Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/rFgCnZQTb7L0sGNZFIIwLs1F504.roa
File: rFgCnZQTb7L0sGNZFIIwLs1F504.roa (raw, json)
Hash identifier: cYsXCETTwv4V+fH2eXZ8XqYUIck5WZT0UKwFGgLHhHI=
Subject key identifier: AC:58:02:9D:94:13:6F:B2:F4:B0:63:59:14:82:30:2E:CD:45:E7:4E
Certificate issuer: /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial: 01927B267983CEFC69331C5E166FAE404FB7
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/rFgCnZQTb7L0sGNZFIIwLs1F504.roa
Signing time: Fri 11 Oct 2024 10:36:11 +0000
ROA not before: Fri 11 Oct 2024 10:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4255
IP address blocks: 151.88.22.0/24 maxlen: 24
151.88.40.0/24 maxlen: 24
151.88.41.0/24 maxlen: 24
151.88.109.0/24 maxlen: 24
151.88.176.0/24 maxlen: 24
151.92.2.0/24 maxlen: 24
151.92.12.0/24 maxlen: 24
151.92.83.0/24 maxlen: 24
151.92.154.0/24 maxlen: 24
151.92.155.0/24 maxlen: 24
151.92.158.0/24 maxlen: 24
151.92.166.0/24 maxlen: 24
151.92.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:26:79:83:ce:fc:69:33:1c:5e:16:6f:ae:40:4f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Validity
Not Before: Oct 11 10:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac58029d94136fb2f4b063591482302ecd45e74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:27:a2:53:74:93:19:64:47:3c:ff:ca:9c:
cd:6c:2a:a0:0a:9f:7e:fe:60:f4:90:a2:f5:5c:0c:
55:74:23:8b:2c:5d:be:5d:2a:e5:d2:f9:0c:71:93:
f5:53:55:79:92:18:54:16:ce:c0:fb:f1:a0:54:03:
2b:36:d1:c0:1b:f8:61:3e:ec:37:00:1f:e0:e4:f6:
1a:bf:35:14:5b:49:26:c8:1a:32:e3:0f:cd:fd:9d:
51:8d:75:63:4a:66:31:99:b1:b8:87:05:21:7e:eb:
52:4f:22:74:22:b3:e7:fc:81:04:e6:50:de:30:10:
0a:92:51:ad:cd:5a:c8:89:57:f6:88:5b:8a:88:9a:
b4:ac:7d:ef:3f:fc:17:02:81:45:2e:5c:93:16:ec:
13:64:be:05:d7:41:0a:94:dd:2b:08:25:26:34:4c:
53:95:4b:0b:de:ff:48:5a:ae:f9:91:3d:e9:c9:0d:
f3:aa:74:ba:85:f1:9c:3c:53:17:f0:c8:83:5d:d1:
3f:39:b6:89:19:aa:3a:c8:99:bb:11:59:2d:16:6c:
a7:33:9b:85:eb:1d:78:80:3f:07:39:c7:3d:bd:44:
5a:f4:07:9a:5d:ff:53:78:40:ec:a8:d8:09:4f:dc:
9d:5d:fb:72:50:2f:6f:1d:5b:32:47:03:53:cb:4a:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:02:9D:94:13:6F:B2:F4:B0:63:59:14:82:30:2E:CD:45:E7:4E
X509v3 Authority Key Identifier:
keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/rFgCnZQTb7L0sGNZFIIwLs1F504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.22.0/24
151.88.40.0/23
151.88.109.0/24
151.88.176.0/24
151.92.2.0/24
151.92.12.0/24
151.92.83.0/24
151.92.154.0/23
151.92.158.0/24
151.92.166.0/24
151.92.198.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c0:7d:38:45:1d:0b:c3:10:93:50:8f:bd:b6:3d:01:7d:5b:
e9:3d:9c:e0:51:0b:78:a2:68:69:d5:4e:c8:38:79:b5:6a:26:
74:1e:47:3c:df:81:df:f9:86:5e:2e:40:e5:d0:65:eb:30:09:
64:10:01:72:52:04:c7:39:72:1e:25:1a:f1:1e:3e:2b:20:40:
43:49:27:49:33:24:8d:6e:58:5f:7d:0d:35:63:82:7a:cf:46:
a4:90:16:50:a0:8e:5e:fb:b9:7a:62:61:27:1d:29:15:33:22:
75:8a:49:9d:ea:66:b4:eb:70:c4:1d:7c:cc:0d:fd:02:a8:76:
b2:fb:d8:3f:04:56:2f:14:00:45:ce:ab:15:9f:e6:33:64:03:
06:9f:29:59:d4:f9:f3:b1:05:f2:66:9f:6b:fd:db:2b:1b:87:
50:10:d1:b7:75:88:0a:e0:93:80:5f:1b:58:c9:6f:62:a4:e0:
b9:41:b3:d6:09:39:98:2d:1a:94:4b:ab:50:ef:cc:56:1d:f0:
4a:00:88:4f:f0:0c:27:e9:89:e8:25:31:52:34:a9:20:3a:46:
06:67:ce:81:72:b5:bb:8a:de:89:ff:2d:44:9d:fc:b7:24:4c:
11:ff:77:d4:e3:68:c8:7c:3c:f7:c0:0a:83:66:2b:d5:31:03:
b6:ba:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net