Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/1-0_zgVL56emvdQcB2CDhR7KZbpA.roa
File: 1-0_zgVL56emvdQcB2CDhR7KZbpA.roa (raw, json)
Hash identifier: Xw6jiTgysPp+aol4CjWEJ7EoyBjrCWrcV/1xL/qfVfs=
Subject key identifier: FB:4F:F3:81:52:F9:E9:E9:AF:75:07:01:D8:20:E1:47:B2:99:6E:90
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 01917E8A5CBD5A39234BC001AD8C83920752
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/1-0_zgVL56emvdQcB2CDhR7KZbpA.roa
Signing time: Fri 23 Aug 2024 09:21:22 +0000
ROA not before: Fri 23 Aug 2024 09:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197369
IP address blocks: 46.16.40.0/21 maxlen: 21
46.16.45.0/24 maxlen: 24
46.16.47.0/24 maxlen: 24
188.240.4.0/22 maxlen: 22
188.240.4.0/24 maxlen: 24
188.240.5.0/24 maxlen: 24
188.240.6.0/24 maxlen: 24
188.240.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:8a:5c:bd:5a:39:23:4b:c0:01:ad:8c:83:92:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Aug 23 09:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb4ff38152f9e9e9af750701d820e147b2996e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:7b:3c:dc:65:83:10:7e:16:2d:61:9a:00:
74:a9:9c:c6:76:4a:a1:ce:4f:54:d6:b9:17:80:22:
c4:54:06:52:1e:2e:c2:8f:b4:d4:3f:0a:7c:7f:f6:
aa:d0:f8:d8:6c:83:85:64:30:d9:ba:ce:7e:9f:86:
e4:94:7e:25:d1:a6:01:11:46:98:7f:07:18:bc:0d:
13:c7:df:1f:80:d7:b6:73:7e:d7:6b:7c:cf:ea:bb:
13:3b:c1:70:96:a5:18:65:0a:8e:90:77:54:b1:13:
25:b0:9b:78:5b:29:dd:15:fa:6e:5e:1a:c0:c5:d3:
0f:48:5c:94:cc:ce:d8:7e:53:26:26:9e:f2:a0:07:
5b:0e:b4:c3:79:a2:78:ef:a0:1c:19:48:f8:28:64:
0c:b0:c8:78:9a:6d:22:c1:b4:3e:45:58:a9:f9:df:
5e:e4:55:9b:9e:83:59:a5:8f:59:e9:20:d5:69:5a:
75:d9:51:de:dc:36:91:fe:d5:55:b2:7c:fc:f0:9c:
78:91:35:59:4e:41:15:b4:d9:58:e1:ef:81:bd:b1:
4a:22:1b:92:51:d3:a0:64:eb:83:5f:fd:70:6b:ad:
54:f3:1a:94:0d:ab:c0:bb:4b:78:b6:37:54:8d:a0:
d7:16:7d:3f:f1:36:87:d4:c9:63:a8:d0:97:3d:96:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:F3:81:52:F9:E9:E9:AF:75:07:01:D8:20:E1:47:B2:99:6E:90
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/1-0_zgVL56emvdQcB2CDhR7KZbpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
188.240.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:51:4e:1d:b1:df:47:6f:ba:15:95:fc:a0:fe:ae:fb:66:98:
13:dc:5c:fd:7a:21:9a:fd:79:38:1c:28:be:88:0c:ac:09:e4:
56:f9:11:a1:c4:bb:a0:1e:90:de:75:fb:4e:3c:50:21:c0:61:
33:b8:fa:36:34:e1:33:2f:17:b6:19:93:ce:1f:4b:20:3f:2e:
8a:f5:c7:0b:39:9f:27:c7:b1:b0:fb:03:e7:a0:53:27:b1:e7:
5c:66:59:5a:b1:af:48:3b:e3:88:dc:2b:60:8e:d3:95:f7:ad:
4a:1c:e3:84:8f:bf:c4:bf:94:ec:41:da:0c:a5:9d:e5:27:b5:
17:f3:ec:55:4c:db:6f:12:5c:e5:89:61:f3:12:73:92:80:5b:
eb:ea:5e:a3:e2:d7:48:32:2b:4e:5d:17:e3:76:2c:dd:d0:af:
88:7c:c4:ae:d3:06:6e:7c:c0:64:b8:38:50:57:73:c5:73:92:
96:d2:cd:aa:5c:ef:be:6d:75:b9:34:cf:48:11:b6:3b:e6:a8:
bd:c8:4d:75:8b:f6:01:32:88:1a:10:9a:16:cf:0c:9c:75:18:
fc:88:53:dd:88:06:a9:d6:b0:57:c1:41:b3:24:34:2d:ab:53:
6b:23:03:d0:58:23:f4:48:f6:82:38:68:f9:07:b0:b4:52:00:
d6:ad:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net