Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/h7DJOcwRYmQSIRKHbndv9NlhTns.roa
File: h7DJOcwRYmQSIRKHbndv9NlhTns.roa (raw, json)
Hash identifier: xLhq19Rdgmxdx9ZxMJE5bvsm4anhBNT/Kvg6wv1I57Q=
Subject key identifier: 87:B0:C9:39:CC:11:62:64:12:21:12:87:6E:77:6F:F4:D9:61:4E:7B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 018CC64B0D487782D9B2E124099E26CA87EB
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/h7DJOcwRYmQSIRKHbndv9NlhTns.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60524
IP address blocks: 185.153.84.0/24 maxlen: 24
185.153.84.0/22 maxlen: 22
185.153.85.0/24 maxlen: 24
185.153.86.0/24 maxlen: 24
185.153.87.0/24 maxlen: 24
2a0a:6c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0d:48:77:82:d9:b2:e1:24:09:9e:26:ca:87:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b0c939cc116264122112876e776ff4d9614e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:62:71:34:f1:da:74:29:ed:8d:4c:8a:02:
12:3d:28:0e:ab:2a:4f:e5:72:7c:ca:68:06:68:a5:
71:7e:39:0f:c6:07:44:bb:fc:a8:00:16:c4:e0:e8:
63:a3:7d:3b:bc:7d:27:49:eb:49:a4:33:0e:54:f9:
89:66:15:1e:3b:19:0c:f0:31:73:da:89:0f:fd:83:
8d:75:ab:37:b2:e8:cd:69:02:fd:d4:9a:3b:1c:ad:
b3:77:49:01:02:6d:b0:ef:ca:41:8c:2e:75:0b:9c:
7c:bb:7a:01:a4:be:00:c0:60:9b:6b:c6:af:2d:08:
41:6c:a5:ae:7f:b5:44:5f:e6:6d:ca:ec:97:18:13:
60:cf:2b:2f:51:6c:0e:40:5b:86:83:3b:46:b6:f3:
ea:a5:bf:4f:9c:8c:9d:46:8d:46:ca:4a:f9:50:58:
40:ca:74:c7:67:87:31:4f:64:96:f6:03:62:80:01:
1f:61:90:77:98:69:df:f9:19:1d:26:3a:3d:a7:a4:
aa:6e:63:9d:fb:74:56:1a:24:02:6b:1a:d3:9c:7b:
5b:9b:99:33:06:20:dd:48:12:a7:05:6a:ba:e3:79:
52:0c:21:4e:f7:5b:a0:a0:ed:b7:41:53:e3:a2:ef:
17:0b:2f:67:02:f5:64:f1:88:f2:e7:e3:9c:cf:50:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:C9:39:CC:11:62:64:12:21:12:87:6E:77:6F:F4:D9:61:4E:7B
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/h7DJOcwRYmQSIRKHbndv9NlhTns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.84.0/22
IPv6:
2a0a:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:5a:71:67:27:eb:15:0b:13:04:30:c5:f7:ec:63:d2:34:cb:
b5:6c:d0:0c:85:4e:0c:3d:cf:3a:e2:d4:76:35:ca:ef:1f:6f:
d7:60:a5:c0:ff:b6:1c:ca:e9:8d:86:45:04:a3:01:2a:e8:76:
f9:a0:aa:a1:62:da:d2:1e:45:f3:56:06:c9:c5:d6:e4:c1:45:
02:34:34:e0:e6:e9:f9:a0:86:d6:9a:69:d0:f7:89:12:27:92:
fc:13:4a:d0:4d:1c:dc:f3:75:cd:94:27:e4:d2:07:89:d0:75:
b0:7b:ed:3e:3b:d4:08:34:e2:be:31:3b:9b:60:85:b9:5b:d0:
1d:25:3e:79:ae:94:2a:c8:09:bc:70:e5:5a:c7:21:73:6a:77:
56:7f:8d:b5:9e:f5:7d:ba:ae:4e:24:66:a1:cf:0f:d2:f5:7d:
d5:8d:55:09:cf:50:33:a6:84:7a:67:eb:ad:2c:0c:20:a9:36:
13:90:00:b4:1c:3f:83:86:b3:0e:83:98:28:8a:bd:24:64:a6:
bf:36:3e:a0:83:7d:4a:ff:0b:cc:fa:68:02:85:45:62:8e:f2:
c0:64:e3:62:5e:59:2c:1c:07:54:0e:81:c6:29:34:09:d0:bf:
59:69:81:5c:e3:a4:a6:25:21:9b:df:ef:aa:04:8a:5d:f1:6f:
61:49:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net