Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/_a9mb7ZxwO7m6rh-xVLOHhG81nU.roa
File: _a9mb7ZxwO7m6rh-xVLOHhG81nU.roa (raw, json)
Hash identifier: YMGnE/QU8pv2nRwclrLUmtuD+RhEE05Sl2zwDW6zi3A=
Subject key identifier: FD:AF:66:6F:B6:71:C0:EE:E6:EA:B8:7E:C5:52:CE:1E:11:BC:D6:75
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 0193630DD17905B607498A768FECF8D4455E
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/_a9mb7ZxwO7m6rh-xVLOHhG81nU.roa
Signing time: Mon 25 Nov 2024 11:21:10 +0000
ROA not before: Mon 25 Nov 2024 11:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20836
IP address blocks: 95.157.64.0/19 maxlen: 24
95.157.96.0/19 maxlen: 24
178.249.184.0/21 maxlen: 24
178.249.189.0/24 maxlen: 24
185.47.228.0/22 maxlen: 24
217.171.32.0/20 maxlen: 24
2001:b60::/32 maxlen: 48
2001:b61::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:0d:d1:79:05:b6:07:49:8a:76:8f:ec:f8:d4:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Nov 25 11:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdaf666fb671c0eee6eab87ec552ce1e11bcd675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:5b:ea:d6:32:5b:1e:8c:45:af:52:a2:51:
91:1e:ed:d5:fe:c4:1c:a5:b3:95:53:13:e2:4a:ff:
f9:e1:93:b2:7a:f8:80:64:9f:9b:82:4e:0f:dd:3a:
30:b5:ab:05:55:a4:93:b7:a4:5c:c8:2a:fd:05:2c:
b3:6c:c4:ab:68:d9:57:e0:11:dd:33:58:6f:5d:b8:
23:0b:36:3d:bb:c8:fe:c0:3a:d8:7d:99:c2:92:16:
46:51:b8:0a:89:f2:e7:3c:b1:eb:4b:a0:39:dd:2e:
22:96:b3:b9:0f:d7:4b:5c:41:b5:9f:d4:7b:61:75:
e7:47:62:48:50:bf:06:77:1a:c1:9e:22:65:69:a0:
be:9e:bc:0b:46:b5:5b:d3:24:0f:c4:5e:34:fd:91:
50:63:c1:7d:84:91:bb:e5:ba:19:fe:70:5b:7a:8f:
d8:83:4a:b7:44:f5:02:cf:4f:ac:6d:39:b5:13:cc:
9b:19:1a:9b:8c:a2:c1:ce:3b:32:41:eb:be:64:5d:
6e:d7:5a:8d:3b:52:80:19:9a:ea:02:d5:04:5a:30:
f7:2b:aa:28:8e:11:56:44:7f:d9:b3:c0:9a:2f:85:
6a:2f:05:40:90:81:f6:37:7e:45:5a:37:20:53:c2:
c3:a8:21:f5:71:94:c0:f8:ce:84:12:b5:69:fe:38:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:66:6F:B6:71:C0:EE:E6:EA:B8:7E:C5:52:CE:1E:11:BC:D6:75
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/_a9mb7ZxwO7m6rh-xVLOHhG81nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.64.0/18
178.249.184.0/21
185.47.228.0/22
217.171.32.0/20
IPv6:
2001:b60::/31
Signature Algorithm: sha256WithRSAEncryption
b2:f1:b9:94:4c:0c:bb:f2:f0:0d:7b:88:0c:b4:b6:91:bb:8b:
b8:38:e7:c1:27:4e:5b:9f:5d:7e:1b:06:91:8b:d9:6f:b4:12:
0f:6d:64:11:67:d9:ff:e0:69:c3:76:0a:e0:53:58:64:5d:bc:
84:93:7f:2f:63:b2:ce:21:72:65:3c:d8:e3:4f:de:6a:18:d3:
24:8a:76:b1:f5:5c:38:2d:7c:24:22:0a:88:6e:7e:54:7e:5b:
be:f8:45:26:89:62:4a:85:39:8d:46:72:69:d3:ac:d0:b8:fe:
30:43:5b:e1:1e:98:52:ef:be:b4:29:f7:1a:35:95:4c:60:9a:
f6:98:26:a4:6c:42:88:47:03:0f:8d:12:d1:8d:0c:ee:1a:4b:
1c:50:06:05:13:6b:95:31:52:df:ff:c0:8d:6d:c5:2c:76:74:
44:02:0e:a8:d5:cd:74:36:a7:f8:b4:10:79:9d:c0:e0:61:28:
db:46:37:97:23:2d:80:bc:56:33:1e:dd:d8:8e:e7:59:1b:26:
aa:ac:b9:d6:8d:c6:e5:a0:63:b6:ee:62:d9:f6:b7:9c:35:d0:
5d:67:3c:c1:d9:f3:45:e3:06:8a:57:2c:be:ed:c6:79:f6:8b:
b5:2b:37:ad:07:cd:f5:45:e1:71:0c:a1:5a:cf:ba:2b:e6:4f:
d8:32:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net