Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/jQXR0rPaDmwr59O1n1Idu_DZTvc.roa
File: jQXR0rPaDmwr59O1n1Idu_DZTvc.roa (raw, json)
Hash identifier: spCyGvbTm024glR9czgMegilHpurailSyrpReE4bqgs=
Subject key identifier: 8D:05:D1:D2:B3:DA:0E:6C:2B:E7:D3:B5:9F:52:1D:BB:F0:D9:4E:F7
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 018CC349494F5652C368E24E23ED13C614FE
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/jQXR0rPaDmwr59O1n1Idu_DZTvc.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198434
IP address blocks: 185.73.250.0/24 maxlen: 24
185.73.248.0/22 maxlen: 24
185.73.248.0/24 maxlen: 24
185.73.249.0/24 maxlen: 24
213.138.217.0/24 maxlen: 24
213.138.218.0/24 maxlen: 24
213.138.219.0/24 maxlen: 24
213.138.216.0/22 maxlen: 24
213.138.216.0/24 maxlen: 24
37.72.33.0/24 maxlen: 24
37.72.34.0/24 maxlen: 24
37.72.35.0/24 maxlen: 24
37.72.36.0/24 maxlen: 24
37.72.37.0/24 maxlen: 24
37.72.38.0/24 maxlen: 24
37.72.32.0/21 maxlen: 24
37.72.32.0/24 maxlen: 24
37.72.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:49:4f:56:52:c3:68:e2:4e:23:ed:13:c6:14:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d05d1d2b3da0e6c2be7d3b59f521dbbf0d94ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:61:00:6c:09:96:20:1c:0f:73:36:80:24:
83:18:f1:15:4b:65:ee:08:2d:8a:e8:ee:bc:6a:d7:
8b:d2:46:f6:f8:b6:61:28:a1:28:d3:22:55:6a:d9:
07:8b:16:55:b3:fa:6e:7c:2f:e6:55:d1:48:b7:56:
e2:00:2a:62:22:07:0b:e4:4b:1b:2d:b6:a8:eb:b8:
48:1a:28:cb:73:ce:f8:47:95:17:aa:e9:f7:8e:44:
63:a8:45:ee:00:0f:de:bb:c5:30:64:fc:f8:d7:55:
0f:00:e8:0f:9f:e2:6f:fc:07:e4:95:97:fa:ac:d9:
fa:d2:6b:5f:c2:25:cf:e9:ad:76:6d:30:f8:31:80:
83:e0:7b:79:c4:3c:3c:07:ff:ee:87:b6:50:20:1f:
32:22:0b:73:31:60:70:4d:52:18:fc:38:0e:9f:d8:
33:45:b5:d2:bb:a0:65:82:ed:c0:24:2d:1e:c0:18:
65:f8:14:bd:9a:7a:d5:0e:c7:c9:3a:53:6e:e1:94:
f8:69:06:8d:c0:0e:3e:cf:cf:38:d9:81:75:a9:85:
5b:fa:9e:d1:79:03:8e:11:54:36:07:71:02:3a:a3:
dd:d7:e1:08:4b:e1:17:b7:6c:86:71:65:db:fb:17:
cd:31:2f:29:1d:ea:e4:c0:1f:86:fa:8e:1a:51:06:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:D1:D2:B3:DA:0E:6C:2B:E7:D3:B5:9F:52:1D:BB:F0:D9:4E:F7
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/jQXR0rPaDmwr59O1n1Idu_DZTvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.32.0/21
185.73.248.0/22
213.138.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d1:cd:3d:0c:01:9b:43:dc:f8:10:71:50:98:eb:7a:a5:1c:
26:da:a1:cc:dc:6e:39:cd:33:63:65:ac:d9:24:e3:17:d1:72:
6f:a6:28:d7:63:0c:0a:d2:04:4a:d6:2c:a8:ed:db:62:54:7f:
43:84:dc:5c:3b:27:3a:22:49:9f:f8:be:ea:7d:bf:7b:ce:cd:
2f:14:4a:97:35:33:cf:1d:51:4f:74:9f:1d:59:2b:56:2a:63:
b7:37:c2:2a:b9:57:08:70:88:89:bb:65:1f:04:dc:ce:ae:96:
4a:a8:e4:b4:23:21:7d:55:6c:04:4a:28:6f:a4:7e:16:f6:29:
0a:1e:d3:cb:fb:4f:b4:43:61:9b:92:df:37:ca:f7:f1:30:83:
bb:8f:5d:48:1d:f2:74:24:8c:92:45:b0:2e:fa:d2:b1:5e:1f:
4d:42:c6:a1:66:cf:0b:36:e9:89:91:79:a4:3d:3c:69:1e:11:
2f:61:0f:ff:8f:b3:bf:1e:bf:db:32:e1:7d:fb:66:e4:24:16:
bb:f3:77:d6:88:3b:ee:a5:a7:bf:8c:f8:81:f7:d6:4c:6f:00:
2c:a7:36:ff:2f:11:0e:63:28:49:a4:f3:0e:c1:50:ab:70:43:
7b:af:2a:30:37:5a:96:b0:c3:42:2d:bb:75:d7:70:57:d7:25:
81:68:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net