Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/5sBouQSja2y7-pMbujnubQmnEic.roa
File: 5sBouQSja2y7-pMbujnubQmnEic.roa (raw, json)
Hash identifier: gk8k+2gVCSvbnnPHtLgbKmYXaF2AoVEjv9L4HLfAv8E=
Subject key identifier: E6:C0:68:B9:04:A3:6B:6C:BB:FA:93:1B:BA:39:EE:6D:09:A7:12:27
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 0193DD4E1C7AA62F52800CBA35C4E3FF35B9
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/5sBouQSja2y7-pMbujnubQmnEic.roa
Signing time: Thu 19 Dec 2024 05:05:03 +0000
ROA not before: Thu 19 Dec 2024 05:05:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50782
IP address blocks: 2.57.48.0/22 maxlen: 22
91.215.240.0/22 maxlen: 22
185.159.200.0/22 maxlen: 22
185.246.20.0/22 maxlen: 22
194.127.196.0/24 maxlen: 24
194.127.202.0/24 maxlen: 24
194.127.206.0/24 maxlen: 24
194.127.214.0/24 maxlen: 24
2a07:b6c0::/29 maxlen: 29
2a09:c940::/29 maxlen: 29
2a0d:6680::/29 maxlen: 29
2a0f:afc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:4e:1c:7a:a6:2f:52:80:0c:ba:35:c4:e3:ff:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Dec 19 05:05:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6c068b904a36b6cbbfa931bba39ee6d09a71227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:26:4c:09:1d:f7:1b:e8:ff:65:b3:af:02:
14:ac:92:c7:9d:62:e0:9f:36:3a:c3:cb:48:f7:68:
fe:34:8b:0a:a2:6b:11:e0:63:fe:ce:21:cc:5c:00:
82:54:ac:79:e1:63:ae:ba:78:87:3a:d1:53:0f:0d:
ed:1f:22:fd:7a:73:a5:3e:1c:2c:0d:09:3c:32:73:
87:5e:7d:11:f1:c4:2f:7d:fb:fc:b3:e4:2b:0a:fc:
07:2e:8d:85:58:6c:c2:4a:7c:a4:60:9e:7b:47:cd:
69:53:d5:22:82:73:15:ba:70:58:bf:d7:34:1b:37:
e1:b5:98:40:e4:06:d2:cb:d7:ac:3f:c5:6c:20:98:
36:34:cd:90:99:9d:80:d8:0f:59:f0:f6:4c:cb:b0:
a3:e1:c6:19:75:24:2b:9b:98:72:c5:73:ad:5e:48:
e1:50:85:69:5a:12:a1:e4:13:91:f2:f7:79:ab:10:
e5:1e:0c:64:3c:8c:28:ab:71:f1:6d:bc:e0:95:82:
5c:ef:e1:31:5b:4f:ad:0e:00:11:61:f6:14:94:01:
fa:1b:cd:e0:c3:eb:db:5b:46:6b:9a:9a:78:cf:f7:
ec:e1:7b:54:33:d0:57:0f:11:ee:e0:a3:7f:81:44:
f1:83:58:20:e5:52:82:fd:2f:22:6d:4e:c1:b8:f8:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:68:B9:04:A3:6B:6C:BB:FA:93:1B:BA:39:EE:6D:09:A7:12:27
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/5sBouQSja2y7-pMbujnubQmnEic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.48.0/22
91.215.240.0/22
185.159.200.0/22
185.246.20.0/22
194.127.196.0/24
194.127.202.0/24
194.127.206.0/24
194.127.214.0/24
IPv6:
2a07:b6c0::/29
2a09:c940::/29
2a0d:6680::/29
2a0f:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
77:41:92:d7:c1:b4:d1:17:db:99:bb:ff:69:0a:3e:24:15:42:
af:16:7d:bd:8d:e1:31:aa:fc:2f:97:30:ce:16:14:2d:70:12:
3e:cd:97:ea:e9:28:6d:5a:d6:db:31:8b:27:54:e9:21:cb:77:
1a:9a:31:fe:dc:8d:aa:5b:06:bc:f9:6d:1e:b1:ee:09:be:1e:
d8:08:09:a3:62:2f:e0:58:92:ea:fc:00:ac:88:ef:93:6f:e3:
b3:34:83:98:f0:fb:89:7b:80:54:e9:91:20:99:14:cb:b1:2f:
c9:54:10:71:c0:c7:1f:7d:a4:c9:01:55:01:5e:fa:00:e3:9b:
87:13:63:83:55:b3:ce:d6:03:bb:cd:9a:72:b3:79:e4:82:b6:
e0:9b:e7:be:41:0c:cd:74:c3:61:df:8f:80:d7:37:0f:3f:d8:
54:cd:1c:6a:b7:e3:ab:24:d8:df:24:79:3a:e5:51:de:73:62:
be:7c:1c:ac:b5:4a:5f:b9:b6:f4:48:76:17:6b:c7:25:d2:19:
54:11:23:0f:91:b0:85:a8:06:48:e9:76:59:5a:1e:5d:4c:c7:
0b:79:db:2e:6a:41:05:e0:86:13:9c:85:d2:d1:4c:03:ef:a8:
b4:b3:e8:02:e4:87:8b:cb:5f:2d:7c:64:f9:38:0b:57:ad:b2:
af:6b:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:15 2024 by rpki-client on console.sobornost.net