Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/KrRpofYGcXP3CBRRlPiuuPn1Wq8.roa
File: KrRpofYGcXP3CBRRlPiuuPn1Wq8.roa (raw, json)
Hash identifier: dD9nlYnmN+mXlU4nc1bN42frforUl0wZmQMncOm8+uo=
Subject key identifier: 2A:B4:69:A1:F6:06:71:73:F7:08:14:51:94:F8:AE:B8:F9:F5:5A:AF
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 0193F86BF5B76935A3FD116383CEFF3AC30E
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/KrRpofYGcXP3CBRRlPiuuPn1Wq8.roa
Signing time: Tue 24 Dec 2024 11:27:25 +0000
ROA not before: Tue 24 Dec 2024 11:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48847
IP address blocks: 185.104.68.0/22 maxlen: 22
185.104.68.0/24 maxlen: 24
185.104.68.0/26 maxlen: 26
185.104.68.64/26 maxlen: 26
185.104.68.144/28 maxlen: 28
185.104.68.240/29 maxlen: 29
185.104.70.0/24 maxlen: 24
185.104.70.0/28 maxlen: 28
185.104.70.32/30 maxlen: 30
185.104.70.220/30 maxlen: 30
185.104.71.0/24 maxlen: 24
185.104.71.0/28 maxlen: 28
185.104.71.16/30 maxlen: 30
185.104.71.20/30 maxlen: 30
185.104.71.24/30 maxlen: 30
185.104.71.28/30 maxlen: 30
185.104.71.32/28 maxlen: 28
185.104.71.176/29 maxlen: 29
185.104.71.224/28 maxlen: 28
2a06:3480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:6b:f5:b7:69:35:a3:fd:11:63:83:ce:ff:3a:c3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Dec 24 11:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ab469a1f6067173f708145194f8aeb8f9f55aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:e0:24:8c:97:f9:e9:44:61:2a:29:b0:06:
98:4a:cc:91:05:09:8c:9b:2e:7e:a6:4e:1b:08:7e:
e9:ad:85:01:d0:b0:42:df:88:fc:21:a7:21:46:eb:
56:bb:0e:a6:e7:a5:58:cf:0a:0a:e7:57:36:f0:65:
63:cf:2b:a6:08:4f:cd:ff:e0:96:62:e4:f1:27:48:
c3:f8:f9:5a:cd:39:fa:91:aa:80:1a:4b:89:3b:ab:
4c:5a:38:e6:d7:e7:72:d8:d0:98:ca:bb:eb:2a:9a:
b6:2f:58:0d:26:87:13:66:c6:e5:70:39:cd:0e:e7:
9b:70:af:ed:4b:e9:fc:f9:0f:cd:8c:a0:b9:4f:43:
8d:5d:84:e3:a0:a0:8a:38:d2:d8:a7:98:0e:e9:fe:
ad:bb:85:16:ca:a5:44:7a:36:3e:4f:fa:ef:6a:aa:
9e:62:c5:1d:c6:19:45:d4:75:ac:5b:c6:cc:6f:e1:
36:5d:26:c9:d2:e0:d4:19:06:17:20:3a:25:b6:21:
a9:69:0a:40:53:a0:d3:6c:e7:a1:35:04:e8:b9:07:
48:4f:db:4b:97:01:43:8d:ee:3c:97:6a:56:63:20:
f5:d4:ae:dc:91:c7:6b:a9:58:01:5c:4a:89:f8:9a:
c2:91:b9:b7:6b:17:32:46:db:24:04:59:ef:ce:56:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:69:A1:F6:06:71:73:F7:08:14:51:94:F8:AE:B8:F9:F5:5A:AF
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/KrRpofYGcXP3CBRRlPiuuPn1Wq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.68.0/22
IPv6:
2a06:3480::/29
Signature Algorithm: sha256WithRSAEncryption
20:ce:d9:f7:59:d4:5b:b6:b8:c5:5f:5d:9c:ae:42:a4:5f:1d:
c6:9e:08:6b:e2:97:b2:f6:53:6e:56:f6:04:b4:0c:0c:3f:08:
46:15:f4:a8:9e:ec:b1:48:d9:fe:d8:f0:1c:4e:87:e0:51:bf:
b1:0d:20:9f:86:b0:31:65:05:cf:ef:78:79:99:4c:ea:58:6d:
fb:d8:8d:eb:6f:a3:50:01:79:e6:a2:8e:98:c6:75:5c:57:d4:
34:34:4b:50:50:63:b1:fd:4d:cb:aa:19:3f:b1:35:2e:4b:47:
ab:8b:89:05:78:24:6f:24:7d:c7:f5:d1:a6:94:e8:a8:bc:44:
90:da:41:43:9d:b1:7e:88:a9:94:85:ac:4c:bf:f0:2d:72:47:
d6:84:82:24:c1:29:9c:e0:2e:3c:38:95:12:0e:ea:0d:2a:28:
6c:2e:ef:cf:f9:67:10:e7:98:e9:61:07:96:34:34:fd:59:15:
66:5e:0d:3a:4a:2c:85:84:77:c2:dd:27:16:ec:3a:53:6d:27:
e9:87:12:8c:48:ef:da:a0:b5:18:26:26:0d:50:af:2c:b6:1b:
d6:31:0e:ce:f3:51:f7:eb:82:74:b5:29:ce:3c:36:7d:fb:14:
6f:be:ff:7e:b3:e6:d1:79:f1:53:e9:e9:94:69:b7:53:2e:d3:
4b:9d:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net