Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/T827TIWT6YjV8Q9gJ_fatkajcsc.roa
File: T827TIWT6YjV8Q9gJ_fatkajcsc.roa (raw, json)
Hash identifier: MvjAqW+cUoPWF2vr5esPHI43oRY66E4L86a0UOUprAU=
Subject key identifier: 4F:CD:BB:4C:85:93:E9:88:D5:F1:0F:60:27:F7:DA:B6:46:A3:72:C7
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 01929C303284CAB58DF791B9502F34D9248C
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/T827TIWT6YjV8Q9gJ_fatkajcsc.roa
Signing time: Thu 17 Oct 2024 20:34:17 +0000
ROA not before: Thu 17 Oct 2024 20:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198735
IP address blocks: 5.1.104.0/21 maxlen: 21
5.1.104.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
212.15.80.0/21 maxlen: 21
212.15.80.0/24 maxlen: 24
212.15.81.0/24 maxlen: 24
212.15.82.0/24 maxlen: 24
212.15.83.0/24 maxlen: 24
212.15.84.0/24 maxlen: 24
212.15.85.0/24 maxlen: 24
212.15.86.0/24 maxlen: 24
212.15.87.0/24 maxlen: 24
217.145.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:30:32:84:ca:b5:8d:f7:91:b9:50:2f:34:d9:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 17 20:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fcdbb4c8593e988d5f10f6027f7dab646a372c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8c:af:b0:c0:5f:eb:d1:92:96:d1:6d:0e:de:
c9:8a:b1:a5:49:d6:41:44:a1:25:d1:fe:3b:31:4c:
31:38:75:1c:a3:4f:4c:17:59:fc:53:a6:37:7a:b4:
a4:55:0f:0f:d0:20:46:a3:87:b6:55:bc:50:e9:b6:
91:b9:e0:f6:28:57:89:80:90:19:71:df:25:b2:34:
0a:a3:47:bf:9b:cd:c1:b5:c5:fc:ce:c5:a0:6b:03:
63:7f:25:6d:af:e5:99:ac:9c:a0:10:26:d4:18:c1:
3c:07:d1:72:9c:34:94:ca:95:db:35:28:b2:a0:e1:
2c:5a:50:d4:52:22:c4:c8:1f:73:07:09:5b:c0:05:
7d:a3:eb:2a:a0:05:79:1b:86:05:8e:49:0d:05:9a:
9b:ad:bb:58:66:f9:aa:5d:bf:20:a3:67:03:00:a1:
49:c3:cb:c4:e8:ae:8b:fc:16:16:bf:5b:6d:ff:79:
4d:6a:0d:c8:28:bf:62:c6:06:16:12:a9:2b:18:58:
0a:db:81:36:e2:0f:48:e5:4f:b9:d4:cf:0a:4e:a4:
5c:fc:62:df:95:b8:85:9c:1a:5e:bd:8e:0a:35:ef:
0a:af:6b:a6:93:2c:b2:b7:4a:e3:10:6d:65:9b:b7:
3b:ef:f0:50:ce:56:b0:90:41:b6:7f:f0:e3:1b:5b:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:BB:4C:85:93:E9:88:D5:F1:0F:60:27:F7:DA:B6:46:A3:72:C7
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/T827TIWT6YjV8Q9gJ_fatkajcsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
212.15.80.0/21
217.145.231.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b3:7f:e6:3f:69:81:e9:9c:e0:3c:bc:a7:2a:45:c5:65:12:
ce:80:de:6c:f9:6e:92:c6:34:bd:23:67:c4:20:61:40:d8:06:
30:35:6e:aa:a3:f0:37:cc:e8:48:c5:47:44:e9:b6:1c:b3:29:
23:2e:e8:e1:9b:13:09:7d:23:ad:89:80:a5:3b:18:13:8b:2c:
5a:0e:40:51:c2:2c:8a:bc:78:ee:26:f6:ed:09:6e:13:0d:d7:
82:7d:85:4b:2f:39:44:5c:ea:e9:0a:fc:48:61:fa:12:3b:ae:
94:80:d9:29:c2:5c:bd:8f:94:98:11:2d:c7:26:2f:b4:ee:46:
42:ed:93:2e:88:01:4a:bf:4a:ed:00:68:53:22:cb:b8:b8:b4:
17:5c:3b:35:f8:ce:74:50:76:b7:b9:38:d5:fb:d9:32:c9:73:
63:34:80:30:b4:fa:10:39:e5:7d:5f:66:b3:a4:cc:5b:a6:09:
31:73:e0:af:ff:64:0d:a1:be:56:67:e0:19:18:9a:e7:8b:1f:
ce:e7:b6:9a:2b:d2:8e:72:be:2a:7c:3b:ca:2d:f7:94:d6:fb:
a1:a0:6b:09:5a:91:d8:a4:06:4c:81:3d:85:eb:b6:55:2e:17:
c1:42:d9:a0:b4:d6:e7:15:11:e6:10:92:0a:71:e4:37:cd:3c:
5d:15:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:19 2024 by rpki-client on console.sobornost.net