Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/1wp0PYFLfezcndT1-_zzuL3o2jU.roa
File: 1wp0PYFLfezcndT1-_zzuL3o2jU.roa (raw, json)
Hash identifier: vAj8hoCBrSPxv/Ey0oJXqKKiWPPorqpRncbZnU06Llk=
Subject key identifier: D7:0A:74:3D:81:4B:7D:EC:DC:9D:D4:F5:FB:FC:F3:B8:BD:E8:DA:35
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 0190E5C3ACF1402E23A84F8119155D896EB8
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/1wp0PYFLfezcndT1-_zzuL3o2jU.roa
Signing time: Wed 24 Jul 2024 17:22:04 +0000
ROA not before: Wed 24 Jul 2024 17:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
91.84.128.0/17 maxlen: 17
91.85.0.0/17 maxlen: 17
91.85.128.0/19 maxlen: 19
91.85.192.0/18 maxlen: 18
194.46.36.0/24 maxlen: 24
194.46.37.0/24 maxlen: 24
194.46.39.0/24 maxlen: 24
194.46.40.0/24 maxlen: 24
194.46.41.0/24 maxlen: 24
194.46.43.0/24 maxlen: 24
194.46.44.0/24 maxlen: 24
194.46.45.0/24 maxlen: 24
194.46.46.0/24 maxlen: 24
194.46.48.0/21 maxlen: 21
194.46.56.0/24 maxlen: 24
194.46.61.0/24 maxlen: 24
194.46.64.0/22 maxlen: 22
194.46.68.0/23 maxlen: 23
194.46.72.0/22 maxlen: 22
194.46.76.0/23 maxlen: 23
194.46.78.0/24 maxlen: 24
194.46.80.0/23 maxlen: 23
194.46.81.0/24 maxlen: 24
194.46.82.0/24 maxlen: 24
212.104.129.0/24 maxlen: 24
212.104.130.0/24 maxlen: 24
212.104.132.0/24 maxlen: 24
212.104.136.0/24 maxlen: 24
212.104.143.0/24 maxlen: 24
212.104.149.0/24 maxlen: 24
212.104.150.0/24 maxlen: 24
212.104.152.0/24 maxlen: 24
212.104.155.0/24 maxlen: 24
212.104.156.0/24 maxlen: 24
212.104.159.0/24 maxlen: 24
212.108.80.0/23 maxlen: 23
212.108.84.0/24 maxlen: 24
212.108.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e5:c3:ac:f1:40:2e:23:a8:4f:81:19:15:5d:89:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jul 24 17:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70a743d814b7decdc9dd4f5fbfcf3b8bde8da35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:41:12:4c:b0:50:4e:0f:19:55:be:79:1e:
27:1a:d9:72:6b:8c:c3:e3:2c:fc:6f:c3:5c:91:c1:
85:92:a5:7b:31:a5:f0:9f:c8:1c:55:c2:08:40:55:
12:1e:a6:95:9e:00:eb:46:4b:88:3a:1b:3a:34:e7:
82:85:8d:67:88:a9:bb:28:ff:d2:e8:ad:44:c6:b2:
f7:89:fb:b8:aa:ad:8a:6b:79:d3:f0:92:a6:47:55:
f8:31:86:d6:4c:94:e1:df:91:39:2f:8c:ed:da:97:
62:92:ab:8b:d5:0c:29:d5:9f:ff:e7:36:a7:58:d0:
0b:91:96:09:e2:13:28:b6:e3:fd:80:b2:ab:0f:6e:
c9:01:98:e0:45:8a:d3:4f:e7:29:fc:e9:5e:0c:20:
fa:d4:93:b6:f9:b3:79:44:e1:8f:59:b8:51:1b:78:
d2:6f:2b:f8:1a:c1:dc:84:16:2f:f8:c2:8b:ba:af:
c2:af:3e:d6:33:5a:0d:71:ee:65:85:d5:be:5a:5a:
99:40:dc:ce:b2:af:e7:89:de:6f:66:fe:0b:72:b7:
28:b7:df:e5:c8:5c:86:fb:72:5e:3e:69:a9:06:df:
e3:bb:ca:e0:e7:4a:1a:5d:4f:a0:cd:e7:4b:ff:ef:
2c:d4:2d:27:08:29:61:34:08:c3:af:97:4b:a6:13:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:74:3D:81:4B:7D:EC:DC:9D:D4:F5:FB:FC:F3:B8:BD:E8:DA:35
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/1wp0PYFLfezcndT1-_zzuL3o2jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.128.0-91.85.159.255
91.85.192.0/18
194.46.36.0/23
194.46.39.0-194.46.41.255
194.46.43.0-194.46.46.255
194.46.48.0-194.46.56.255
194.46.61.0/24
194.46.64.0-194.46.69.255
194.46.72.0-194.46.78.255
194.46.80.0-194.46.82.255
212.104.129.0-212.104.130.255
212.104.132.0/24
212.104.136.0/24
212.104.143.0/24
212.104.149.0-212.104.150.255
212.104.152.0/24
212.104.155.0-212.104.156.255
212.104.159.0/24
212.108.80.0/23
212.108.84.0/24
212.108.88.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ee:6c:0f:7b:8f:f2:c1:4d:48:ad:86:30:7c:2f:a5:50:f0:
ad:22:6a:a3:da:03:e0:62:a7:05:0a:37:f6:f9:54:6e:c3:1b:
27:07:24:a9:63:57:dd:16:72:7e:c2:21:f2:3f:86:c9:18:dd:
41:16:5a:16:fe:76:78:ae:e8:02:1e:35:0c:d5:e2:cf:2e:78:
79:a4:be:8d:78:43:6c:0f:b5:69:bd:d8:60:64:12:b4:24:61:
ce:8c:5b:22:13:a4:4e:81:9f:b8:66:43:71:53:a8:3b:31:70:
a7:b3:c1:98:85:8f:39:29:1e:21:54:c1:de:c8:bd:8e:a1:f3:
1c:37:db:36:4e:92:76:c7:d4:a0:79:b3:21:b1:d3:21:43:d9:
b2:bb:22:f2:6f:91:e6:1a:cd:15:46:fc:89:01:e2:96:2f:ef:
9e:f2:20:5f:3a:7a:ae:c7:7a:c8:da:39:d4:08:92:17:3b:0b:
e8:08:5f:d9:53:d5:69:a5:96:f2:6c:58:b7:76:a5:f8:68:75:
51:a4:e9:7c:ed:d1:25:b0:6e:33:ed:ff:82:fb:ec:02:15:21:
bf:75:a9:f0:39:cf:b2:57:c9:e0:05:44:f8:e3:34:20:1f:d7:
7e:19:8f:e1:7d:f4:e1:09:bf:02:e3:39:d0:6e:24:78:69:1a:
7f:21:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:32 2024 by rpki-client on console.sobornost.net