Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/P5b7WIOS_U23GVLxRawtEDBQuyM.roa
File: P5b7WIOS_U23GVLxRawtEDBQuyM.roa (raw, json)
Hash identifier: cieE28Mq8K8v3rkk2S3thQDhtbCKezWlDR2LtQ0hgSI=
Subject key identifier: 3F:96:FB:58:83:92:FD:4D:B7:19:52:F1:45:AC:2D:10:30:50:BB:23
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 018CC3B6A9906B25B95A8F6C6B03BF398D0F
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/P5b7WIOS_U23GVLxRawtEDBQuyM.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198735
IP address blocks: 217.145.231.0/24 maxlen: 24
212.15.85.0/24 maxlen: 24
212.15.84.0/24 maxlen: 24
212.15.83.0/24 maxlen: 24
212.15.82.0/24 maxlen: 24
212.15.81.0/24 maxlen: 24
212.15.80.0/24 maxlen: 24
212.15.80.0/21 maxlen: 21
212.15.87.0/24 maxlen: 24
212.15.86.0/24 maxlen: 24
185.51.223.0/24 maxlen: 24
185.51.222.0/24 maxlen: 24
185.51.221.0/24 maxlen: 24
185.51.220.0/22 maxlen: 22
185.51.220.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.104.0/24 maxlen: 24
5.1.104.0/21 maxlen: 21
5.1.111.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a9:90:6b:25:b9:5a:8f:6c:6b:03:bf:39:8d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f96fb588392fd4db71952f145ac2d103050bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:f2:6a:9e:67:3e:dd:70:54:7e:2a:ce:5d:
ab:64:8d:bf:6f:36:87:55:64:15:85:f5:ab:56:d9:
cc:f4:3e:77:d6:b2:d3:7e:a2:bb:e5:d3:ef:f0:b0:
5d:df:c3:50:0a:07:01:bc:14:75:6a:f2:4b:37:85:
92:ac:7d:a2:fa:33:fb:69:81:a2:61:ff:db:d8:2e:
58:d3:32:7b:c6:6c:90:9a:e6:d7:78:5b:e5:8b:20:
4e:11:e6:80:fd:d2:9d:9d:21:5e:2b:cf:17:44:63:
f9:c9:f5:25:af:4b:b5:8c:1d:95:8d:94:7d:d7:82:
b6:7e:6e:9b:2d:00:5b:fe:ac:2b:36:ed:ee:f5:b6:
28:3e:d8:a0:2f:22:20:39:fe:b7:38:a8:c8:1e:be:
08:47:ba:ff:a2:a5:30:8f:44:96:09:27:2c:71:86:
d8:69:14:44:43:16:d6:2c:16:f8:2e:0e:16:22:2b:
97:10:43:d5:0b:5f:1a:03:d3:9c:c0:c7:3b:f8:51:
11:18:b6:c2:23:57:8b:af:56:47:2d:65:34:c6:69:
21:cc:f4:02:f2:2f:ae:6d:4b:01:14:be:55:6a:d0:
f5:32:19:ba:77:77:7d:dc:b9:9b:56:a2:c2:1d:c4:
8a:cd:46:d1:66:7d:45:d1:a1:b2:1f:1b:27:84:53:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:FB:58:83:92:FD:4D:B7:19:52:F1:45:AC:2D:10:30:50:BB:23
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/P5b7WIOS_U23GVLxRawtEDBQuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
185.51.220.0/22
212.15.80.0/21
217.145.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0c:60:a6:63:60:f9:67:d1:8e:a9:8b:ba:13:c8:cd:84:8f:
7e:1a:96:d5:8e:35:49:6b:5e:6b:e8:6a:e3:ed:fe:a1:5f:6b:
ef:85:85:6c:bc:e9:c5:8f:d1:4d:5c:53:b3:ad:50:0b:66:82:
08:dc:d7:ca:41:a4:ac:b9:7c:a6:82:5a:6c:82:e9:19:9b:03:
00:11:f8:90:d1:29:0f:af:c9:fd:c9:40:b2:16:7d:e6:da:dc:
6b:1e:6b:2e:80:bf:76:33:fe:7c:94:a6:5e:fb:00:51:c5:be:
2b:76:8f:37:ce:fb:bd:8a:f2:96:dd:f9:6e:a4:6c:48:e7:88:
4b:81:db:ed:1b:f3:58:5f:db:77:72:cc:cb:2d:7e:07:7c:1c:
69:80:9b:c0:bc:98:68:38:9e:ac:be:0d:bd:a4:96:5f:f0:35:
5c:87:e5:fb:11:8a:fd:84:61:ae:50:fa:ad:a0:f0:b7:a8:99:
0d:80:64:23:57:37:cf:dc:d9:84:cc:6f:31:5b:4a:39:80:a1:
1f:8a:9c:0a:dc:d3:56:30:12:ba:f7:90:65:89:d2:7b:0f:c9:
81:43:0a:c8:0d:4b:e2:04:66:e7:2f:f8:12:c4:c3:a0:dd:71:
08:5a:1c:a6:08:31:32:74:09:81:94:4f:73:16:d6:78:f9:03:
23:d0:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:38 2024 by rpki-client on console.sobornost.net