Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ufAMyoDlYKmewxPd5fo-mqGum1s.roa
File: ufAMyoDlYKmewxPd5fo-mqGum1s.roa (raw, json)
Hash identifier: iEK2YI5yUy+etfApC15GpIkyY2EUlEkdSY7Zp03RCBc=
Subject key identifier: B9:F0:0C:CA:80:E5:60:A9:9E:C3:13:DD:E5:FA:3E:9A:A1:AE:9B:5B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01926B78CD5A728746DD9E655D7FA42D8D89
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ufAMyoDlYKmewxPd5fo-mqGum1s.roa
Signing time: Tue 08 Oct 2024 09:32:11 +0000
ROA not before: Tue 08 Oct 2024 09:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209910
IP address blocks: 5.252.92.0/24 maxlen: 24
5.252.93.0/24 maxlen: 24
5.252.94.0/23 maxlen: 23
45.65.64.0/22 maxlen: 22
185.200.76.0/22 maxlen: 22
185.200.76.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.79.0/24 maxlen: 24
185.236.248.0/22 maxlen: 22
185.236.248.0/24 maxlen: 24
185.236.249.0/24 maxlen: 24
185.236.250.0/24 maxlen: 24
185.236.251.0/24 maxlen: 24
193.84.48.0/23 maxlen: 23
193.84.48.0/24 maxlen: 24
193.84.49.0/24 maxlen: 24
193.84.92.0/24 maxlen: 24
193.84.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:78:cd:5a:72:87:46:dd:9e:65:5d:7f:a4:2d:8d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Oct 8 09:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9f00cca80e560a99ec313dde5fa3e9aa1ae9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:f7:5b:fe:ad:46:bb:01:e2:8b:7c:74:23:
6f:b6:a1:2d:eb:ad:be:a9:d8:8c:5c:6d:58:20:fc:
07:10:57:ed:70:5d:97:49:5a:08:84:c3:71:0a:0e:
65:78:b7:2f:e2:27:e0:96:b1:9e:d2:7b:fd:ce:6e:
1d:1c:d2:14:89:8e:01:af:53:58:cd:56:14:02:cc:
21:ec:76:d8:a6:80:28:e4:b0:92:aa:bd:24:88:87:
81:d0:bd:70:8b:45:56:ee:01:ef:ba:e6:88:89:30:
05:b3:07:6a:54:38:98:14:1e:70:0d:f2:0c:35:f6:
99:f4:e3:74:cc:35:57:64:c2:cc:28:1c:8f:d7:23:
c1:f1:78:3d:92:29:1e:3b:2d:97:46:3a:a7:25:26:
89:34:86:91:be:da:ac:9e:60:a8:1d:92:b6:7f:79:
14:2c:96:ab:7a:5b:e7:77:82:5b:5f:8f:03:20:47:
21:46:93:27:61:ea:6a:96:bf:40:26:f8:99:c6:16:
98:51:35:96:b2:12:58:77:4e:69:51:02:d9:55:7b:
e0:5b:9f:fd:b1:63:56:64:e3:55:aa:fd:f2:c4:b6:
b1:c9:63:78:71:ed:28:8f:e2:d1:8f:f4:90:25:2e:
af:ef:ac:16:20:dd:cd:cf:80:d2:80:21:73:23:ef:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:0C:CA:80:E5:60:A9:9E:C3:13:DD:E5:FA:3E:9A:A1:AE:9B:5B
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ufAMyoDlYKmewxPd5fo-mqGum1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/22
45.65.64.0/22
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:63:f5:4a:d0:0b:62:85:79:5c:69:e4:8f:57:e6:bb:59:f3:
58:92:f2:3f:4f:60:33:c4:6f:31:de:47:25:57:fc:cf:ab:17:
d4:ba:86:4a:43:f5:bb:ca:91:bf:65:96:3a:b0:08:ca:c5:02:
53:09:96:f4:e6:a1:e7:4f:a5:c5:a0:88:a4:44:70:60:f8:1a:
bf:52:91:b3:7f:03:b7:ac:65:d6:ba:0c:e7:47:a8:ec:2b:d6:
ad:51:e1:78:97:4c:29:ce:47:55:fa:e5:e1:b3:a2:fd:6e:71:
90:2a:f3:32:9c:ea:87:f9:71:0e:46:54:2d:cf:11:9b:f8:d2:
ab:54:59:0b:a9:e9:c3:60:61:31:01:6c:34:c1:70:e0:ef:73:
0f:bd:54:05:74:f2:8b:58:54:95:d4:17:e5:c9:d1:a9:4e:55:
9e:ae:df:16:95:77:4b:a8:da:f0:7e:6c:d5:22:58:b9:96:22:
58:59:73:8f:c3:bd:fc:33:92:92:7f:1a:34:db:16:6b:4a:64:
0e:54:4b:1a:ba:c3:95:59:0b:39:50:10:6b:17:4d:77:85:90:
62:1b:b3:a4:58:4b:89:8b:97:cc:80:31:33:bf:d0:39:4c:5a:
ed:49:4c:8b:f9:b2:79:a7:f6:5a:eb:f8:f0:84:11:36:f7:5f:
5f:74:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:42 2024 by rpki-client on console.sobornost.net