80.0/20 maxlen: 24
141.226.0.0/19 maxlen: 24
141.226.0.0/21 maxlen: 21
141.226.0.0/22 maxlen: 22
141.226.4.0/22 maxlen: 22
141.226.8.0/21 maxlen: 21
141.226.8.0/22 maxlen: 22
141.226.12.0/22 maxlen: 22
141.226.32.0/20 maxlen: 24
141.226.48.0/22 maxlen: 24
141.226.52.0/23 maxlen: 24
141.226.54.0/24 maxlen: 24
141.226.56.0/21 maxlen: 24
141.226.64.0/22 maxlen: 24
141.226.68.0/23 maxlen: 24
141.226.70.0/24 maxlen: 24
141.226.72.0/21 maxlen: 24
141.226.144.0/20 maxlen: 24
141.226.144.0/21 maxlen: 21
141.226.152.0/21 maxlen: 21
141.226.160.0/20 maxlen: 24
141.226.160.0/21 maxlen: 21
141.226.160.0/22 maxlen: 22
141.226.168.0/21 maxlen: 21
141.226.176.0/21 maxlen: 24
188.120.128.0/19 maxlen: 24
2a02:ed0::/29 maxlen: 29
2a02:ed0::/32 maxlen: 48
2a02:ed1::/32 maxlen: 32
2a02:ed2::/32 maxlen: 32
2a02:ed2::/40 maxlen: 48
2a02:ed3::/32 maxlen: 48
2a02:ed5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:a7:c2:d8:e3:55:f0:32:4a:82:a2:a1:e5:1c:16:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: May 19 11:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bb0d1adb24069b7590bdc4cc7823b49903b1176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:ce:ff:a9:d3:47:84:81:8d:2d:00:8d:b8:
70:c9:49:e2:96:85:16:9e:5d:b6:be:86:7c:92:d5:
e3:8b:69:fe:a2:5c:10:2e:99:46:6d:10:2f:29:91:
3c:38:99:cb:ad:11:19:18:e8:de:f1:ee:b5:28:aa:
81:6c:30:8e:7c:90:a3:e7:6b:33:4c:da:58:fd:e8:
b6:ff:48:99:7d:b5:48:b9:8a:93:f1:b3:be:d2:b0:
d6:36:ec:1b:85:91:03:5f:1b:d3:47:ec:6b:27:d4:
c7:c2:40:17:7b:af:a7:bd:76:25:28:96:1d:d6:be:
8a:e3:bf:18:dc:87:cd:5c:2c:83:43:65:df:ba:2a:
21:2a:fc:51:36:d2:a2:be:ab:6a:45:90:fd:79:76:
68:cc:de:b8:31:82:8c:0a:1a:4a:db:0c:a2:f9:9b:
88:e1:25:67:d4:0b:eb:be:9b:ba:3c:cf:b1:d3:8b:
ac:51:2d:15:e6:4a:1f:ea:e7:5d:b2:36:d7:6b:b8:
3e:f2:19:91:90:d9:ae:05:e5:82:7c:7f:cb:ef:67:
70:97:d6:61:23:d6:99:a1:48:a8:c5:60:1b:24:4b:
cc:c6:25:d1:d7:86:11:0d:01:a5:f4:d7:f2:e7:a0:
8e:54:e8:a0:0d:82:3e:cd:6e:ed:83:fa:11:10:bb:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:D1:AD:B2:40:69:B7:59:0B:DC:4C:C7:82:3B:49:90:3B:11:76
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/C7DRrbJAabdZC9xMx4I7SZA7EXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.192.0/18
31.210.176.0/20
37.46.32.0/20
91.205.152.0/22
94.230.80.0/20
141.226.0.0-141.226.54.255
141.226.56.0-141.226.70.255
141.226.72.0/21
141.226.144.0-141.226.183.255
188.120.128.0/19
IPv6:
2a02:ed0::/29
Signature Algorithm: sha256WithRSAEncryption
67:a5:f1:40:b7:26:45:e5:78:7b:a1:91:04:45:14:86:7c:1f:
b9:93:0f:a3:aa:88:1c:a6:3f:0c:ad:d1:23:12:6c:c7:31:4d:
96:22:c9:15:9b:3e:74:ab:c3:9b:59:39:cd:06:c1:20:32:cd:
7d:f9:10:9d:a3:6d:74:43:86:e0:21:80:a3:ea:88:ce:3d:e4:
8c:fa:8c:53:06:4f:ef:bd:a3:c0:a7:ff:ce:00:04:0b:1f:fa:
0d:3f:f1:82:d2:83:55:d2:66:d9:c9:a0:a3:8d:1a:a7:69:5f:
a2:e1:24:0c:da:be:16:26:3b:d3:3c:62:a0:d0:dd:81:88:70:
3e:4e:58:a1:eb:fd:40:50:84:38:71:96:e6:08:a1:5a:b8:e5:
a5:bb:cb:5d:92:a2:37:a1:7e:5c:a1:d3:b3:46:a2:27:cb:cf:
c8:88:10:fe:5b:96:ab:a7:b1:b7:f0:0c:70:cc:f6:63:89:ce:
10:23:29:74:67:11:d6:71:d4:87:73:49:f2:cd:7a:a0:d9:fe:
f4:7c:7d:d0:b1:d0:7f:7d:81:8c:77:42:fa:c0:64:28:29:b9:
57:a2:a3:9b:ae:ca:02:45:e9:dd:07:11:a7:9e:09:17:e3:20:
63:e3:ce:c2:f3:d5:01:0f:e8:51:d3:9e:7c:6d:f6:e9:b8:7e:
d8:9f:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net