Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/RnrJ6yNXk6VlkFRiOOMncnpj7iM.roa
File: RnrJ6yNXk6VlkFRiOOMncnpj7iM.roa (raw, json)
Hash identifier: IGwH6E2b7vzih8J5lQVcWM4cdIBmkZt4kydlNaCeVTo=
Subject key identifier: 46:7A:C9:EB:23:57:93:A5:65:90:54:62:38:E3:27:72:7A:63:EE:23
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 019232C5AE16DCA39D3BC5DD922E728DE161
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/RnrJ6yNXk6VlkFRiOOMncnpj7iM.roa
Signing time: Fri 27 Sep 2024 09:17:48 +0000
ROA not before: Fri 27 Sep 2024 09:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
91.84.128.0/17 maxlen: 17
91.85.32.0/19 maxlen: 19
91.85.64.0/18 maxlen: 18
91.85.128.0/19 maxlen: 19
91.85.192.0/18 maxlen: 18
194.46.36.0/24 maxlen: 24
194.46.37.0/24 maxlen: 24
194.46.39.0/24 maxlen: 24
194.46.40.0/24 maxlen: 24
194.46.41.0/24 maxlen: 24
194.46.43.0/24 maxlen: 24
194.46.44.0/24 maxlen: 24
194.46.45.0/24 maxlen: 24
194.46.46.0/24 maxlen: 24
194.46.48.0/21 maxlen: 21
194.46.56.0/24 maxlen: 24
194.46.61.0/24 maxlen: 24
194.46.64.0/22 maxlen: 22
194.46.68.0/23 maxlen: 23
194.46.72.0/22 maxlen: 22
194.46.76.0/23 maxlen: 23
194.46.78.0/24 maxlen: 24
194.46.80.0/23 maxlen: 23
194.46.81.0/24 maxlen: 24
194.46.82.0/24 maxlen: 24
212.104.129.0/24 maxlen: 24
212.104.130.0/24 maxlen: 24
212.104.132.0/24 maxlen: 24
212.104.136.0/24 maxlen: 24
212.104.143.0/24 maxlen: 24
212.104.149.0/24 maxlen: 24
212.104.150.0/24 maxlen: 24
212.104.152.0/24 maxlen: 24
212.104.155.0/24 maxlen: 24
212.104.156.0/24 maxlen: 24
212.104.159.0/24 maxlen: 24
212.108.80.0/23 maxlen: 23
212.108.84.0/24 maxlen: 24
212.108.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:c5:ae:16:dc:a3:9d:3b:c5:dd:92:2e:72:8d:e1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Sep 27 09:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467ac9eb235793a56590546238e327727a63ee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:f8:7f:35:52:52:57:f3:76:b0:4b:bf:18:
e8:d6:1a:92:91:a7:0f:23:eb:b8:d0:a0:8c:de:91:
8b:e5:5a:7d:b1:f9:6a:c0:ea:7f:7a:46:10:67:90:
41:25:b0:2e:0b:03:44:2a:78:98:c6:ef:2c:7c:60:
dd:2d:b6:76:a7:34:4a:a8:86:99:04:45:00:2d:63:
65:a3:b9:ce:30:af:b3:26:61:ba:66:6f:9a:74:ed:
65:74:f2:d8:13:58:85:54:a3:9c:2e:88:24:7a:ca:
1a:db:33:7b:66:4d:eb:24:97:1a:65:d8:8d:bd:04:
aa:cc:a1:d7:80:90:18:25:2b:cc:c3:ad:36:dc:60:
b7:3e:3e:b5:86:4b:86:7f:ca:d2:9e:75:83:7e:7c:
75:60:43:73:83:e5:bb:7e:66:e2:9b:01:43:f4:b7:
58:fb:ac:fc:67:67:8f:b1:ce:ba:fc:a2:9c:48:13:
c3:86:bc:3b:83:e7:02:24:3a:b4:1d:a1:be:b4:6f:
cd:e0:20:57:0a:7e:23:81:f9:41:0b:11:7e:b0:11:
67:c9:38:b3:97:22:bd:66:d2:5d:15:a5:01:45:d0:
ac:f9:d4:56:0b:34:7e:05:76:94:ed:f4:ce:cf:d7:
15:7c:18:6f:5d:2e:1a:81:4d:54:97:a5:b8:6e:9a:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:C9:EB:23:57:93:A5:65:90:54:62:38:E3:27:72:7A:63:EE:23
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/RnrJ6yNXk6VlkFRiOOMncnpj7iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.128.0/17
91.85.32.0-91.85.159.255
91.85.192.0/18
194.46.36.0/23
194.46.39.0-194.46.41.255
194.46.43.0-194.46.46.255
194.46.48.0-194.46.56.255
194.46.61.0/24
194.46.64.0-194.46.69.255
194.46.72.0-194.46.78.255
194.46.80.0-194.46.82.255
212.104.129.0-212.104.130.255
212.104.132.0/24
212.104.136.0/24
212.104.143.0/24
212.104.149.0-212.104.150.255
212.104.152.0/24
212.104.155.0-212.104.156.255
212.104.159.0/24
212.108.80.0/23
212.108.84.0/24
212.108.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:6f:29:4d:34:5d:9c:41:dd:85:94:4e:ff:55:da:d2:a7:d3:
4f:a4:fc:4d:a4:8f:90:fb:6c:fa:82:2b:61:65:1e:58:5e:ff:
a9:87:ff:66:95:1f:cd:71:df:4a:06:21:bd:fe:51:74:46:b0:
6a:44:81:ea:1e:f0:b4:88:32:2c:c8:fd:ee:0b:e2:cc:f2:c4:
c8:c1:aa:6f:6a:46:9c:5f:ab:a8:de:40:64:f8:ea:9b:d4:87:
09:f9:8d:fc:aa:b9:d8:fd:5e:fe:3f:54:f4:12:a3:a4:1d:33:
9f:d9:1f:06:7e:e8:03:59:f9:9a:15:c0:e9:8c:9e:f2:3c:e6:
6e:22:3b:ef:15:f4:2a:5e:c8:76:9e:f2:c3:c1:a1:85:dc:96:
7d:51:e7:0a:2f:e6:1c:61:72:f0:0d:24:5e:66:37:4a:27:21:
93:4c:94:79:a2:9a:d1:b5:95:bd:e1:8b:53:7f:26:c7:b3:62:
36:1b:d9:c9:38:5c:4b:68:cf:8a:5e:c7:9a:92:57:d0:0d:9e:
ac:3a:d6:76:ec:6a:8b:f9:35:d8:17:4c:6a:e3:ae:79:f4:dd:
22:a6:2c:7c:16:89:e7:82:89:a2:ea:9b:76:e4:3f:08:4f:b9:
3d:f0:de:25:a0:7c:45:19:88:fe:95:d2:54:d8:b6:e4:a3:cd:
85:a5:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net