Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/hYMyuxtAG8a6kBx0m52WyKvfynk.roa
File: hYMyuxtAG8a6kBx0m52WyKvfynk.roa (raw, json)
Hash identifier: w//PJLBbg9qkZ6EhF3BRtvmSrRZRMnrRFcasO4277SE=
Subject key identifier: 85:83:32:BB:1B:40:1B:C6:BA:90:1C:74:9B:9D:96:C8:AB:DF:CA:79
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01907E46CCCB93D7437CE93061106086623E
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/hYMyuxtAG8a6kBx0m52WyKvfynk.roa
Signing time: Thu 04 Jul 2024 15:04:47 +0000
ROA not before: Thu 04 Jul 2024 15:04:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43212
IP address blocks: 94.182.14.0/24 maxlen: 24
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.188.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.192.0/24 maxlen: 24
151.247.193.0/24 maxlen: 24
151.247.194.0/24 maxlen: 24
151.247.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:46:cc:cb:93:d7:43:7c:e9:30:61:10:60:86:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 4 15:04:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=858332bb1b401bc6ba901c749b9d96c8abdfca79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:8c:8e:52:a6:ee:10:10:be:ef:6c:eb:59:
04:fd:29:fc:31:98:f2:09:e0:0c:21:f0:66:68:e0:
9d:2b:1f:d9:7d:e1:14:e3:80:bd:23:cd:88:75:b5:
bb:49:be:36:42:a6:5d:cb:3d:6a:24:7c:94:e3:7a:
e1:23:e5:10:c0:4c:62:07:80:3e:36:f2:12:37:63:
ff:91:e1:90:8d:68:3e:30:f0:6d:32:e3:ca:8e:d3:
dd:80:11:9f:2f:7d:6f:ab:5b:57:54:bd:a8:bf:21:
2e:78:71:ac:ac:0e:2c:3d:83:41:37:9c:1f:71:e5:
1e:59:9a:42:64:89:d2:1e:68:28:52:be:b9:18:a9:
0f:c9:f9:08:70:73:9e:fc:b4:dd:aa:0f:d4:ad:44:
8f:07:cd:f2:9a:68:eb:5c:60:a7:61:d3:a7:23:e4:
0b:71:9a:7f:42:61:13:ca:bc:7a:65:91:3d:a4:26:
46:fd:1f:a0:59:75:9a:8b:bb:01:d7:e7:55:b5:e3:
7b:5c:28:83:74:67:90:c1:c3:c8:6d:ab:02:55:bd:
78:5d:c0:de:f2:62:75:5c:76:a4:7d:a1:f7:bb:b2:
cc:25:4a:bd:c5:4c:86:35:1d:c3:27:d7:a8:16:32:
fd:97:7b:ec:7b:f1:f5:6a:bc:ed:aa:9f:22:39:18:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:32:BB:1B:40:1B:C6:BA:90:1C:74:9B:9D:96:C8:AB:DF:CA:79
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/hYMyuxtAG8a6kBx0m52WyKvfynk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.14.0/24
151.247.180.0-151.247.195.255
Signature Algorithm: sha256WithRSAEncryption
aa:9d:41:74:14:33:7d:74:8f:31:d3:51:86:a8:1a:cc:7e:0d:
da:d3:86:cf:ae:4e:da:71:87:3a:de:6e:31:38:32:f4:ee:cf:
9b:8d:d9:f8:10:79:10:83:87:46:41:c2:00:84:d7:d7:8f:59:
2d:1f:07:3b:61:fe:e8:e7:82:ce:94:d4:3c:24:04:ca:8c:5c:
4b:dc:9d:6a:86:49:ad:bf:bd:b7:c3:42:22:a6:a9:10:ed:35:
f0:f0:ef:0c:2c:86:85:90:54:ba:ef:f3:f0:a6:6f:01:2f:3d:
30:bc:97:7c:fc:17:58:1c:5e:b5:80:ec:e4:69:9a:ca:3c:f8:
c3:f5:38:1c:28:a4:6d:11:76:70:75:74:27:de:7b:d5:23:01:
6c:51:9a:2d:a5:fb:2c:9e:0a:21:34:ea:f8:d5:d4:75:3b:4c:
67:42:66:ad:b7:99:20:43:71:80:9d:09:7d:8c:ac:93:02:86:
d5:18:f3:81:e3:25:d9:57:88:62:93:95:23:71:c5:85:37:26:
0c:52:18:16:1d:aa:1c:0a:ad:bb:4f:87:d1:9b:09:5c:f9:fd:
f7:49:74:75:1d:f5:5e:58:58:88:99:4a:e2:4c:72:27:06:b7:
18:26:5e:1d:5c:a8:cc:a2:d3:b7:a9:bf:d0:cc:8f:2d:10:8a:
bf:07:ea:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 27 04:12:04 2024 by rpki-client on console.sobornost.net