Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nro9ifpyBuKMRkZEH41LMZ_Qk1Y.roa
File: nro9ifpyBuKMRkZEH41LMZ_Qk1Y.roa (raw, json)
Hash identifier: Zm3f0Qwb/xH0TsKqeo9ZpD8/moZxXgYkiLEFFxnkTs0=
Subject key identifier: 9E:BA:3D:89:FA:72:06:E2:8C:46:46:44:1F:8D:4B:31:9F:D0:93:56
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0193B5DE9E9B86544FD480E9AD4796ED764D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nro9ifpyBuKMRkZEH41LMZ_Qk1Y.roa
Signing time: Wed 11 Dec 2024 13:18:05 +0000
ROA not before: Wed 11 Dec 2024 13:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31102
IP address blocks: 86.107.20.0/24 maxlen: 24
86.107.52.0/24 maxlen: 24
89.42.9.0/24 maxlen: 24
89.47.255.0/24 maxlen: 24
92.114.39.0/24 maxlen: 24
92.114.52.0/24 maxlen: 24
188.215.70.0/23 maxlen: 23
188.240.202.0/23 maxlen: 23
188.241.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:de:9e:9b:86:54:4f:d4:80:e9:ad:47:96:ed:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Dec 11 13:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9eba3d89fa7206e28c4646441f8d4b319fd09356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:9d:72:95:12:2c:56:63:f8:b3:5e:f9:38:
5f:d5:ca:ee:d3:ad:64:c8:1d:ba:74:2c:39:e5:8b:
0d:4a:68:01:13:9e:26:16:95:5e:36:e4:f9:aa:43:
02:15:64:6d:25:13:5f:5f:98:ea:cf:63:28:3e:a9:
8c:c0:7c:93:f2:58:27:3e:8b:fb:44:37:6e:6b:35:
17:a6:4b:60:34:5f:02:6f:ff:cf:ec:c0:47:e0:b1:
9e:99:eb:36:a4:1e:94:5d:58:29:61:71:61:c5:47:
cf:26:2d:cb:6c:76:85:b6:14:0f:68:7d:6e:77:58:
10:17:12:53:09:b5:6c:d9:ff:5a:f1:2b:a0:7a:7d:
94:4a:06:47:77:ac:89:4f:72:d6:20:cc:4e:c4:c5:
2b:eb:03:c8:1a:f1:ff:7c:0a:f6:9a:51:27:12:a5:
b1:23:23:6f:80:c1:67:ba:84:a2:4d:bc:c3:99:e9:
3a:86:10:29:2a:95:de:ec:a4:78:31:82:33:d4:67:
bf:f5:85:ac:2d:51:90:3b:f8:2c:a7:2b:e8:8d:5b:
0c:9c:6a:42:05:8c:99:b8:81:10:e0:86:2c:d4:3d:
0c:ca:13:4b:01:93:b5:66:58:2a:c9:68:40:38:91:
f8:e9:cc:2b:59:68:49:fa:1f:ee:86:5e:fa:50:58:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:3D:89:FA:72:06:E2:8C:46:46:44:1F:8D:4B:31:9F:D0:93:56
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nro9ifpyBuKMRkZEH41LMZ_Qk1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.20.0/24
86.107.52.0/24
89.42.9.0/24
89.47.255.0/24
92.114.39.0/24
92.114.52.0/24
188.215.70.0/23
188.240.202.0/23
188.241.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:7b:0b:e0:ad:6f:84:5d:66:bf:17:4c:90:d5:20:f1:8d:27:
00:c7:87:96:dd:54:de:fe:1b:63:7c:0a:03:b9:2e:86:25:88:
2f:18:96:80:2e:51:5f:91:32:f2:a0:ce:f9:ca:f6:fc:32:a1:
c0:3b:60:17:fe:f2:22:2e:c6:9c:17:ac:9a:03:36:4e:fd:6c:
16:d2:bf:26:fd:b4:01:fb:12:c0:d4:ed:08:4c:5b:14:44:0e:
9a:ca:7e:d6:b1:9b:3d:26:ff:43:f5:98:34:76:a0:47:88:31:
fb:2e:36:a2:ce:8c:ae:d3:55:d8:70:7f:0e:84:ef:66:1a:48:
0b:10:83:e9:84:77:51:ce:05:b7:6d:4c:c0:48:57:ee:3d:9b:
cc:48:14:0b:d5:78:0e:72:85:b2:55:d8:33:96:75:11:28:6f:
02:20:51:10:af:6f:18:3f:9e:14:1c:9f:98:9e:3d:34:e2:8d:
41:7f:76:27:cd:2c:72:c1:d2:f1:43:dd:8b:20:d1:81:33:76:
0d:db:53:13:55:b8:d9:83:9d:03:30:b5:16:e4:02:85:11:58:
74:54:a4:87:33:a2:90:16:17:e8:28:cb:0c:a8:df:25:04:6d:
25:13:33:2e:ce:cf:13:da:6d:e3:ec:59:0a:35:03:6d:dc:a7:
5c:a5:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:40 2024 by rpki-client on console.sobornost.net