Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/9l5DielzS9oR6TD28ouFXnyhu-M.roa
File: 9l5DielzS9oR6TD28ouFXnyhu-M.roa (raw, json)
Hash identifier: yenp0RxO6gJBEnAB+vJ/T0uBbCOULDLi79k00Odlr7g=
Subject key identifier: F6:5E:43:89:E9:73:4B:DA:11:E9:30:F6:F2:8B:85:5E:7C:A1:BB:E3
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 01913D5CE856BCE249CCDD6DFEEA50303647
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/9l5DielzS9oR6TD28ouFXnyhu-M.roa
Signing time: Sat 10 Aug 2024 17:36:24 +0000
ROA not before: Sat 10 Aug 2024 17:36:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201675
IP address blocks: 45.151.220.0/22 maxlen: 22
89.21.80.0/22 maxlen: 22
185.67.144.0/22 maxlen: 22
2a05:1000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3d:5c:e8:56:bc:e2:49:cc:dd:6d:fe:ea:50:30:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Aug 10 17:36:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65e4389e9734bda11e930f6f28b855e7ca1bbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:94:5d:08:7f:96:ca:95:76:07:9c:c9:01:
1c:a1:cd:2e:59:bf:1c:e8:3a:70:cd:24:02:24:7b:
cc:45:77:9c:6f:f3:c1:28:3d:75:5a:04:d3:c3:bd:
54:33:b3:13:a2:95:0a:20:59:51:67:31:f2:5d:43:
a5:01:0d:37:b0:64:ad:17:99:e3:de:00:a6:6f:8d:
87:71:7f:60:88:59:eb:41:53:26:6c:9e:80:d1:39:
b6:f5:7f:02:e8:d3:62:50:ce:1f:0c:48:8d:64:f0:
52:89:15:24:76:63:8e:ce:a2:c7:7f:cc:37:76:21:
9a:4d:d2:a1:cd:23:0e:aa:3d:c3:30:20:4a:e1:af:
ac:95:d3:94:32:7a:13:3d:50:c8:60:54:8e:9e:7e:
16:59:bd:8b:ba:e1:29:37:be:be:21:b3:37:2d:e4:
db:81:12:29:e3:da:45:f6:5b:2e:5b:7f:7b:20:ef:
6a:49:18:f4:6d:05:8f:b4:48:56:11:47:2a:7a:1a:
06:65:ee:5e:72:2b:2b:bc:7c:83:fe:77:8d:55:dc:
33:f6:35:aa:0a:06:4e:7d:b4:8f:c2:18:1a:d4:c2:
d7:ac:9e:16:40:86:1a:b4:95:9b:a4:bf:a9:01:13:
2d:bc:f5:69:48:24:ac:24:b7:40:c7:1f:85:89:6a:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:43:89:E9:73:4B:DA:11:E9:30:F6:F2:8B:85:5E:7C:A1:BB:E3
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/9l5DielzS9oR6TD28ouFXnyhu-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.220.0/22
89.21.80.0/22
185.67.144.0/22
IPv6:
2a05:1000::/29
Signature Algorithm: sha256WithRSAEncryption
07:8d:59:dd:57:8b:18:75:0d:89:19:bf:92:e9:47:41:86:88:
11:00:4e:62:0c:55:1f:ed:25:b0:d3:81:ca:70:e8:15:19:ba:
65:2d:7b:32:5d:84:31:54:1c:11:ab:fa:be:4e:59:5c:36:87:
79:8b:14:51:d6:fb:0a:04:bf:70:51:71:ca:57:8d:b9:cd:06:
ab:eb:99:86:fd:ba:cf:5a:07:af:93:2a:76:9c:f0:c4:dd:7b:
0c:65:53:68:d0:46:33:a0:c2:c2:a6:bd:a3:ab:5a:fa:2e:ca:
ee:ea:1c:a9:91:ef:b1:84:f9:04:6b:af:a8:ca:98:cf:a7:f4:
f4:96:5e:14:e7:d7:21:e0:ff:a2:ad:38:b9:6c:8f:47:0e:c9:
09:fa:7e:1e:d5:f3:46:50:b6:82:26:40:96:96:13:68:8d:92:
eb:df:77:89:31:59:73:6c:a3:6b:4d:3a:0f:bc:b0:d7:f8:b8:
b6:78:24:19:bb:32:87:87:b7:99:44:2f:7a:64:39:80:61:cd:
72:21:83:4c:98:26:46:89:48:58:58:40:02:7e:30:85:5b:e8:
4b:a2:10:02:8b:f2:c1:a6:ad:ed:22:5c:37:8b:2d:7c:db:60:
52:b5:31:13:54:11:29:08:8c:03:c7:66:aa:d4:29:b6:e6:c9:
7c:be:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net