Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/IEMiVSJQ1rosBnbZAYm3yU-z4Zk.roa
File: IEMiVSJQ1rosBnbZAYm3yU-z4Zk.roa (raw, json)
Hash identifier: fV3HLE0/jD3p1F6TFirYTN/RvrrTL4HxAp2FydTdtmE=
Subject key identifier: 20:43:22:55:22:50:D6:BA:2C:06:76:D9:01:89:B7:C9:4F:B3:E1:99
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01933E90B0FB73E82D42874706C1197B5B98
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/IEMiVSJQ1rosBnbZAYm3yU-z4Zk.roa
Signing time: Mon 18 Nov 2024 09:18:10 +0000
ROA not before: Mon 18 Nov 2024 09:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 5.80.0.0/15 maxlen: 15
5.81.0.0/16 maxlen: 16
31.48.0.0/13 maxlen: 13
86.128.0.0/10 maxlen: 10
86.128.0.0/11 maxlen: 11
86.128.0.0/12 maxlen: 12
109.144.0.0/12 maxlen: 12
194.79.48.0/22 maxlen: 22
195.171.0.0/16 maxlen: 16
213.120.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:90:b0:fb:73:e8:2d:42:87:47:06:c1:19:7b:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Nov 18 09:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=204322552250d6ba2c0676d90189b7c94fb3e199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:ff:50:35:26:37:c7:0f:f8:f2:f6:17:c8:
fa:3c:48:d5:47:01:a2:1c:c5:c7:1d:71:84:35:95:
5a:a6:d4:63:50:cb:ee:5f:6a:69:1d:50:6b:ef:9a:
ea:dc:ea:0d:e7:ae:48:e2:d8:46:a8:bd:78:bd:99:
dd:e2:9d:9f:ef:99:9b:d7:4e:23:0b:db:62:4f:31:
88:98:88:ab:79:4f:6c:a9:92:b8:9c:b3:f6:14:a5:
2e:bb:0e:95:f1:3f:09:b2:01:27:de:51:de:0f:73:
94:51:03:6c:40:9f:e2:01:ad:f6:ce:e8:98:d9:92:
b7:d6:87:31:28:7a:24:a3:db:75:2e:6b:da:3a:8d:
43:53:28:c4:39:4a:08:81:5f:70:63:03:64:be:1c:
86:ee:1a:40:f7:b7:4b:cc:07:d4:58:e5:27:6b:05:
9f:89:c9:74:6e:2b:0f:d2:b5:c4:47:ac:ef:94:b4:
76:52:5c:a5:4a:26:ff:2d:e0:d1:94:7e:85:5a:fd:
55:1e:c4:20:13:ff:82:ec:25:47:38:76:13:bb:32:
1c:e6:ac:da:4c:5a:41:6b:d1:90:4e:d0:87:e6:6b:
02:2d:46:9b:22:70:37:8e:11:a1:43:b8:ba:f5:9b:
9e:92:e8:7f:52:f6:d5:7b:90:51:07:a6:18:39:83:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:22:55:22:50:D6:BA:2C:06:76:D9:01:89:B7:C9:4F:B3:E1:99
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/IEMiVSJQ1rosBnbZAYm3yU-z4Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.80.0.0/15
31.48.0.0/13
86.128.0.0/10
109.144.0.0/12
194.79.48.0/22
195.171.0.0/16
213.120.0.0/14
Signature Algorithm: sha256WithRSAEncryption
44:be:cf:22:81:59:28:20:cd:53:47:c3:9f:d7:9a:3a:21:68:
bc:8f:10:26:d9:bf:2c:f9:88:92:06:ec:cd:50:4b:9f:23:f9:
3c:a4:f8:24:eb:9d:15:6f:ad:20:d3:58:79:44:e1:1c:a6:ad:
ad:eb:bf:23:43:6e:2e:57:b2:38:d0:e5:9a:48:f0:85:8f:23:
92:98:ea:4c:7e:b8:c3:72:8f:ed:15:0b:f9:91:20:05:85:fd:
af:fc:50:01:55:59:30:3f:f9:35:e5:85:2c:f6:1a:1e:fb:3d:
68:95:4f:63:f2:7d:81:d5:df:06:5d:60:34:fd:43:a0:9c:93:
5d:88:8b:63:b8:ca:a6:93:6c:76:f3:9b:33:d0:af:a1:79:2d:
34:ce:83:5c:1b:4b:9d:38:d7:70:ca:75:98:de:8e:31:f0:10:
c2:8d:f8:35:25:bd:9a:36:48:40:fa:7f:f2:38:a6:ea:c3:c3:
71:2d:b7:8d:c7:bf:e1:e2:98:1f:ce:84:ce:f6:fa:6a:ec:f7:
4a:dc:9d:69:29:91:ef:dd:2d:c9:a2:47:34:ad:a3:42:6a:91:
0d:94:21:21:56:40:4e:59:dc:10:58:0b:b8:e2:d7:0a:91:68:
1c:48:d3:27:07:4d:9b:8f:2a:85:6b:1b:fd:e1:db:7d:eb:fb:
db:dc:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net