Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/x3vE8UuIlQHXCW_naHf3bQ-Qjpw.roa
File: x3vE8UuIlQHXCW_naHf3bQ-Qjpw.roa (raw, json)
Hash identifier: GxDoYGWWzZ9ryyDHh+t8Ojc50yncSYM+AGt9g6N9KbQ=
Subject key identifier: C7:7B:C4:F1:4B:88:95:01:D7:09:6F:E7:68:77:F7:6D:0F:90:8E:9C
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01914B2B60EAEAC47FDFE84C74DE8ABE36CE
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/x3vE8UuIlQHXCW_naHf3bQ-Qjpw.roa
Signing time: Tue 13 Aug 2024 09:56:59 +0000
ROA not before: Tue 13 Aug 2024 09:56:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25160
IP address blocks: 5.10.144.0/20 maxlen: 24
82.163.192.0/19 maxlen: 24
91.238.221.0/24 maxlen: 24
144.98.0.0/16 maxlen: 24
158.41.64.0/18 maxlen: 24
165.65.0.0/16 maxlen: 24
185.28.240.0/22 maxlen: 24
185.120.204.0/22 maxlen: 24
185.237.48.0/22 maxlen: 24
193.0.176.0/23 maxlen: 24
193.221.128.0/19 maxlen: 24
194.8.254.0/23 maxlen: 24
206.245.208.0/20 maxlen: 24
206.245.224.0/21 maxlen: 24
206.245.232.0/22 maxlen: 24
206.245.236.0/23 maxlen: 24
206.245.240.0/20 maxlen: 24
2a00:e340::/29 maxlen: 48
2a00:e340::/32 maxlen: 48
2a00:e340:3::/48 maxlen: 48
2a00:e341::/32 maxlen: 48
2a00:e342::/32 maxlen: 48
2a00:e343::/32 maxlen: 48
2a00:e344::/32 maxlen: 48
2a00:e344:3f00::/48 maxlen: 48
2a00:e345::/32 maxlen: 48
2a00:e346::/32 maxlen: 48
2a00:e347::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:2b:60:ea:ea:c4:7f:df:e8:4c:74:de:8a:be:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Aug 13 09:56:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77bc4f14b889501d7096fe76877f76d0f908e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:8a:ef:67:3b:7f:6e:60:da:98:6e:9c:a6:
13:09:6a:97:6e:f7:c1:ff:b1:52:32:3e:7d:77:bc:
30:ab:09:01:da:42:45:96:32:9b:ed:87:01:a7:4d:
21:3e:06:05:f2:d7:3d:00:f2:5f:6f:ba:d8:be:36:
23:cb:62:ad:31:ed:69:fb:d0:2d:c1:1d:f9:25:7c:
d9:18:8e:58:b3:fd:57:f1:61:91:36:a0:a4:6a:dd:
9a:51:cb:49:02:d3:13:d4:a0:28:25:38:f8:59:34:
8d:16:74:d7:64:3d:2b:a4:bf:3b:38:36:df:12:7a:
50:d6:c3:dd:9c:17:05:1b:8a:7a:60:29:ea:d1:ce:
75:38:23:eb:c2:32:dc:77:2c:6e:39:fe:df:e7:4c:
28:98:59:35:93:52:55:c7:b7:d5:39:e2:a3:74:89:
f0:88:0c:1f:d7:38:68:d4:65:0c:58:1f:ac:06:f2:
27:e4:48:19:84:3a:13:0d:a0:a8:14:5d:30:df:3a:
a1:18:60:81:8f:cd:01:24:fb:13:0c:b7:a7:a7:a9:
5e:5b:8c:e2:52:b8:02:e2:c9:8d:e5:ca:f3:4a:72:
1c:ef:50:8c:0a:5b:09:2c:e5:bd:12:91:a6:5b:0d:
8d:e0:b4:59:44:96:08:1f:71:8b:ef:ce:9d:cb:7c:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:C4:F1:4B:88:95:01:D7:09:6F:E7:68:77:F7:6D:0F:90:8E:9C
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/x3vE8UuIlQHXCW_naHf3bQ-Qjpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
82.163.192.0/19
91.238.221.0/24
144.98.0.0/16
158.41.64.0/18
165.65.0.0/16
185.28.240.0/22
185.120.204.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
206.245.208.0-206.245.237.255
206.245.240.0/20
IPv6:
2a00:e340::/29
Signature Algorithm: sha256WithRSAEncryption
b7:1c:91:22:14:6d:a5:06:41:ae:ad:7e:fa:02:14:28:25:14:
6a:ce:f4:e2:00:7f:54:a7:ba:71:76:f4:b3:b9:14:89:d5:29:
22:e3:db:4e:b7:f0:08:c4:f8:f8:9d:0b:24:cf:4b:6f:cc:ca:
ef:fb:e6:e5:6e:0d:26:0f:31:2f:4d:a3:a1:07:5a:e8:35:57:
28:26:8f:d9:2f:cd:0d:e3:c5:5c:e2:df:e0:27:91:f6:c9:5d:
5b:5f:b3:ef:6d:c3:97:c3:93:50:69:eb:50:eb:d7:c7:46:02:
a5:5a:a7:eb:e8:39:2d:4f:6e:94:32:33:63:c0:29:a7:71:b1:
7c:2f:35:01:32:23:0f:2e:be:4a:79:0f:19:bd:a3:70:d8:67:
a6:d7:fc:83:18:1f:50:18:ea:bf:f1:f4:79:07:87:ac:f0:73:
bf:f4:dd:4a:77:84:50:63:5e:99:45:d6:cd:45:b8:f1:5c:eb:
1b:2a:44:bc:95:4d:48:0d:fd:84:d9:d5:d8:76:f9:ad:08:0f:
02:61:72:22:6a:a1:e1:03:68:47:78:c8:a4:3a:b3:31:8e:c4:
aa:8f:0c:fb:ec:34:3c:84:f0:b0:48:af:af:68:a4:68:54:eb:
1c:f7:b2:d7:f3:2c:a8:37:0b:1c:2f:0a:65:82:2d:5c:df:0e:
7a:50:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 00:19:52 2024 by rpki-client on console.sobornost.net