Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/klt4uV7nfrquBIDcORbEeeMeegA.roa
File: klt4uV7nfrquBIDcORbEeeMeegA.roa (raw, json)
Hash identifier: PpIF/qGOarP8s4bvRuUvdO5rn3/ueiK8xOVQ3hxwEtc=
Subject key identifier: 92:5B:78:B9:5E:E7:7E:BA:AE:04:80:DC:39:16:C4:79:E3:1E:7A:00
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0193ABB407021E1DFD963CA72A8CAC59A5AC
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/klt4uV7nfrquBIDcORbEeeMeegA.roa
Signing time: Mon 09 Dec 2024 13:55:22 +0000
ROA not before: Mon 09 Dec 2024 13:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201035
IP address blocks: 46.253.240.0/20 maxlen: 24
46.253.240.0/23 maxlen: 23
46.253.240.0/24 maxlen: 24
46.253.241.0/24 maxlen: 24
46.253.244.0/22 maxlen: 22
46.253.244.0/23 maxlen: 23
46.253.244.0/24 maxlen: 24
46.253.245.0/24 maxlen: 24
46.253.246.0/23 maxlen: 23
46.253.246.0/24 maxlen: 24
46.253.247.0/24 maxlen: 24
46.253.248.0/23 maxlen: 23
46.253.248.0/24 maxlen: 24
46.253.249.0/24 maxlen: 24
46.253.254.0/23 maxlen: 23
46.253.254.0/24 maxlen: 24
46.253.255.0/24 maxlen: 24
185.209.104.0/22 maxlen: 22
185.209.104.0/23 maxlen: 23
185.209.104.0/24 maxlen: 24
185.209.105.0/24 maxlen: 24
185.209.106.0/23 maxlen: 23
185.209.106.0/24 maxlen: 24
185.209.107.0/24 maxlen: 24
2a04:1c40::/29 maxlen: 48
2a04:1c40::/30 maxlen: 30
2a04:1c40::/31 maxlen: 31
2a04:1c40::/32 maxlen: 32
2a04:1c40::/33 maxlen: 33
2a04:1c40:c000::/34 maxlen: 34
2a04:1c41::/33 maxlen: 33
2a04:1c42::/32 maxlen: 32
2a04:1c42::/34 maxlen: 34
2a04:1c42::/40 maxlen: 40
2a04:1c42:4000::/34 maxlen: 34
2a04:1c42:c000::/34 maxlen: 34
2a04:1c44::/32 maxlen: 34
2a04:1c47:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:b4:07:02:1e:1d:fd:96:3c:a7:2a:8c:ac:59:a5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Dec 9 13:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925b78b95ee77ebaae0480dc3916c479e31e7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:b7:7f:23:18:ae:58:aa:74:88:f9:bf:ae:
b0:16:94:be:31:3e:21:4c:63:ca:2a:37:cf:01:33:
82:06:01:51:b3:e2:8c:3b:92:a5:a4:80:a8:5e:02:
1d:c3:cd:a4:74:4e:91:02:a8:b2:df:70:4a:8f:15:
aa:2b:36:6c:86:e3:c2:5c:b0:92:29:10:3a:49:e4:
74:80:b7:d9:a2:eb:5d:be:5f:24:36:14:b8:f9:19:
ef:40:4e:d7:ac:f4:d6:1a:2f:50:82:27:d2:f4:54:
f1:57:d5:c8:c5:5c:63:14:7a:2f:3b:65:56:29:bc:
0b:53:82:a5:ff:8e:1c:4c:30:63:3e:03:3a:12:40:
2e:65:f4:61:f1:bc:90:60:c9:72:04:0b:dd:df:31:
cf:83:6b:6e:2e:30:10:79:36:81:e1:b8:16:34:84:
54:28:d4:6c:bc:91:79:6a:2a:6f:da:74:d6:81:11:
29:81:b7:2e:14:a0:52:a8:78:74:73:82:79:ad:f5:
a4:59:c2:cd:b6:7a:73:e9:e9:d9:da:cc:83:d5:8a:
ca:70:88:d9:28:db:7b:55:e8:a2:f3:85:dc:2d:a6:
bb:7d:0a:13:1a:90:40:14:66:cc:12:5a:bc:d4:d5:
08:9a:78:9f:02:ec:a8:71:ff:44:48:9b:bd:98:d7:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:78:B9:5E:E7:7E:BA:AE:04:80:DC:39:16:C4:79:E3:1E:7A:00
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/klt4uV7nfrquBIDcORbEeeMeegA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.240.0/20
185.209.104.0/22
IPv6:
2a04:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
36:47:2b:6f:d7:cf:d7:d3:23:bc:80:72:fd:9e:08:83:7f:6d:
8a:ee:02:eb:f6:11:db:37:1e:55:4a:6e:27:95:b6:51:a0:e9:
b2:b3:cc:be:41:bc:da:92:b5:02:48:35:c5:03:01:18:4f:84:
27:90:57:c7:cc:46:95:bb:7b:95:c8:f0:50:85:84:93:3c:8b:
f5:9d:3d:7e:6c:0f:1f:41:5a:13:98:71:a2:ca:e9:0f:f9:52:
2e:73:dc:2a:12:d5:61:51:18:9c:37:69:d9:4a:94:53:fe:69:
32:27:0c:a1:34:9f:18:7c:f8:47:d4:6b:94:00:75:3f:8e:7a:
19:9f:3f:0b:0a:81:0e:a9:66:a6:71:99:20:6c:fb:00:32:d2:
8f:91:6f:f8:2f:d3:0e:48:b9:dd:7f:a7:12:0b:3b:a8:3f:93:
1e:aa:43:1e:c0:1a:70:a9:a2:7f:01:56:37:17:9e:76:1a:ee:
2f:8b:23:e0:3f:2e:01:66:49:03:1b:e4:54:5b:20:2c:e8:4b:
e0:bc:8a:95:27:f5:32:58:ec:8e:ec:eb:e2:fe:38:38:7b:ea:
69:88:8c:7f:88:4e:d4:a0:7a:aa:22:ac:2f:7f:e2:84:30:a0:
36:93:11:8c:8f:90:4b:16:03:3a:50:b1:0c:23:10:e5:20:c8:
23:1b:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:50 2024 by rpki-client on console.sobornost.net