Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/t929nTnG6EdJ3j1SyZBTmCWcll4.roa
File: t929nTnG6EdJ3j1SyZBTmCWcll4.roa (raw, json)
Hash identifier: zBAPCtGriSyTaqjBF7sY3leJezwH6YYueaXkJL7WMcM=
Subject key identifier: B7:DD:BD:9D:39:C6:E8:47:49:DE:3D:52:C9:90:53:98:25:9C:96:5E
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019423D7CE50F484CAAB4A9885E4C0296820
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/t929nTnG6EdJ3j1SyZBTmCWcll4.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60530
IP address blocks: 5.152.128.0/22 maxlen: 24
5.152.144.0/22 maxlen: 24
5.152.148.0/23 maxlen: 24
5.152.154.0/23 maxlen: 24
5.152.156.0/22 maxlen: 24
185.30.44.0/22 maxlen: 24
2a00:ab20::/29 maxlen: 32
2a11:cf40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ce:50:f4:84:ca:ab:4a:98:85:e4:c0:29:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7ddbd9d39c6e84749de3d52c9905398259c965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:d0:6b:9d:96:47:c6:5e:09:5b:c4:a5:bb:
de:04:4e:09:1f:b5:6a:f7:8d:ed:26:93:8a:ea:c4:
45:6a:07:91:81:43:e6:a4:15:c1:17:15:74:b1:72:
31:2f:37:c7:be:a1:58:ec:dd:45:20:b0:0d:e6:04:
4a:e7:03:04:51:c1:e0:99:91:cc:2d:48:e4:6e:f5:
06:df:9a:06:d2:72:d4:3e:6c:ff:08:95:2a:a6:7d:
72:4b:4e:da:02:22:5e:9f:49:bf:fc:71:56:ad:6a:
d9:4d:cd:7b:c8:52:74:80:c1:48:27:a1:f2:50:d8:
49:dc:3a:32:ae:8d:cb:42:81:39:4b:6b:9f:57:6a:
94:2e:54:10:78:98:64:35:4f:0e:d5:7e:e3:1d:22:
5f:21:c7:af:81:dd:c5:c7:53:3b:7d:de:6d:96:ad:
ee:77:f4:ff:ba:c0:99:2d:2b:2c:dd:54:bb:d0:fa:
bc:13:f7:13:3b:82:29:02:99:6d:d5:c3:18:46:63:
de:a2:8b:cd:a3:09:b1:04:ac:ea:02:bf:53:5f:3b:
d5:6d:ce:de:dd:69:14:85:fb:8d:24:b7:97:76:1e:
88:37:97:d8:90:48:f6:a8:76:00:00:01:5d:d7:26:
53:5b:11:4f:db:af:cb:03:e3:85:e3:93:dc:ae:a0:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:BD:9D:39:C6:E8:47:49:DE:3D:52:C9:90:53:98:25:9C:96:5E
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/t929nTnG6EdJ3j1SyZBTmCWcll4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.128.0/22
5.152.144.0-5.152.149.255
5.152.154.0-5.152.159.255
185.30.44.0/22
IPv6:
2a00:ab20::/29
2a11:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
26:7a:83:ec:cc:96:6b:07:a8:8f:4f:a6:2f:74:3a:4d:2e:1c:
80:60:4c:2b:2c:39:e5:9e:22:1c:9b:46:72:3b:4d:a2:4e:8a:
91:bc:1e:37:60:89:ca:2c:4f:11:15:45:9d:1c:ba:13:35:1a:
41:15:3d:8e:84:c9:e1:4c:b6:ca:ae:ef:12:46:c2:4b:bc:ab:
40:ad:cd:fc:9c:45:93:4e:d6:e5:cd:2a:fa:53:31:71:5a:9b:
b8:c7:27:9c:eb:83:a4:43:7b:21:d5:b8:f4:60:75:87:3e:b7:
e6:c0:28:a1:18:8a:1e:aa:95:7a:86:4b:99:70:67:cf:f1:fd:
00:13:fb:4a:64:56:49:d6:fa:a3:b9:80:db:c0:2c:b2:0a:66:
e5:93:19:6c:4d:ee:d1:bc:ac:91:3a:b8:69:b2:58:a0:f9:cf:
c3:85:a5:e1:b1:12:38:97:43:ff:55:3f:a2:5c:e8:c3:4c:39:
78:7d:e1:76:70:73:57:39:b1:1d:88:0f:5e:b2:48:77:5d:bc:
83:8b:67:73:9c:87:92:0f:55:b6:92:0b:71:85:9b:8a:7b:a2:
45:38:02:4b:08:64:db:25:39:49:c4:a8:2d:98:f9:6a:b0:19:
48:9d:57:9e:df:85:0b:55:3d:f6:f9:16:62:c7:54:79:0b:b0:
be:36:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:26:24 2025 by rpki-client on console.sobornost.net