Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/nzQrQHiU6mg7RlUuE6haqepaM1A.roa
File: nzQrQHiU6mg7RlUuE6haqepaM1A.roa (raw, json)
Hash identifier: FK+uYrUI+2NP3zafXEvRPKUj72vIgk5mJu720vqfjeA=
Subject key identifier: 9F:34:2B:40:78:94:EA:68:3B:46:55:2E:13:A8:5A:A9:EA:5A:33:50
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 01939646E9E2711327959E467080F46458E1
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/nzQrQHiU6mg7RlUuE6haqepaM1A.roa
Signing time: Thu 05 Dec 2024 10:04:10 +0000
ROA not before: Thu 05 Dec 2024 10:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50436
IP address blocks: 5.28.64.0/18 maxlen: 19
5.28.64.0/19 maxlen: 19
5.28.96.0/19 maxlen: 19
37.120.0.0/17 maxlen: 18
92.206.8.0/21 maxlen: 24
92.206.32.0/20 maxlen: 24
92.206.48.0/20 maxlen: 24
92.206.209.0/24 maxlen: 24
92.206.254.0/23 maxlen: 24
94.139.0.0/19 maxlen: 20
217.68.167.0/24 maxlen: 24
2a02:2455:8000::/36 maxlen: 36
2a02:2455:9000::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:46:e9:e2:71:13:27:95:9e:46:70:80:f4:64:58:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Dec 5 10:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f342b407894ea683b46552e13a85aa9ea5a3350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:e0:fd:3d:89:3a:6e:ef:ac:c9:7a:bc:67:
0e:04:da:19:ab:4e:c3:22:80:6f:fa:1d:3f:06:9d:
b9:64:71:83:c7:51:dd:bd:b1:f8:39:26:11:65:06:
e7:80:c2:17:67:f6:d4:3f:74:9b:f4:f7:7c:03:24:
0b:b4:7c:3a:2a:be:0a:0f:e2:7a:9b:68:95:07:06:
2b:13:4c:6e:89:84:98:ba:54:df:96:82:2f:a4:a5:
99:9d:92:85:20:9f:02:b8:f8:31:04:03:57:5b:51:
2c:7f:c2:ae:04:ec:02:c9:43:0c:51:cc:98:ff:e4:
b6:ed:76:e8:69:ab:34:65:97:61:68:25:cb:aa:dc:
42:f6:e6:ba:4a:70:2e:ac:4b:14:1e:74:24:16:a3:
b9:cb:fe:42:19:fe:15:76:02:76:97:4f:7f:ad:4e:
0b:72:ff:11:f6:f9:6e:30:a7:93:20:82:66:c9:75:
b7:ba:2a:cd:78:6c:28:16:f2:72:b8:03:a9:2a:da:
4a:94:1b:86:8e:7b:96:7f:53:c9:3b:c8:9c:63:6b:
26:61:ce:c7:c3:28:52:d3:15:e4:c4:a4:17:1f:ff:
fb:87:47:42:7c:e6:b5:c3:5a:df:bb:e4:1c:6d:2b:
4e:b9:4c:f8:39:28:db:a0:93:f7:21:53:52:9c:40:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:2B:40:78:94:EA:68:3B:46:55:2E:13:A8:5A:A9:EA:5A:33:50
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/nzQrQHiU6mg7RlUuE6haqepaM1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
37.120.0.0/17
92.206.8.0/21
92.206.32.0/19
92.206.209.0/24
92.206.254.0/23
94.139.0.0/19
217.68.167.0/24
IPv6:
2a02:2455:8000::/35
Signature Algorithm: sha256WithRSAEncryption
94:70:95:e4:72:e5:32:23:92:b4:86:b3:c4:76:e7:0b:8e:3f:
69:53:bd:57:69:a7:3c:42:6c:b5:50:db:e6:69:de:e4:14:8f:
3a:91:b1:da:82:cd:38:44:92:d6:76:29:ca:f6:c0:89:05:4a:
72:02:97:e6:30:43:13:a1:dc:0d:32:31:d1:f3:1d:6c:69:94:
7b:2f:b4:a1:03:9d:5f:fb:b2:ae:00:ab:47:7c:51:82:2a:b1:
b9:ce:ca:d3:95:50:b8:34:c1:da:c9:fb:cc:4a:b7:59:43:a0:
4e:8c:81:11:84:41:98:45:15:80:66:d5:64:9e:aa:5d:c7:5e:
ac:61:61:66:97:51:e0:80:0a:a0:c9:07:e7:3e:35:b6:a4:3b:
2b:73:3b:a9:b4:0f:c0:06:03:45:0d:9d:61:07:1b:5e:eb:93:
fd:78:03:43:99:77:4c:29:52:72:22:9a:fd:9e:4b:43:24:ee:
4e:18:8d:61:24:32:b0:72:f1:ab:72:fa:8d:68:68:9c:22:25:
b0:b0:64:86:dd:7c:b4:66:75:ba:9d:0d:2f:ad:68:a7:cc:ed:
c6:1c:bd:99:60:3d:6e:22:51:51:dd:db:8a:e8:53:f1:42:94:
5b:62:0c:38:d1:3b:b3:cc:fd:6f:25:57:74:69:f8:60:7f:16:
6b:c5:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net