Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/Mc_2LCsor_-TWbuKIOc95aPKozA.roa
File: Mc_2LCsor_-TWbuKIOc95aPKozA.roa (raw, json)
Hash identifier: X/m2hulSUwfitrU/Y/HVu2I0MkVxZSeG3vrMtVhXV8Y=
Subject key identifier: 31:CF:F6:2C:2B:28:AF:FF:93:59:BB:8A:20:E7:3D:E5:A3:CA:A3:30
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 018D44F6DDF53845FDDBA78145070EDE04C6
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/Mc_2LCsor_-TWbuKIOc95aPKozA.roa
Signing time: Fri 26 Jan 2024 08:50:45 +0000
ROA not before: Fri 26 Jan 2024 08:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62104
IP address blocks: 185.47.212.0/22 maxlen: 22
185.47.212.0/24 maxlen: 24
185.47.213.0/24 maxlen: 24
185.47.214.0/24 maxlen: 24
185.47.215.0/24 maxlen: 24
185.67.76.0/22 maxlen: 22
185.67.76.0/24 maxlen: 24
185.67.77.0/24 maxlen: 24
185.67.78.0/24 maxlen: 24
185.67.79.0/24 maxlen: 24
2a01:91e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:f6:dd:f5:38:45:fd:db:a7:81:45:07:0e:de:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Jan 26 08:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31cff62c2b28afff9359bb8a20e73de5a3caa330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:44:3e:d8:e6:dc:04:ce:87:70:ec:04:49:
67:ee:2b:d4:54:8e:14:dc:ab:64:35:76:41:f9:41:
e6:08:e5:eb:87:a5:f3:81:06:ba:d9:29:51:83:f1:
b6:79:ff:42:e6:a5:62:36:e7:55:0b:42:3c:ec:39:
76:ac:16:fe:3b:e4:8c:4b:74:97:3e:30:ff:21:d1:
31:ec:9b:b9:8e:d6:ff:41:3d:ae:57:ca:60:0e:e9:
bb:6e:b1:3f:55:6d:60:5c:7f:de:53:0b:2f:12:c0:
38:72:d1:4d:ee:f5:a6:f4:5f:6e:ba:c2:2b:92:32:
77:38:95:6f:1a:92:0f:a9:49:b2:69:61:3c:dd:52:
ba:45:d0:94:e7:f9:2f:d6:14:06:b9:6c:0c:67:54:
99:5d:b7:f6:32:c9:20:45:07:af:f9:da:56:79:8c:
f7:6c:6a:16:6c:3d:f7:13:d3:91:7e:7b:51:96:ee:
88:1f:d3:a0:6e:20:18:95:3f:26:4c:f4:bc:c0:7c:
c8:f3:7d:a8:b9:89:ca:74:96:2b:80:8d:f4:26:6b:
dc:3f:dc:aa:3a:8a:cb:a9:70:53:9b:68:2c:96:c7:
5d:64:83:2e:bd:be:03:c9:40:37:ab:8f:14:8e:b1:
b2:be:63:04:ed:e7:c1:f8:a5:3c:46:c2:41:c6:04:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:F6:2C:2B:28:AF:FF:93:59:BB:8A:20:E7:3D:E5:A3:CA:A3:30
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/Mc_2LCsor_-TWbuKIOc95aPKozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.212.0/22
185.67.76.0/22
IPv6:
2a01:91e0::/32
Signature Algorithm: sha256WithRSAEncryption
56:47:76:ab:79:c2:f1:88:ef:d3:b3:16:e9:ee:a4:c4:9b:8b:
a9:0b:1a:4d:e0:d2:ea:7a:b8:6e:f0:cf:3e:63:8c:36:1f:69:
05:f4:12:cf:71:fa:61:1d:be:c5:c7:19:bd:63:1e:67:bc:fd:
a5:5b:25:71:63:8a:f9:12:4d:28:f6:93:89:a5:85:cd:46:56:
43:b0:af:29:89:64:3d:1f:72:ad:d8:79:30:31:ff:c9:ff:b5:
f0:f6:35:36:46:22:a7:64:0b:26:bb:0a:ca:98:54:2d:cf:2b:
58:9a:87:10:71:1e:03:e2:4e:9d:37:cb:97:d0:32:8d:a4:2b:
75:7c:a2:51:ef:93:93:60:ee:20:5b:50:06:20:58:c1:20:06:
ff:1b:d6:19:92:c8:1c:50:ab:aa:5f:21:ea:9e:ca:68:57:36:
1f:36:37:df:6d:cd:9e:b2:b4:6c:28:f2:44:ca:21:22:88:ea:
8c:d5:60:9f:b9:78:17:3a:6c:e4:e0:e2:e0:1e:3b:ff:1c:5b:
ec:c1:40:02:0c:7b:a8:6f:d3:95:f8:1a:48:12:4c:70:1d:97:
2d:cd:53:4e:5b:f7:99:07:a3:3a:a1:d1:bd:94:bb:7a:4c:0b:
4c:ff:64:43:78:ea:29:ec:62:00:58:91:80:cb:d6:0b:14:b7:
70:e5:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net