Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/GBNa2Inv4SdmzyQrDINQryYdw8c.roa
File: GBNa2Inv4SdmzyQrDINQryYdw8c.roa (raw, json)
Hash identifier: WMjb1i55yPOT+GIrCgd8f4EuYSmiooCLtRStK9SjT/w=
Subject key identifier: 18:13:5A:D8:89:EF:E1:27:66:CF:24:2B:0C:83:50:AF:26:1D:C3:C7
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019386DCFE56B0AC5AA2A49B66B673B1428B
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/GBNa2Inv4SdmzyQrDINQryYdw8c.roa
Signing time: Mon 02 Dec 2024 10:14:10 +0000
ROA not before: Mon 02 Dec 2024 10:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 185.140.64.0/22 maxlen: 22
213.194.128.0/20 maxlen: 20
213.194.144.0/21 maxlen: 21
213.194.152.0/21 maxlen: 21
213.194.160.0/20 maxlen: 20
213.194.176.0/22 maxlen: 22
213.194.180.0/22 maxlen: 22
213.194.184.0/21 maxlen: 21
213.195.64.0/19 maxlen: 19
213.195.78.0/24 maxlen: 24
213.195.80.0/21 maxlen: 21
213.195.88.0/21 maxlen: 21
213.195.96.0/20 maxlen: 20
213.195.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:dc:fe:56:b0:ac:5a:a2:a4:9b:66:b6:73:b1:42:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Dec 2 10:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18135ad889efe12766cf242b0c8350af261dc3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:84:5d:d7:39:8e:f1:d3:8c:ab:26:1b:91:
ad:48:f0:c5:b8:28:be:f4:d1:fc:24:0f:35:40:7b:
e4:82:84:9f:24:d4:6a:f7:44:14:63:fb:6f:00:a9:
67:0f:5a:ff:8b:0e:58:3d:27:28:2a:56:ef:0c:ff:
fb:28:97:76:ca:90:ca:60:d1:d5:03:6c:94:4d:ef:
a7:f8:40:1e:79:37:54:90:c8:19:bc:74:8c:f7:ba:
f3:8f:81:95:59:3d:c0:5f:8e:f6:01:02:13:38:77:
8f:48:95:b4:dc:6e:79:e6:c7:05:12:99:5a:59:9a:
ff:5c:b8:df:bb:e0:2c:e2:e2:de:59:89:02:e7:f7:
fc:72:1b:a4:e8:70:92:c1:03:aa:3a:c7:8d:cc:89:
ec:17:b6:b2:e2:bd:cd:4a:51:1d:01:24:83:1e:a1:
14:7f:d4:13:4b:e2:0e:cc:64:0a:99:f6:00:bd:e1:
99:25:d2:6a:ac:c4:fd:bf:a9:58:73:9d:7f:22:ed:
df:10:85:92:cc:b2:a8:9b:63:ed:f0:c6:cd:ad:75:
55:27:2d:a8:24:26:8a:20:cd:e6:a5:4b:a3:47:7e:
f3:73:3b:36:4e:04:58:56:bd:85:6d:ee:62:f5:b1:
1b:36:fb:35:3e:c7:43:31:f4:00:85:c6:ea:6e:ac:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:5A:D8:89:EF:E1:27:66:CF:24:2B:0C:83:50:AF:26:1D:C3:C7
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/GBNa2Inv4SdmzyQrDINQryYdw8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.64.0/22
213.194.128.0/18
213.195.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:b9:3d:1f:ba:14:36:71:aa:b1:29:f7:09:92:84:84:eb:00:
d3:9c:24:a3:b3:38:f4:a6:10:5f:e1:76:89:f6:06:6c:6e:27:
b5:4b:e9:33:53:bf:c7:09:1e:c3:47:4d:d6:84:9d:cf:35:52:
ca:fe:65:7f:14:6c:8c:2e:66:8a:06:c3:44:1d:b3:f6:26:40:
d6:17:0f:73:31:00:64:e3:85:75:f7:d9:fc:a2:58:75:97:95:
d0:c0:f4:1a:4e:df:4d:67:6d:8a:94:31:a7:f4:b5:d6:0c:64:
33:29:63:87:c1:06:50:0d:c6:6a:6c:e0:80:23:6f:71:21:6e:
b3:65:78:99:77:a3:f0:3f:8f:e3:6f:09:30:75:01:1a:74:7f:
ab:79:f4:9c:8b:80:22:e8:f8:f8:9a:1b:83:7e:9f:18:3d:36:
f3:1b:24:ed:50:7e:b3:ce:25:7c:be:60:82:57:86:30:77:52:
59:36:5b:39:c4:4e:59:f9:de:76:08:22:7d:d7:b3:2c:f0:ca:
df:82:ae:37:57:08:84:81:8c:f3:30:0f:3d:db:a9:1c:75:ad:
5e:2c:ae:28:27:35:32:20:aa:fd:73:9d:04:40:21:19:99:48:
c6:ce:e8:68:8c:12:c6:f9:ac:18:88:f9:b3:04:ac:64:9c:d6:
cb:f6:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net