Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/15XzDchv48oFyblxbyKw50ZLfjE.roa
File: 15XzDchv48oFyblxbyKw50ZLfjE.roa (raw, json)
Hash identifier: hB41HlSsxnKY+NqLvhNXaAkM5EmRMAssVAjQmJlCFnw=
Subject key identifier: D7:95:F3:0D:C8:6F:E3:CA:05:C9:B9:71:6F:22:B0:E7:46:4B:7E:31
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 0191234FE73370BB51AB3A800CD0F7F6DD1D
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/15XzDchv48oFyblxbyKw50ZLfjE.roa
Signing time: Mon 05 Aug 2024 16:12:04 +0000
ROA not before: Mon 05 Aug 2024 16:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49549
IP address blocks: 146.19.128.0/24 maxlen: 24
178.250.187.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
193.0.227.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
193.0.239.0/24 maxlen: 24
217.119.129.0/24 maxlen: 24
2a0f:cdc2::/32 maxlen: 32
2a0f:cdc4::/32 maxlen: 32
2a0f:cdc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:4f:e7:33:70:bb:51:ab:3a:80:0c:d0:f7:f6:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Aug 5 16:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d795f30dc86fe3ca05c9b9716f22b0e7464b7e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:5f:38:0a:fa:c5:b1:64:52:57:c0:8a:ea:
ea:0b:26:18:eb:0e:68:8d:ee:a3:30:a2:07:02:5e:
93:f9:d9:32:c2:5e:eb:92:34:ae:80:be:8c:54:e3:
37:f8:ff:0f:68:09:e6:9d:fc:b5:55:e7:57:44:bd:
f1:3c:ab:bf:51:97:0c:0c:94:2f:c9:6a:ce:e1:8e:
e6:a1:1d:aa:e2:b6:f8:21:ed:1a:9e:3d:00:3a:3d:
3c:43:e6:ed:99:40:79:7d:99:0c:67:8f:69:c4:78:
39:b4:a9:da:af:c7:c6:33:3f:da:2a:35:ab:84:bf:
76:49:37:33:b4:89:d7:32:4a:bf:cb:7b:b6:db:07:
78:68:20:16:30:01:4b:01:19:bc:63:d5:bf:64:e4:
03:b7:17:92:1a:9a:12:78:14:77:fc:74:35:8b:f5:
26:88:0e:99:5e:9c:c6:1a:7e:51:a3:fd:df:8a:66:
a5:5b:87:f5:96:dc:c0:64:e7:4c:85:38:53:fa:f4:
ea:bc:62:b7:c3:ec:63:9a:23:44:9e:b1:7a:25:55:
4d:32:e2:61:f2:93:46:61:53:59:bb:23:57:d8:e3:
86:9c:7b:1d:c4:20:c6:4b:16:89:0b:fc:4a:aa:fa:
6d:1a:14:24:30:63:02:77:2a:f7:d7:a2:85:a0:72:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:F3:0D:C8:6F:E3:CA:05:C9:B9:71:6F:22:B0:E7:46:4B:7E:31
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/15XzDchv48oFyblxbyKw50ZLfjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
178.250.187.0/24
178.250.191.0/24
193.0.227.0/24
193.0.230.0/24
193.0.239.0/24
217.119.129.0/24
IPv6:
2a0f:cdc2::/32
2a0f:cdc4::/31
Signature Algorithm: sha256WithRSAEncryption
ae:e6:bc:3b:2d:f4:42:b4:61:eb:6e:c0:1d:f9:e0:7c:66:91:
4b:6a:68:4b:38:b8:0c:a2:d8:a4:60:67:83:c6:8b:ac:ae:5d:
ed:12:2c:2e:d2:9f:fc:5b:e3:c7:93:46:e0:bd:77:11:e8:ea:
d1:cf:8a:8b:84:37:05:3f:7e:b1:b4:e1:88:70:12:74:a9:e1:
c9:b8:65:4c:21:ca:7e:4c:86:aa:b6:1d:f6:5d:80:f5:1b:96:
47:2e:65:2d:6b:9e:c0:44:71:a3:15:a2:5b:d6:6b:4f:10:0a:
94:11:c5:59:ff:8e:23:e6:66:aa:81:06:59:d7:82:dd:65:99:
c0:88:98:6c:7b:14:c8:06:46:56:c1:da:3e:f7:41:8c:4a:29:
29:31:67:6d:88:06:63:ee:3f:45:50:bb:5f:7c:fb:16:25:cc:
34:b4:00:d3:1b:78:ff:79:df:28:a4:50:86:05:cb:91:d7:48:
30:df:67:c7:e3:27:ff:98:bb:0d:9d:96:0c:7b:d9:79:ae:65:
b4:fa:74:f8:d6:af:56:88:6d:99:87:70:34:c4:fa:91:43:97:
39:04:9a:c6:dc:4d:6c:7c:93:ce:dc:99:bf:bd:90:df:fb:0a:
39:af:b1:69:5d:ca:55:85:d3:8f:13:57:52:aa:14:f3:e8:44:
c8:10:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:42 2024 by rpki-client on console.sobornost.net