Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/td4IBStmmo_F7UdcR5pgSPooPNU.roa
File: td4IBStmmo_F7UdcR5pgSPooPNU.roa (raw, json)
Hash identifier: BQNm4gbk6XpTkmnYs3/E2r7fN5nK/Bbd4QBYirBiNfM=
Subject key identifier: B5:DE:08:05:2B:66:9A:8F:C5:ED:47:5C:47:9A:60:48:FA:28:3C:D5
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01931A67AA296F0322DD4586F667AADFB361
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/td4IBStmmo_F7UdcR5pgSPooPNU.roa
Signing time: Mon 11 Nov 2024 08:47:01 +0000
ROA not before: Mon 11 Nov 2024 08:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 34
2a0e:3307::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:67:aa:29:6f:03:22:dd:45:86:f6:67:aa:df:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Nov 11 08:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5de08052b669a8fc5ed475c479a6048fa283cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:d0:ae:a1:f5:5c:d9:4a:a7:33:8f:a6:a2:
10:2e:0b:ff:ee:37:1f:d8:9b:a5:be:2b:46:6c:25:
ce:08:19:a7:3c:a5:7d:d4:d6:ed:75:c4:18:74:1a:
d9:a2:93:fb:31:5f:c2:21:d7:b3:cb:07:5b:89:14:
73:b4:af:40:b5:d7:43:bd:66:ff:cb:8e:c2:19:9b:
39:d0:0d:ed:28:56:0d:0e:c8:1e:7a:c3:b5:f9:79:
b5:db:c3:54:16:03:7c:ce:28:e3:1e:8f:95:94:44:
49:d0:93:d0:f8:b8:de:d0:d9:96:c4:6a:e7:d0:9b:
f0:7c:99:ec:55:4e:3c:08:69:d7:b6:04:74:fa:78:
73:13:50:e9:ba:1b:3b:f1:08:ab:bc:4f:2a:e4:cf:
8a:a3:64:78:23:54:72:02:64:48:06:f0:4c:b6:03:
e4:44:af:e2:72:ba:2d:d1:c8:a9:20:1c:e1:8b:13:
72:0e:9f:2a:37:4a:8a:92:3d:98:6f:31:29:87:64:
0a:a7:d0:53:90:71:53:9a:da:ac:6a:65:99:5c:bc:
59:7c:cd:ac:47:d5:86:d6:8f:4f:5e:e6:5d:05:a1:
b2:53:b4:8c:e6:54:53:21:73:4c:75:b0:c4:2d:ec:
43:29:51:e5:75:da:da:0f:bb:76:bd:66:6d:f9:36:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:08:05:2B:66:9A:8F:C5:ED:47:5C:47:9A:60:48:FA:28:3C:D5
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/td4IBStmmo_F7UdcR5pgSPooPNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
32:d8:7d:2c:83:b1:83:3a:4e:66:c7:5d:77:d4:4b:5f:de:b6:
3b:d5:56:8d:07:b6:ab:22:ea:eb:3f:58:f6:ec:a4:05:d9:19:
4f:6b:75:15:c5:f4:e8:67:e1:d9:44:a1:dc:1b:36:90:ca:0d:
27:04:27:09:87:71:ab:2d:61:3d:6b:21:cb:56:e4:b3:c3:a6:
2a:a9:c5:00:fa:19:bc:91:d1:e1:a3:b8:de:1a:29:e5:a1:12:
3c:f8:2b:9c:7d:d5:04:13:b5:19:c4:9e:91:36:b8:09:c6:4c:
86:0d:14:d9:6b:2e:ec:19:2f:54:fd:2f:9f:85:be:a2:6a:cc:
4c:d1:5e:1e:31:d0:75:17:3a:7f:3e:bf:eb:f6:84:ba:41:dd:
a9:07:b4:61:71:82:c0:b4:cd:0d:b3:fb:fe:7b:a2:aa:4f:d1:
c8:14:82:fc:fe:6a:25:e8:9e:e5:db:35:33:a2:d9:39:c0:1a:
3b:db:4f:1b:0e:c0:05:ce:d5:6b:83:b9:fb:a7:85:67:c1:ad:
ed:3b:47:e5:43:eb:df:f2:a9:dc:3b:3c:90:6b:56:d2:e4:d8:
72:ea:19:c0:bd:fe:08:b2:c5:5c:1b:91:e9:af:60:9f:e1:67:
14:ed:65:c3:b1:7f:2c:ea:98:f3:ee:af:9f:cc:1d:b0:ec:33:
44:57:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:15 2024 by rpki-client on console.sobornost.net