Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/4KjTOORwO5BsCqTKx6_KSJxNjRQ.roa
File: 4KjTOORwO5BsCqTKx6_KSJxNjRQ.roa (raw, json)
Hash identifier: Oal/BNSeDbbhTTJ4b9sSCGpu3v9xA0MNNHbdkD3d9is=
Subject key identifier: E0:A8:D3:38:E4:70:3B:90:6C:0A:A4:CA:C7:AF:CA:48:9C:4D:8D:14
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 01938CC0DCB78B738F507104B9A4F67359D2
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/4KjTOORwO5BsCqTKx6_KSJxNjRQ.roa
Signing time: Tue 03 Dec 2024 13:41:09 +0000
ROA not before: Tue 03 Dec 2024 13:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 46.235.88.0/21 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
146.19.71.0/24 maxlen: 24
176.98.32.0/22 maxlen: 24
176.241.184.0/21 maxlen: 24
178.20.144.0/21 maxlen: 24
185.10.112.0/22 maxlen: 24
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/24 maxlen: 24
212.12.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:c0:dc:b7:8b:73:8f:50:71:04:b9:a4:f6:73:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Dec 3 13:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0a8d338e4703b906c0aa4cac7afca489c4d8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:ee:34:3d:41:1f:5c:da:ee:37:09:5b:c0:
4b:f1:53:a8:8b:b2:0d:eb:7e:a4:44:1f:56:82:d9:
25:11:54:36:1f:79:db:ed:45:3b:6e:d6:8f:4a:97:
0c:43:6e:6a:36:bb:8c:e3:a9:12:c2:17:a0:f3:76:
b8:64:7e:83:a0:e3:c5:16:39:79:af:55:d7:4a:cd:
55:d9:03:0c:0c:ca:a3:84:c0:4c:3f:44:17:b0:55:
f0:38:ff:11:ae:c5:c9:94:fa:99:4f:51:8a:a8:d4:
39:ed:35:b0:35:82:ec:09:0e:63:18:2e:f8:03:b1:
6c:ab:26:39:1d:ad:d0:4e:a4:23:18:0f:6e:b5:86:
d2:16:ff:96:12:4b:a4:dc:56:9a:4c:20:cb:52:ae:
39:e7:c1:12:ba:b9:90:49:a8:29:cf:4e:c0:8b:16:
7f:98:63:bd:80:fb:ba:cd:da:a8:1f:25:ef:14:02:
ca:e9:32:83:56:20:e2:fa:b5:55:77:53:ff:11:12:
17:15:4f:70:5a:ad:f1:ae:ab:aa:24:9f:fb:a5:3a:
85:5b:db:97:41:22:6e:cd:e3:c5:3f:1b:7a:a5:5d:
10:e7:b8:74:dd:73:3c:56:f5:50:1f:99:90:9f:c8:
35:97:ac:b2:9f:8f:d4:4b:79:be:8d:15:aa:b2:fe:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:D3:38:E4:70:3B:90:6C:0A:A4:CA:C7:AF:CA:48:9C:4D:8D:14
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/4KjTOORwO5BsCqTKx6_KSJxNjRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:95:22:7e:ae:53:e4:ab:b7:cd:80:08:e8:47:b8:4d:63:90:
54:c6:4f:15:c6:f5:0d:a6:a4:b7:4a:e9:0b:ab:c8:13:06:e4:
39:98:db:97:88:f9:27:88:9c:d5:11:87:28:1e:db:71:2d:6a:
87:db:7c:d9:3d:97:5f:bd:90:ec:33:7a:94:f3:6b:c6:c0:c3:
c8:15:3d:46:13:20:56:28:9a:2c:cd:ac:5e:5b:8f:29:94:2e:
d8:dc:39:2a:43:ca:cd:dc:4a:60:8c:93:f3:37:d3:ee:21:25:
4c:20:ae:13:73:c6:e7:52:7f:b9:d4:8e:00:e9:3d:84:31:f7:
61:67:cd:94:f7:e1:83:28:83:74:37:34:c8:d5:80:49:b3:b0:
32:76:18:74:23:21:06:af:98:89:04:76:03:85:69:57:b3:aa:
8d:fc:67:d0:c5:65:f4:b0:14:1f:cb:60:eb:99:42:8c:84:7c:
29:9a:6a:bf:b9:d1:6e:0f:1d:1a:60:47:74:b1:da:bf:58:25:
30:d4:17:be:4e:f9:32:00:ee:6c:46:d2:54:a1:79:53:a1:45:
97:c6:c3:0e:0a:4d:78:a3:5e:54:58:21:5b:23:40:c8:0f:63:
cd:36:38:f3:69:73:f2:f5:34:3f:e9:cb:c2:95:fc:e7:49:75:
a8:7f:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:13 2024 by rpki-client on console.sobornost.net