Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/P05a5S8-Ivl4sj8MP_KQY-k_XHI.roa
File: P05a5S8-Ivl4sj8MP_KQY-k_XHI.roa (raw, json)
Hash identifier: nKio+bKec6wR73x+VH9OI0ho5ZuGNf0YQi0M49dNzR0=
Subject key identifier: 3F:4E:5A:E5:2F:3E:22:F9:78:B2:3F:0C:3F:F2:90:63:E9:3F:5C:72
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0193F81FF8C12BA87AC8C13F9B3938C5B712
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/P05a5S8-Ivl4sj8MP_KQY-k_XHI.roa
Signing time: Tue 24 Dec 2024 10:04:25 +0000
ROA not before: Tue 24 Dec 2024 10:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25151
IP address blocks: 37.46.136.0/21 maxlen: 24
81.24.0.0/22 maxlen: 24
81.24.4.0/22 maxlen: 24
81.24.6.0/23 maxlen: 24
81.24.8.0/22 maxlen: 24
81.24.10.0/23 maxlen: 24
85.158.200.0/21 maxlen: 24
93.94.224.0/21 maxlen: 24
109.235.72.0/21 maxlen: 24
185.54.112.0/22 maxlen: 24
185.78.196.0/22 maxlen: 24
2a01:518::/32 maxlen: 48
2a05:6cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:1f:f8:c1:2b:a8:7a:c8:c1:3f:9b:39:38:c5:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Dec 24 10:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f4e5ae52f3e22f978b23f0c3ff29063e93f5c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:e9:8c:d7:a3:e2:b5:eb:1e:56:0a:90:7b:
0d:81:a1:74:1d:a4:13:7a:4a:da:18:99:45:b6:c8:
f2:ce:1f:5c:24:28:e6:38:f6:c2:a9:04:65:b2:80:
ed:fb:8d:c8:d5:7e:31:cf:a0:0a:30:27:aa:57:c0:
ea:8f:c4:ba:a1:f3:61:95:1c:cc:6c:ee:f4:9c:96:
f9:3b:d9:2c:f6:31:ff:08:81:cc:42:07:cc:d0:21:
21:8d:27:b8:48:a6:99:71:85:da:e1:15:64:db:33:
84:09:41:33:c1:d2:4c:2b:ac:53:6b:b2:f0:a8:12:
b1:7d:60:f2:11:11:98:62:61:a0:b1:98:c1:89:6a:
1f:1a:20:e6:d2:5e:76:00:e8:47:6d:74:e0:97:96:
ee:3e:fa:e8:7f:fe:d6:1b:6d:35:3e:fc:8c:f2:e7:
e7:e9:a0:f6:e5:01:62:66:6b:b2:3d:16:07:5d:4c:
d3:3b:db:e3:03:6e:a4:e6:13:9a:31:f3:ec:f5:2d:
90:61:e4:c7:da:5f:ab:63:92:b5:15:e6:b0:f2:35:
3c:5b:09:4a:68:93:90:76:b3:7e:9c:87:cf:b9:ef:
79:1e:38:6f:49:07:c1:07:bf:cc:da:6a:7a:4a:87:
bc:27:f4:b8:f8:c2:51:3e:d3:33:85:ac:48:69:72:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:5A:E5:2F:3E:22:F9:78:B2:3F:0C:3F:F2:90:63:E9:3F:5C:72
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/P05a5S8-Ivl4sj8MP_KQY-k_XHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.136.0/21
81.24.0.0-81.24.11.255
85.158.200.0/21
93.94.224.0/21
109.235.72.0/21
185.54.112.0/22
185.78.196.0/22
IPv6:
2a01:518::/32
2a05:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
68:e2:7c:b9:e6:d7:a2:71:4a:3e:0b:d0:f2:b9:16:e3:57:0a:
90:64:3b:46:a5:ae:3a:e5:d0:1a:3f:ad:d0:72:44:60:99:a2:
97:ff:80:2d:91:63:0c:ef:da:7d:0f:a8:b5:0c:6a:3b:9a:df:
2d:f2:3c:6b:06:c1:0f:5a:00:da:f4:4e:b2:26:9b:6a:42:f4:
9e:1c:03:cc:6c:c2:43:72:d1:ed:31:9e:90:2e:f6:5b:e3:94:
91:8b:2e:a1:90:e4:6d:83:56:bc:e5:7e:88:2f:ad:9d:fb:a7:
b7:c3:b2:2e:b9:ae:c4:fa:fc:20:41:59:c4:7d:d5:8d:fa:a5:
5e:f2:de:f6:da:f8:26:a8:70:3d:cd:c9:f8:05:ed:a2:43:47:
28:8d:85:9b:90:48:dc:57:a3:3d:cc:4c:35:41:00:03:0b:15:
d0:5e:15:23:05:de:64:b6:1f:25:10:30:6a:2d:f3:8b:5f:62:
4d:84:ec:08:12:78:5a:d1:97:a3:d4:70:00:a3:17:81:0b:1e:
8f:5f:44:9f:6c:5d:37:42:75:33:b1:c8:d9:80:e3:0a:9a:e7:
35:3f:19:9a:ce:f1:e1:1f:b7:59:6c:a9:94:ac:82:9e:8d:dd:
50:89:a1:7d:72:d0:26:9c:92:4e:f7:cc:1e:95:8a:51:5c:4c:
09:5b:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:19 2024 by rpki-client on console.sobornost.net