Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/X3OvhkEGbNv38q2BJ9eu1bwNawg.roa
File: X3OvhkEGbNv38q2BJ9eu1bwNawg.roa (raw, json)
Hash identifier: 7rTMyBP95LX2W/1Fcqq+46UJpYzqOff+pBroNwa6tls=
Subject key identifier: 5F:73:AF:86:41:06:6C:DB:F7:F2:AD:81:27:D7:AE:D5:BC:0D:6B:08
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 01910413AF609205A76F7B5C75E2C4551B2D
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/X3OvhkEGbNv38q2BJ9eu1bwNawg.roa
Signing time: Tue 30 Jul 2024 14:38:04 +0000
ROA not before: Tue 30 Jul 2024 14:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:13:af:60:92:05:a7:6f:7b:5c:75:e2:c4:55:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jul 30 14:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f73af8641066cdbf7f2ad8127d7aed5bc0d6b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:2d:94:12:58:e4:2c:02:2a:99:bc:fb:a3:
97:50:c0:48:dc:51:b9:6e:21:06:98:84:e0:b6:3f:
6c:58:02:da:27:2b:db:d5:f7:22:4c:f6:d5:1f:71:
d4:66:d9:f7:f1:74:29:5c:36:3c:6a:96:82:60:4c:
fd:ab:e8:3d:63:13:5f:11:1a:f2:ee:e1:96:81:1c:
42:88:ae:ba:19:bd:49:10:94:c2:3e:80:67:86:5b:
de:da:cc:a5:2e:ba:57:0c:df:6b:f4:09:a1:40:cf:
69:33:63:e9:2f:52:59:fe:33:02:98:ce:66:08:75:
ff:15:c3:94:80:14:a3:a5:f5:d9:13:37:9b:8c:da:
1a:bb:48:15:2c:1a:50:6d:6c:d3:22:d7:b1:43:d0:
87:11:9b:88:8f:43:a9:1b:41:db:3b:32:2e:65:ec:
b1:43:48:6f:81:1a:9f:5e:be:f7:be:b2:ff:45:ca:
81:f4:d8:90:4c:20:4f:c8:ae:24:61:80:cc:86:2a:
b3:ce:26:e2:cc:ca:24:b5:ef:4a:54:78:11:0c:5c:
0f:dc:44:46:8a:f5:aa:ec:f2:6a:22:f2:22:3c:a6:
c1:89:6c:fe:12:27:a7:81:6b:1b:71:75:fa:19:51:
f6:76:0a:38:60:35:59:8b:74:15:d0:be:c2:58:4a:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:AF:86:41:06:6C:DB:F7:F2:AD:81:27:D7:AE:D5:BC:0D:6B:08
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/X3OvhkEGbNv38q2BJ9eu1bwNawg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.221.0/24
45.139.223.0/24
45.145.21.0/24
45.145.23.0/24
91.194.52.0/24
91.194.54.0/24
185.82.220.0/22
185.201.212.0/22
IPv6:
2a0a:c4c0::/47
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
80:04:4f:47:b1:6e:5f:89:1d:35:a1:c4:6c:61:4f:60:00:e3:
4d:9b:47:57:2d:5d:eb:b1:d8:d3:34:e0:64:93:dd:8e:c7:a2:
f8:ec:ac:d4:54:c0:95:9e:55:f1:8c:27:87:04:89:50:2a:2c:
72:13:c2:2e:1a:9c:88:0f:8c:44:71:55:5e:78:c7:77:07:48:
85:fe:5f:91:a7:7e:a7:08:aa:f3:e8:0e:e1:f6:63:33:65:34:
3b:cc:01:8c:eb:7f:11:62:a6:c8:33:e0:92:7b:85:b4:f8:70:
84:a2:9c:8a:bc:37:2a:f9:ff:35:41:6e:c0:c9:73:14:76:95:
6e:1c:ea:14:f0:f4:12:21:b9:b4:da:5a:b7:84:c1:09:6c:69:
af:d0:cf:03:11:d1:32:05:5a:76:ba:f8:88:cb:02:ed:e8:84:
19:f5:33:43:fc:83:33:ba:3e:fe:88:0d:8b:48:f3:9e:2f:20:
c4:9c:b7:ed:1f:ba:5f:d7:2d:8c:20:35:07:ee:e8:b1:1a:e7:
6c:39:ad:2e:c0:a2:a8:d4:e7:77:61:1a:b5:fc:fe:13:30:3f:
f4:2e:2b:cf:4a:10:bd:04:16:23:0f:d4:92:3b:95:a9:22:4b:
71:5e:75:4c:29:dc:87:f7:5b:be:13:76:ab:21:fa:a6:39:b8:
fd:46:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:16 2024 by rpki-client on console.sobornost.net