Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/JbbDEaHVN3mgp-ZOu2YgRKWQ8Ak.roa
File: JbbDEaHVN3mgp-ZOu2YgRKWQ8Ak.roa (raw, json)
Hash identifier: tM1cnLtZxCAJziU1s0o2tVysJnYgiTMoG4Mg+C8wDx0=
Subject key identifier: 25:B6:C3:11:A1:D5:37:79:A0:A7:E6:4E:BB:66:20:44:A5:90:F0:09
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 0193B623D5DA0144B84CDB04D68881630736
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/JbbDEaHVN3mgp-ZOu2YgRKWQ8Ak.roa
Signing time: Wed 11 Dec 2024 14:33:42 +0000
ROA not before: Wed 11 Dec 2024 14:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 31.136.0.0/14 maxlen: 14
62.72.192.0/19 maxlen: 19
62.140.128.0/19 maxlen: 19
62.140.128.0/20 maxlen: 20
62.140.140.0/23 maxlen: 23
62.140.156.0/23 maxlen: 23
109.32.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:23:d5:da:01:44:b8:4c:db:04:d6:88:81:63:07:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Dec 11 14:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b6c311a1d53779a0a7e64ebb662044a590f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:93:b1:2f:96:db:52:b0:61:40:b9:a3:64:
7a:fa:54:3e:a0:6d:40:a5:36:dc:07:a3:93:28:9c:
14:c7:e2:0e:d2:3e:c9:cd:76:ac:73:85:2f:84:e9:
29:a5:52:4b:cf:6b:47:fd:6c:05:ed:f7:50:25:f8:
95:3a:5c:8c:90:bf:59:8d:b2:80:3d:bf:00:fc:f7:
4a:be:7c:80:68:7b:45:4d:51:86:81:0c:4a:34:8f:
aa:80:da:e2:4e:23:e3:c9:06:2e:47:06:f2:54:6e:
25:49:6d:dc:e4:6e:42:ca:da:4f:29:7c:6f:6d:12:
78:f9:f8:7c:b3:1b:9c:8a:fb:17:d6:0d:76:6d:f1:
09:da:ef:24:58:b4:91:a8:2f:a7:e6:4d:95:63:36:
4e:93:c9:3b:8f:db:47:d2:7d:b0:d4:eb:3d:25:88:
f1:0c:08:f5:03:08:ed:73:56:c6:60:7c:6f:0e:71:
0e:85:42:71:c6:e6:d6:a2:bc:6f:82:20:d3:04:11:
10:ab:07:45:bc:a3:ad:35:fb:12:fb:15:01:92:52:
f2:a2:44:7a:e6:2c:9a:13:08:56:11:9f:3f:aa:6e:
22:eb:38:72:79:b1:d3:df:f5:4c:99:74:5e:8c:2d:
7c:71:4d:44:ac:04:37:fa:d4:eb:99:52:b5:b0:48:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:C3:11:A1:D5:37:79:A0:A7:E6:4E:BB:66:20:44:A5:90:F0:09
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/JbbDEaHVN3mgp-ZOu2YgRKWQ8Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.136.0.0/14
62.72.192.0/19
62.140.128.0/19
109.32.0.0/13
Signature Algorithm: sha256WithRSAEncryption
35:18:a2:26:bc:e2:ef:8d:bc:ab:fd:77:c6:a3:39:22:55:a1:
f9:35:8c:85:f1:63:3d:16:5e:d7:64:85:1b:30:85:a5:77:79:
09:ce:04:cc:c5:02:65:3f:71:ef:67:f6:14:c8:77:8a:74:75:
e1:7e:30:84:32:84:e2:66:ca:64:9b:9c:3a:ab:16:1e:f4:0f:
f4:d9:21:22:3c:c1:74:e3:6c:b1:e5:9f:ea:21:7c:14:cc:25:
73:99:4a:77:44:bd:c4:c3:f0:25:ab:7a:6d:81:17:c0:72:79:
73:38:ef:be:19:35:7c:16:85:8d:de:73:6f:c1:07:f3:92:91:
16:3d:a0:b3:05:1f:f2:b1:a5:1a:75:70:33:ce:f3:53:51:01:
7c:12:24:ee:e9:1d:68:df:a2:a3:0e:08:61:a7:21:84:47:c2:
57:ce:29:9e:0d:8e:98:9b:90:3f:63:c7:20:e6:ca:72:a5:c6:
3b:9d:77:7b:bd:2a:3a:a9:07:31:06:f5:b4:0f:76:c1:99:ef:
91:36:d7:cb:a9:24:12:cc:78:f0:f4:ea:63:68:4a:f3:f8:b5:
6c:06:ef:ed:59:1c:62:04:fd:df:c4:2a:c9:d6:3e:f4:02:a1:
a2:68:0e:60:59:b4:5f:fa:25:27:6a:4e:b5:84:99:fd:59:c8:
e8:24:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net