Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/OI2sCM2uKXpWXhraVhV2LFH1s-Q.roa
File: OI2sCM2uKXpWXhraVhV2LFH1s-Q.roa (raw, json)
Hash identifier: lg9Rfix5YMJ6nSk//IqHo5CCKs/rkHfW7hwO9r4c5xo=
Subject key identifier: 38:8D:AC:08:CD:AE:29:7A:56:5E:1A:DA:56:15:76:2C:51:F5:B3:E4
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 018CC72654DA8FDDA9A9D31293A573C66CEF
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/OI2sCM2uKXpWXhraVhV2LFH1s-Q.roa
Signing time: Mon 01 Jan 2024 22:30:27 +0000
ROA not before: Mon 01 Jan 2024 22:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48294
IP address blocks: 185.124.0.0/22 maxlen: 22
185.70.32.0/22 maxlen: 22
91.132.128.0/22 maxlen: 22
185.126.160.0/22 maxlen: 22
85.9.192.0/18 maxlen: 24
45.86.222.0/23 maxlen: 23
45.91.36.0/22 maxlen: 22
84.252.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:54:da:8f:dd:a9:a9:d3:12:93:a5:73:c6:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Jan 1 22:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388dac08cdae297a565e1ada5615762c51f5b3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:2e:e7:4f:ba:e6:ec:59:e1:99:44:7b:56:
61:ba:c8:d9:dc:cd:57:64:a4:4f:1b:f1:d2:41:2c:
0f:19:0c:b3:f5:1e:07:10:aa:29:e2:a9:dd:92:42:
5b:b2:03:36:a3:c6:a6:b1:54:d5:f5:69:2e:7b:95:
1c:04:92:c7:4a:1b:c8:06:ef:5e:50:1e:c4:44:a6:
33:1c:a5:ce:c5:32:f5:ce:e5:14:8d:96:53:b8:2a:
67:25:6a:58:03:b3:0f:55:1a:92:29:d8:b9:21:b9:
9f:bf:29:d3:62:dc:99:6a:de:9a:ad:84:49:e8:45:
3a:85:86:c6:b8:74:bd:66:0a:c1:11:12:52:82:71:
94:eb:24:9d:be:7a:3a:17:b8:bb:a1:37:6e:34:ec:
d0:7f:54:e2:12:19:27:6a:79:6d:28:c9:b1:7a:d9:
ee:9b:fc:21:1b:5b:33:bc:48:98:56:d3:57:2c:68:
77:06:f1:a5:49:21:7b:6c:b9:62:3a:3d:ab:37:bc:
f1:f6:08:87:70:1b:d9:ce:1c:0c:5f:e0:57:82:51:
37:7d:2b:2d:06:6f:a7:ef:ba:16:27:99:24:20:1d:
9d:d2:f3:eb:ed:a8:b3:b8:ed:eb:8e:a3:88:8d:1e:
92:1d:05:ea:28:68:78:c9:aa:a8:bb:e1:c3:5d:36:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:AC:08:CD:AE:29:7A:56:5E:1A:DA:56:15:76:2C:51:F5:B3:E4
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/OI2sCM2uKXpWXhraVhV2LFH1s-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.222.0/23
45.91.36.0/22
84.252.104.0/24
85.9.192.0/18
91.132.128.0/22
185.70.32.0/22
185.124.0.0/22
185.126.160.0/22
Signature Algorithm: sha256WithRSAEncryption
15:03:2f:52:89:02:cd:3f:c0:52:b5:b4:95:4d:94:68:ba:67:
cb:c4:cd:d0:9c:71:47:98:cf:fb:58:cc:82:5e:70:05:72:8d:
41:f9:16:ab:5f:a9:0b:e5:79:46:59:d0:66:a3:2e:c7:06:68:
58:0f:94:57:92:55:3f:80:88:d8:c7:56:1f:f0:52:f2:ef:2f:
81:ec:65:6b:e8:18:68:3e:34:4b:7d:be:bf:bc:ee:6a:ca:dd:
60:f0:c5:0f:1e:7c:43:f5:c9:ca:5f:66:fd:15:e5:63:7b:c2:
f6:82:26:4b:63:bf:94:f8:5c:0a:19:83:31:d4:b2:65:c8:2c:
95:88:f2:3b:68:0c:c7:b1:c9:ce:89:8c:36:76:28:9f:92:05:
a7:5e:ae:00:b8:35:81:7e:aa:26:10:aa:db:3d:a7:5b:27:39:
20:c6:cf:f9:98:d5:f2:ef:10:72:78:0d:99:6b:f7:69:54:9a:
4d:fd:a8:ac:79:a0:af:52:de:99:0f:51:10:77:e3:ee:66:49:
8f:b7:ed:83:47:82:f1:0f:a5:b6:05:d5:f0:53:5f:e6:32:8c:
ed:e7:bb:22:ad:0b:ff:d9:db:a4:f0:25:d4:d3:df:79:bd:ef:
50:74:c0:0a:09:2d:26:0d:dc:c8:5e:fe:c7:8e:1a:67:91:02:
10:db:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net