Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/S_LlkhoqwanX534H4gOTm6M-xW0.roa
File: S_LlkhoqwanX534H4gOTm6M-xW0.roa (raw, json)
Hash identifier: KAac1eEZ6w4D/IN6bTEirlQ1Eqz95UVBzSEmLqgab28=
Subject key identifier: 4B:F2:E5:92:1A:2A:C1:A9:D7:E7:7E:07:E2:03:93:9B:A3:3E:C5:6D
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 018CC5000B41ECA8CE6694C9DAA17138BBCC
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/S_LlkhoqwanX534H4gOTm6M-xW0.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48469
IP address blocks: 185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
94.127.56.0/22 maxlen: 22
2a02:2188:1000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
2a02:2188::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0b:41:ec:a8:ce:66:94:c9:da:a1:71:38:bb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bf2e5921a2ac1a9d7e77e07e203939ba33ec56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:ce:91:a8:52:53:e9:0f:68:02:59:76:4b:
3a:22:e9:02:00:aa:1f:ea:e4:63:a4:06:25:19:4d:
79:02:50:57:f4:3e:ce:53:1e:74:fd:06:fa:8c:bc:
5d:0a:84:56:fa:57:1c:66:47:a7:40:6e:6d:b3:fd:
94:2f:b5:48:24:11:21:50:81:5f:90:d2:31:c6:50:
bf:47:48:30:1e:23:be:50:94:19:04:e9:95:7d:83:
c1:84:db:de:6a:fb:d8:fe:69:2b:34:40:16:0e:1b:
71:5f:c7:e2:a5:88:71:72:ef:7a:1c:82:3d:a5:85:
41:ae:ba:0b:26:5d:0b:5e:fa:7d:d7:0e:c2:38:93:
de:ee:0c:60:0a:35:13:dd:83:cf:f2:18:b8:25:f3:
c8:6f:d8:ec:20:0e:ee:87:b2:f3:c6:e3:39:b3:ed:
de:f6:43:da:a9:6f:79:c5:a5:14:bc:88:79:d1:c7:
87:ae:b6:a0:59:70:62:27:b5:5b:e9:89:27:e2:37:
a4:1a:39:e9:e0:bf:ac:89:02:c6:0f:b3:e2:bf:93:
eb:08:9d:5c:36:1b:24:68:f2:90:31:56:ef:15:c1:
de:5c:c2:f5:12:37:e8:4d:80:b1:e0:54:42:c5:1c:
f1:1b:0e:44:2c:62:24:a5:b8:fb:73:da:89:21:52:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:E5:92:1A:2A:C1:A9:D7:E7:7E:07:E2:03:93:9B:A3:3E:C5:6D
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/S_LlkhoqwanX534H4gOTm6M-xW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.56.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:1000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:ce:ac:ff:d7:e9:78:26:90:84:6b:66:bb:48:73:e7:46:3a:
8f:dc:95:59:ce:a6:c5:38:68:64:c0:63:8d:fc:a6:9a:3e:df:
72:14:33:2a:49:ba:f2:c9:af:3b:42:6f:44:d9:77:9d:3e:f4:
e6:c0:bf:55:c3:98:7f:11:12:b5:53:96:db:31:72:6f:af:3d:
20:e6:ea:8e:24:7c:08:94:c5:32:2c:26:fa:fd:40:11:90:c3:
b6:3d:4b:e8:1c:82:f8:39:96:fd:d5:a9:af:2d:40:91:25:04:
b1:93:29:80:f7:af:f0:d8:4b:de:a2:2c:b4:27:8a:0a:35:4b:
39:94:1d:ab:6b:40:fa:d5:ad:1a:51:5e:47:87:d0:db:0d:c7:
74:52:7c:0a:b8:f7:8b:77:78:eb:44:06:83:8e:c3:b7:c6:12:
01:8c:80:7e:f4:7e:37:3b:00:e5:ec:4d:9f:81:4e:3d:8b:e6:
82:bd:6f:db:40:c9:6a:ce:7a:41:d3:de:6b:12:b0:0a:5c:b5:
89:ae:8d:2f:9f:80:ad:86:f9:5e:6b:cf:fb:74:11:aa:9a:64:
e1:c5:5e:d2:a7:bd:f4:c0:62:8f:99:ef:1d:38:b3:ff:78:7f:
0c:a3:b5:28:15:f6:b5:1f:56:14:5c:4a:b9:4d:d9:7b:c1:2b:
9e:ad:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net