Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/RngpFDKtlEcSGbadKGnqQxz1LBY.roa
File: RngpFDKtlEcSGbadKGnqQxz1LBY.roa (raw, json)
Hash identifier: YBKe9sUGTQtFvWyVGfzv7TdS7IB8yZA2HntsZqf12bo=
Subject key identifier: 46:78:29:14:32:AD:94:47:12:19:B6:9D:28:69:EA:43:1C:F5:2C:16
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019371EE691285E3B2ACBCF5CA3EE8BAEBE4
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/RngpFDKtlEcSGbadKGnqQxz1LBY.roa
Signing time: Thu 28 Nov 2024 08:41:09 +0000
ROA not before: Thu 28 Nov 2024 08:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206702
IP address blocks: 185.160.148.0/24 maxlen: 24
185.160.149.0/24 maxlen: 24
185.160.150.0/24 maxlen: 24
185.160.151.0/24 maxlen: 24
185.178.160.0/24 maxlen: 24
185.178.161.0/24 maxlen: 24
185.178.162.0/24 maxlen: 24
185.178.163.0/24 maxlen: 24
185.194.192.0/24 maxlen: 24
185.194.193.0/24 maxlen: 24
185.194.195.0/24 maxlen: 24
193.148.84.0/24 maxlen: 24
193.148.85.0/24 maxlen: 24
193.148.86.0/24 maxlen: 24
193.148.87.0/24 maxlen: 24
2a0a:1141:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:ee:69:12:85:e3:b2:ac:bc:f5:ca:3e:e8:ba:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Nov 28 08:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4678291432ad94471219b69d2869ea431cf52c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:52:b8:0b:2e:8c:fd:1e:1a:c0:43:70:67:cd:
d0:04:a8:41:75:46:f6:f7:b8:0b:9a:b8:b6:b0:e3:
74:07:f5:be:f4:ea:1c:9a:f7:02:a8:d6:fe:f5:e6:
d8:16:25:e5:2b:e4:8b:ee:b2:11:3b:f3:ef:7b:0b:
c4:75:69:45:48:b5:f2:09:46:dd:c5:52:c4:17:c1:
11:84:be:b4:29:43:00:56:99:95:31:29:dd:b7:2e:
14:ce:f5:85:ad:0a:89:1f:7c:11:72:c9:11:79:08:
81:ba:43:54:5e:7b:07:c2:b5:6e:14:56:9f:92:e7:
10:82:67:07:2b:53:54:0a:68:26:3d:01:16:df:06:
da:67:e2:ef:75:d8:0d:68:11:0f:f1:7f:b6:19:d6:
19:1c:02:d8:b6:b1:f7:7b:10:64:09:7f:4c:84:b3:
17:22:43:9b:02:3d:8b:82:f1:39:3f:22:7d:1c:75:
8a:80:0c:68:17:9f:ed:b9:f9:45:6b:d1:69:c7:17:
0a:1c:4e:22:80:9f:d0:e2:81:e1:0a:fb:83:83:a3:
27:86:18:64:2e:97:98:be:d9:8d:35:14:b2:e3:9b:
f5:89:5f:1d:40:46:7f:a1:cb:00:5c:c4:30:42:ef:
3e:9e:cb:29:3a:51:ae:e8:80:92:d9:c4:cc:b8:8c:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:29:14:32:AD:94:47:12:19:B6:9D:28:69:EA:43:1C:F5:2C:16
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/RngpFDKtlEcSGbadKGnqQxz1LBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.148.0/22
185.178.160.0/22
185.194.192.0/23
185.194.195.0/24
193.148.84.0/22
IPv6:
2a0a:1141:4000::/34
Signature Algorithm: sha256WithRSAEncryption
6a:ad:fd:80:a0:62:67:ae:fd:55:d9:66:e4:b8:11:db:00:b2:
01:64:cd:62:c1:41:a6:e6:dd:93:53:a9:e9:e2:d7:4e:88:d9:
6a:08:9e:7c:f1:66:d5:1d:d0:fb:17:aa:c8:62:93:26:eb:26:
21:3e:58:44:69:63:fd:13:0e:bf:c3:c7:b1:d2:e8:50:26:9f:
97:59:ce:62:7c:3e:bb:ab:79:c3:d1:56:4e:49:c7:f7:73:09:
16:0f:1e:eb:1c:55:10:a2:f1:78:a8:29:9e:1b:a0:83:4f:5e:
21:ab:56:32:a7:f8:9a:45:ec:41:3d:11:12:a8:d0:d9:fc:af:
9c:55:a0:1e:cb:34:62:0a:d4:a3:09:c6:0c:c1:f3:65:4f:fc:
22:20:ef:7d:00:ac:fa:3e:d5:3e:3a:1b:3a:e5:9b:ff:38:29:
8c:4b:94:d8:63:48:c2:d9:97:da:42:0c:6f:58:8e:63:df:65:
b7:60:c2:38:1c:26:01:7e:1b:83:ab:ff:25:c2:f7:06:a3:5f:
35:80:28:35:dc:0f:bd:6b:62:aa:16:09:93:e3:83:71:dd:12:
43:27:51:d4:37:1b:d9:5f:bb:89:61:61:9b:63:2f:f1:ee:90:
a1:6a:85:98:99:c9:57:c5:5f:a3:a7:08:c0:8e:f3:be:46:7f:
06:1f:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net