Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/ee4SXLp6NgOW26SMPDvGSGmAvIg.roa
File: ee4SXLp6NgOW26SMPDvGSGmAvIg.roa (raw, json)
Hash identifier: b05zXDDHC30/UgXyiGEmqCnnI/qBaBMirCSTx1sQLuk=
Subject key identifier: 79:EE:12:5C:BA:7A:36:03:96:DB:A4:8C:3C:3B:C6:48:69:80:BC:88
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019367B4EA7BCE6F78FB4E970993C6BB08FA
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/ee4SXLp6NgOW26SMPDvGSGmAvIg.roa
Signing time: Tue 26 Nov 2024 09:02:09 +0000
ROA not before: Tue 26 Nov 2024 09:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51013
IP address blocks: 37.9.168.0/21 maxlen: 24
45.13.137.0/24 maxlen: 24
45.81.41.0/24 maxlen: 24
45.138.184.0/24 maxlen: 24
45.138.185.0/24 maxlen: 24
185.87.12.0/22 maxlen: 24
195.210.28.0/23 maxlen: 24
2a00:4b40::/32 maxlen: 64
2a0e:bb40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:b4:ea:7b:ce:6f:78:fb:4e:97:09:93:c6:bb:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Nov 26 09:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79ee125cba7a360396dba48c3c3bc6486980bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:0c:5e:6e:c3:f2:db:ee:83:9b:e3:10:3d:
6d:f1:5b:40:57:e2:a6:b5:13:ca:b3:0c:fb:c9:7e:
b6:20:df:89:9a:74:81:c4:f3:8d:91:48:14:aa:4c:
81:68:65:6f:6e:67:c8:de:dd:cf:e5:f6:ec:3c:fc:
34:f9:6b:1c:10:cb:88:9d:ca:7a:44:58:5d:d7:8f:
9d:25:6e:ac:50:3b:9f:da:a8:e8:6f:71:3f:d1:d5:
5b:46:18:55:c1:b7:3e:4c:52:b6:f3:43:40:b5:2f:
de:12:4e:29:dd:03:88:54:f6:0b:03:6d:1f:16:89:
9c:e6:57:9d:ce:8c:a1:3b:88:59:d1:93:f2:c7:f6:
b8:61:73:8c:98:cd:6d:d5:bd:32:c0:05:2b:6b:c2:
fa:84:8c:32:2d:42:15:0f:4d:fb:32:f5:c9:a2:71:
0d:6e:db:df:64:71:a9:05:bb:d1:41:0b:44:d9:d1:
40:d5:54:0c:25:ed:5f:8d:71:92:a5:4e:47:92:af:
f7:8f:20:a8:d2:2b:8e:82:34:71:9f:d0:b6:d8:2a:
a1:b7:5e:03:5f:22:40:d3:8e:39:7a:ef:ab:b1:0b:
9a:78:f5:63:b9:a2:84:59:0a:75:8c:b8:b5:17:5f:
89:26:77:a2:30:a1:5b:32:b5:91:8f:17:7a:43:37:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EE:12:5C:BA:7A:36:03:96:DB:A4:8C:3C:3B:C6:48:69:80:BC:88
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/ee4SXLp6NgOW26SMPDvGSGmAvIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.168.0/21
45.13.137.0/24
45.81.41.0/24
45.138.184.0/23
185.87.12.0/22
195.210.28.0/23
IPv6:
2a00:4b40::/32
2a0e:bb40::/48
Signature Algorithm: sha256WithRSAEncryption
3a:6d:4d:61:ee:ea:e7:77:c3:b3:15:29:8e:f3:ac:c4:55:cb:
c2:ca:42:b6:91:c2:1d:20:85:40:80:f3:fb:0f:78:23:85:f3:
79:8b:be:6f:42:39:fe:47:64:a2:85:11:e0:53:ab:44:63:66:
c9:f0:ae:75:19:cf:ca:24:7e:f2:1c:0c:df:d4:00:dc:69:f5:
77:39:cb:3c:5d:9d:02:16:df:0e:3b:4e:28:90:00:6a:00:ef:
61:95:39:4f:a9:7e:e2:9f:3a:62:96:89:ba:e0:8d:5c:28:fd:
ae:fc:53:49:07:ed:d7:35:38:88:43:89:7a:37:a3:fb:f6:7e:
a0:b3:1c:de:2e:48:47:36:c6:c8:3e:cd:ef:75:c9:c7:8c:24:
01:9b:5d:1f:84:bc:16:af:94:c7:7a:93:d0:7e:bf:23:e7:9b:
e6:c7:09:f8:0f:15:64:7d:53:8b:8e:cf:92:a4:30:17:b5:54:
7f:ab:27:42:9d:7c:eb:d7:93:f4:c5:a0:f2:ab:9f:29:4b:9c:
64:d9:7b:f9:53:64:27:c1:44:35:71:18:a5:a0:1f:2f:76:e5:
96:30:c3:84:c7:d8:d4:b9:a7:da:70:f5:cc:b6:2f:25:b8:a6:
44:b8:a4:c5:3a:ae:cd:aa:a4:f2:6a:83:a2:bd:47:36:ec:e1:
c7:6e:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net