Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/RtfYsFCm93gdAGkRMwc7TkxaJwk.roa
File: RtfYsFCm93gdAGkRMwc7TkxaJwk.roa (raw, json)
Hash identifier: e/xbVoH9KGmLOzyVzOtZxWSLNAbCbWTFkATMS51Kn6E=
Subject key identifier: 46:D7:D8:B0:50:A6:F7:78:1D:00:69:11:33:07:3B:4E:4C:5A:27:09
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 019379968D51BC42B6D7987437D6434A5A91
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/RtfYsFCm93gdAGkRMwc7TkxaJwk.roa
Signing time: Fri 29 Nov 2024 20:22:09 +0000
ROA not before: Fri 29 Nov 2024 20:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206854
IP address blocks: 185.172.212.0/22 maxlen: 22
185.172.212.0/24 maxlen: 24
185.172.213.0/24 maxlen: 24
185.172.214.0/24 maxlen: 24
185.172.215.0/24 maxlen: 24
2a0f:c7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:96:8d:51:bc:42:b6:d7:98:74:37:d6:43:4a:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Nov 29 20:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d7d8b050a6f7781d00691133073b4e4c5a2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:56:c9:9c:b9:12:c0:50:35:67:73:de:d8:
03:54:d2:7f:f8:2a:96:81:d0:30:54:e8:5a:86:44:
98:e2:fd:89:37:e5:14:bf:27:6c:f1:3a:e2:22:9d:
83:78:5e:f3:4f:ba:24:6a:07:ad:5e:4d:57:f9:c0:
f5:38:7b:26:35:25:de:ca:e2:4e:ad:92:77:f5:13:
7c:e9:95:b6:ca:08:f5:7c:3b:c6:a8:0e:c0:1e:ee:
1a:b8:a6:db:16:e1:fa:e4:f7:95:09:aa:ea:c7:6d:
93:d5:5f:1f:0c:1a:f5:64:fd:4f:dd:98:1b:7a:ca:
51:30:3e:85:0b:ef:7f:54:e2:71:fd:ed:17:eb:20:
0f:b1:dc:3a:b2:d4:1c:50:af:10:39:be:5a:0d:1c:
47:af:90:fd:f0:db:ed:81:0e:53:ba:12:be:11:c6:
05:7a:46:31:1d:e7:94:9b:ec:c8:44:e2:45:14:86:
f9:9c:ad:6d:bb:00:19:48:51:d4:6c:2d:c1:bf:09:
62:ae:45:8f:a9:32:d5:79:d6:b5:6d:3d:e7:e8:d2:
a9:d3:b3:f7:86:4f:a6:fc:66:bc:ea:b6:57:7e:b0:
78:64:94:6d:3c:93:02:b4:e7:c0:95:2c:5f:aa:57:
10:47:d2:1c:1f:a2:dd:90:a5:47:fb:62:81:49:ea:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:D8:B0:50:A6:F7:78:1D:00:69:11:33:07:3B:4E:4C:5A:27:09
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/RtfYsFCm93gdAGkRMwc7TkxaJwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.212.0/22
IPv6:
2a0f:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:0b:a1:39:7e:5f:1c:5d:b9:75:3c:5c:09:3b:f9:67:56:ab:
08:a2:ec:44:51:ac:af:4c:d8:9b:28:6a:14:37:ed:3a:d4:4e:
df:4c:1c:79:83:d5:45:88:e8:19:c3:32:7e:11:78:7c:cf:c8:
66:b4:f8:74:c2:47:a6:91:2b:1a:21:c1:7f:86:04:0b:66:a0:
6b:a0:42:55:a4:26:6e:34:45:0b:ee:ab:17:75:cd:da:f9:32:
e2:4a:6c:14:37:32:91:aa:df:b6:a6:92:22:c5:f9:d2:b5:4f:
39:c9:35:0f:81:77:9c:f6:0b:54:46:2d:78:ac:2b:1b:3f:7b:
ac:cd:6f:7e:ce:76:fc:cd:68:c4:e9:48:2f:c8:c9:c5:1d:f5:
0a:d1:c0:3b:c9:a9:77:e5:ce:32:9f:3b:8e:96:10:ab:49:37:
4c:d7:fc:af:86:ec:fc:75:4d:8e:b9:f4:b2:10:c7:7a:3d:be:
e8:64:01:6d:44:4b:6d:6f:e3:fd:04:14:07:e6:02:41:00:0b:
e7:05:5a:96:a0:77:89:62:b1:13:ba:a0:ea:b3:2e:19:40:1e:
43:ea:ec:1b:e8:14:c6:68:0c:82:fc:a9:ea:d3:1d:06:68:71:
37:37:11:47:ba:e0:a1:bb:3b:d2:6e:86:91:bd:52:3b:4d:c6:
bf:27:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:41 2024 by rpki-client on console.sobornost.net