Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/G4KFQqh21Gc8jno83nyKdGXn8wA.roa
File: G4KFQqh21Gc8jno83nyKdGXn8wA.roa (raw, json)
Hash identifier: bFJfVwOIxidAtJ7YpoRK39c55XVbxsOUEVE/5YJowMk=
Subject key identifier: 1B:82:85:42:A8:76:D4:67:3C:8E:7A:3C:DE:7C:8A:74:65:E7:F3:00
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01937345BB14CAB95FE2050E6922A57E9559
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/G4KFQqh21Gc8jno83nyKdGXn8wA.roa
Signing time: Thu 28 Nov 2024 14:56:09 +0000
ROA not before: Thu 28 Nov 2024 14:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60256
IP address blocks: 5.145.112.0/23 maxlen: 23
5.145.113.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.119.0/24 maxlen: 24
2a04:2f00:1::/48 maxlen: 48
2a04:2f00:2::/48 maxlen: 48
2a04:2f01:1::/48 maxlen: 48
2a04:2f01:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:45:bb:14:ca:b9:5f:e2:05:0e:69:22:a5:7e:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Nov 28 14:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b828542a876d4673c8e7a3cde7c8a7465e7f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:1e:ed:1e:8b:fa:66:ca:56:de:08:db:d9:
c8:08:28:31:02:53:be:23:c7:b2:45:79:5b:58:74:
19:8c:7c:ac:a6:78:d4:76:b3:b9:c8:8c:d7:46:ca:
4c:82:9e:f3:88:5b:10:48:38:58:b6:cc:cd:18:70:
4f:2a:d7:b2:6a:2c:b8:8b:11:8a:c1:b7:41:d0:9b:
dc:cc:67:5d:d4:f3:76:98:12:e3:79:36:d6:db:e8:
86:1d:43:c7:9e:05:bb:e7:29:00:30:94:d7:67:51:
ba:b4:bb:71:9c:7c:13:6b:3b:9a:10:2d:ee:06:70:
5d:b5:8b:32:bf:bb:92:e8:cf:d0:e4:f2:24:29:5a:
0d:e9:48:d0:a6:21:7d:9c:0f:71:8b:e3:3e:b0:4f:
49:93:03:b6:30:59:2a:19:c3:71:74:d8:0b:c8:8e:
31:07:d8:6d:e4:4d:e3:f5:c9:cd:b7:81:d3:81:ef:
07:67:ac:1c:37:4a:e1:55:ed:3c:52:09:c5:08:6b:
1b:01:45:cd:0b:13:34:67:de:d9:8b:4d:dc:09:ef:
8f:39:28:94:08:74:f5:39:01:40:09:fc:b7:fb:0d:
48:36:63:cb:ff:c3:0b:a0:ad:1d:da:48:54:fd:2f:
4c:d1:cc:5b:64:c1:30:81:10:fa:98:92:fa:ee:5d:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:85:42:A8:76:D4:67:3C:8E:7A:3C:DE:7C:8A:74:65:E7:F3:00
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/G4KFQqh21Gc8jno83nyKdGXn8wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.112.0/23
5.145.118.0/23
IPv6:
2a04:2f00:1::-2a04:2f00:2:ffff:ffff:ffff:ffff:ffff
2a04:2f01:1::-2a04:2f01:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:68:0d:e1:f5:7e:ae:bf:6c:21:7a:b2:2f:ff:f3:d8:ad:f3:
08:31:90:c1:71:85:ed:5e:c2:10:f3:05:be:22:94:d7:aa:3d:
8c:70:3b:97:60:a7:98:ba:97:0a:bf:8d:f9:ea:40:ce:1e:2f:
de:91:cd:59:f4:ed:48:55:71:a6:84:9a:9b:29:2b:6e:3d:65:
64:6c:f4:d9:47:b9:68:5d:95:0b:cd:26:86:07:ee:8b:37:e2:
fe:d2:ad:1f:3a:84:18:7d:a8:17:28:b2:83:9c:de:11:8c:24:
77:7d:b1:1a:2d:c1:2c:62:4a:2c:f6:d7:5c:a8:d8:28:76:1e:
14:c0:76:32:ab:8c:43:52:d0:98:54:19:b0:df:b6:ba:2a:0b:
4e:fc:53:8a:dc:c3:38:95:01:27:5d:88:ac:9b:a0:7a:fd:fc:
ee:73:f5:8c:b6:ee:54:50:ed:84:8f:93:98:6d:06:f7:c5:e9:
7c:d2:92:f6:64:3c:af:b3:ea:74:89:7a:42:f3:c8:af:44:cf:
38:2e:d5:f3:f2:54:45:f0:ab:d9:d5:b8:33:63:c2:80:e3:09:
14:77:96:c6:5f:7d:72:4e:63:3b:5e:84:d5:41:7e:c1:8b:1b:
27:5c:a4:1d:0b:73:6d:97:14:3a:e0:09:b5:43:50:bc:3c:bf:
ee:b3:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net