Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/an1_zWr-vYQy612X4conhnC9VMI.roa
File: an1_zWr-vYQy612X4conhnC9VMI.roa (raw, json)
Hash identifier: lh9qatHK9dwsDBJ2KEtwNyb0foGAfRlnOVn8SYE6nJU=
Subject key identifier: 6A:7D:7F:CD:6A:FE:BD:84:32:EB:5D:97:E1:CA:27:86:70:BD:54:C2
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 018CC801E7C47C3182899A089520D4B4CCFE
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/an1_zWr-vYQy612X4conhnC9VMI.roa
Signing time: Tue 02 Jan 2024 02:30:17 +0000
ROA not before: Tue 02 Jan 2024 02:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213089
IP address blocks: 193.178.128.0/24 maxlen: 24
193.178.139.0/24 maxlen: 24
193.178.137.0/24 maxlen: 24
185.133.232.0/22 maxlen: 24
193.178.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e7:c4:7c:31:82:89:9a:08:95:20:d4:b4:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jan 2 02:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a7d7fcd6afebd8432eb5d97e1ca278670bd54c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:09:0d:82:a9:21:8a:94:75:ef:c9:c0:ad:
3e:24:49:54:0e:12:9b:89:5f:f3:fc:3c:2d:b9:49:
52:ec:a0:c4:5d:5b:fa:16:be:ab:18:a1:46:19:0b:
27:59:46:9b:0d:65:1c:0c:e9:21:91:be:78:60:24:
93:6f:8e:83:7e:f3:22:17:c8:d0:95:30:02:2a:f0:
bd:d9:0a:da:c3:43:bf:ba:89:de:4a:fc:70:6f:74:
47:e7:72:59:ac:59:b4:53:3c:ce:68:99:56:70:71:
64:f7:58:0b:aa:f2:d9:d5:fd:d5:8a:c7:31:7f:8c:
6c:65:90:b6:e3:42:68:70:00:14:69:5e:d0:6b:a8:
4b:57:c5:7a:9e:f5:1a:47:c5:97:59:52:d5:7a:f1:
15:1b:fe:0f:48:1b:05:4a:a8:58:92:24:bc:73:eb:
83:53:4a:25:d8:bb:68:8a:b1:5f:e8:d4:46:78:2e:
7f:5e:c7:96:e1:c4:2e:30:31:84:79:33:dc:f4:ba:
19:5e:e5:72:22:8d:10:50:b4:7e:48:c8:92:1a:23:
e7:59:c7:4b:a6:d9:07:fc:9b:1d:2b:99:b1:b3:7a:
c3:28:98:67:5f:bb:1e:e2:2f:88:8b:9c:8d:c9:ec:
ec:38:1e:3c:b6:a9:70:99:b3:f7:91:be:ed:b3:1a:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:7F:CD:6A:FE:BD:84:32:EB:5D:97:E1:CA:27:86:70:BD:54:C2
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/an1_zWr-vYQy612X4conhnC9VMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.232.0/22
193.178.128.0/24
193.178.137.0/24
193.178.139.0/24
193.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:80:13:55:4e:5c:0c:89:57:f2:57:78:53:b4:ba:34:0d:7d:
30:f8:c7:a8:77:83:03:90:08:4f:c7:d0:44:d1:2e:eb:29:0b:
ab:a3:79:3a:d3:f1:30:83:3c:28:e0:96:7a:54:3b:a8:52:bf:
5a:80:cd:b0:cc:91:94:70:be:1c:37:e4:ed:b8:9d:f3:10:29:
ed:2d:90:b0:8e:e6:91:dc:78:83:b9:68:15:b3:89:66:5a:e4:
e1:7f:e5:2e:ba:79:a6:4e:35:24:af:cd:bd:06:a5:65:ec:e0:
aa:58:59:ce:dd:47:e9:1e:75:49:21:39:28:11:23:42:6a:ee:
8f:97:68:d8:09:b6:79:6a:1c:1a:8c:32:89:2a:80:c5:f8:45:
6f:99:fd:b6:bd:d8:a1:55:db:14:90:e2:dc:c1:41:a0:47:03:
1a:42:24:c9:1c:55:28:e1:fc:8e:e0:80:87:c9:f8:8f:31:11:
b6:01:f6:d5:02:1d:52:e7:99:15:84:f5:53:ff:f8:31:ff:18:
58:16:cb:59:8f:9f:6b:4a:2b:93:75:2f:e2:5f:4c:24:82:29:
0e:00:52:57:04:a3:b5:29:67:f5:ce:c4:80:47:e0:ea:0a:c6:
e5:42:64:7e:78:06:14:b5:53:cf:ae:d3:5a:ef:ea:e0:56:eb:
43:59:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:14 2024 by rpki-client on console.sobornost.net