Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/OUoBWLhXtPVQIuro5V9jh0sy3XM.roa
File: OUoBWLhXtPVQIuro5V9jh0sy3XM.roa (raw, json)
Hash identifier: Hw/9HGmyT4A+4Vx9NyAYqy3huBYKGufTQRsvVGO/ZVw=
Subject key identifier: 39:4A:01:58:B8:57:B4:F5:50:22:EA:E8:E5:5F:63:87:4B:32:DD:73
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0192E49F0C44D77C9C1FE92B5B7FBBA02E22
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/OUoBWLhXtPVQIuro5V9jh0sy3XM.roa
Signing time: Thu 31 Oct 2024 22:08:01 +0000
ROA not before: Thu 31 Oct 2024 22:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198735
IP address blocks: 5.1.104.0/21 maxlen: 21
5.1.104.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
217.145.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e4:9f:0c:44:d7:7c:9c:1f:e9:2b:5b:7f:bb:a0:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 31 22:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=394a0158b857b4f55022eae8e55f63874b32dd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:3b:b5:5f:c0:18:c5:b9:6a:6b:11:4f:15:
ea:6f:e3:0a:ec:e0:d2:e3:1a:04:ac:54:dd:95:24:
b9:0f:e2:e7:b0:7a:84:30:8b:e1:7b:da:7f:72:99:
38:5e:a6:24:1a:8e:00:c5:7a:28:32:2d:4b:bf:97:
10:f0:ed:ef:c5:d1:3b:77:1a:53:f0:40:69:ae:34:
bc:b8:97:11:e9:5a:eb:98:c3:ab:eb:2b:2f:f2:4e:
eb:66:7f:92:e0:a2:82:4d:18:6e:02:7e:68:42:56:
b5:24:94:47:e7:0d:3c:83:49:8d:0b:18:9a:4d:c3:
3e:45:34:d1:71:34:6e:62:48:d7:c2:cc:e0:66:d3:
93:4c:a6:21:5b:2c:34:09:7d:8f:6b:7f:1d:97:bd:
c0:d6:b8:92:45:5b:d9:20:0b:f2:26:3b:3b:ee:b2:
73:d6:41:7f:af:41:d3:02:ee:db:3a:46:24:be:f0:
a3:80:76:7b:b5:18:74:82:d0:eb:f1:c1:12:cd:f9:
71:22:d1:c1:2d:36:83:2b:66:43:b1:e6:ef:b8:34:
48:6a:75:77:c3:8e:9e:20:da:3a:39:93:c5:88:0a:
b2:c9:0d:5d:86:e7:bd:c9:32:19:52:5e:0e:32:7a:
c7:8c:c3:da:f0:db:28:a4:6b:98:fe:9b:6c:bd:e5:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:01:58:B8:57:B4:F5:50:22:EA:E8:E5:5F:63:87:4B:32:DD:73
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/OUoBWLhXtPVQIuro5V9jh0sy3XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
217.145.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9e:68:1c:00:26:e7:0a:da:3b:5e:0e:9a:53:f3:2f:24:8e:
0d:77:dc:6d:65:aa:7e:81:3d:69:71:7a:60:b6:1f:23:11:c4:
48:4b:16:d0:f7:65:89:8e:25:d8:5c:6a:e7:8e:97:0f:9b:4d:
79:69:22:c2:c7:dd:77:2f:ca:4e:65:73:10:27:6d:05:04:32:
dc:1b:21:a1:51:09:6b:24:71:ff:0a:92:b6:a6:84:d2:80:10:
c5:bb:39:a7:83:5a:31:52:84:1b:49:5e:55:45:63:f9:5d:21:
4d:53:73:06:44:ce:41:2c:39:df:3c:2e:6e:59:38:13:ed:e4:
ba:a7:1b:50:78:ff:eb:d6:09:7c:bc:e3:f5:e6:6c:b0:9e:39:
6e:d8:1c:59:8b:6a:fd:bc:7a:b6:5f:d2:4d:03:71:b8:d9:8f:
ad:de:6b:00:8e:e0:2f:d4:db:65:76:d1:dc:c5:91:41:71:e8:
c4:5d:49:19:2d:b1:77:87:75:04:84:be:20:df:7f:60:a9:77:
95:33:34:42:9c:89:0e:b5:66:cc:82:7c:a7:c3:c4:59:30:18:
8b:5c:65:70:77:ca:33:7f:51:66:ac:7e:fc:5b:e0:30:b4:40:
5a:98:c7:64:42:a4:b7:0a:d0:3e:dc:f6:95:49:07:f1:78:3e:
30:73:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:14 2024 by rpki-client on console.sobornost.net