Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/K8fs1xy91RnAa1_T90xbIAjQoW8.roa
File: K8fs1xy91RnAa1_T90xbIAjQoW8.roa (raw, json)
Hash identifier: Gs4bpiOVTWmJYHWzLTg65IkD3rZqhCeSkltVMTIv0T4=
Subject key identifier: 2B:C7:EC:D7:1C:BD:D5:19:C0:6B:5F:D3:F7:4C:5B:20:08:D0:A1:6F
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 018CC348CC631E04A65498BC2049AA01F33A
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/K8fs1xy91RnAa1_T90xbIAjQoW8.roa
Signing time: Mon 01 Jan 2024 04:29:37 +0000
ROA not before: Mon 01 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49088
IP address blocks: 45.90.92.0/22 maxlen: 22
185.216.184.0/22 maxlen: 22
185.144.72.0/22 maxlen: 22
195.39.250.0/23 maxlen: 23
195.39.252.0/23 maxlen: 23
91.212.160.0/23 maxlen: 23
185.214.200.0/22 maxlen: 22
91.212.72.0/23 maxlen: 23
45.86.108.0/22 maxlen: 22
45.135.68.0/22 maxlen: 22
2a07:3d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cc:63:1e:04:a6:54:98:bc:20:49:aa:01:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bc7ecd71cbdd519c06b5fd3f74c5b2008d0a16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:a6:14:04:4a:0d:2d:88:27:ad:bc:a2:12:
8b:cd:46:b0:b9:b8:ba:33:a0:fa:3c:c6:8b:81:c2:
49:c5:c7:ba:37:5d:59:46:8f:19:d8:7b:20:19:21:
f4:3d:9c:27:65:c3:a3:25:fc:68:ce:4c:62:62:c9:
d8:97:26:b4:61:f2:a7:4e:6b:dc:fb:6f:36:8f:01:
f0:04:4b:45:29:86:eb:7d:1f:7e:81:2f:22:22:2d:
4d:4c:c9:cf:5f:15:24:44:01:00:74:8e:df:b3:92:
9a:69:2a:98:1f:ab:08:57:f9:45:0d:f8:dd:da:68:
fb:6e:ec:57:f0:ab:4b:22:c4:d5:8c:93:f8:48:ff:
41:ce:28:06:55:ca:e7:2a:d4:61:12:9f:52:25:0a:
4a:ec:b2:7e:6c:67:c6:63:27:13:e8:2d:8e:d6:85:
b3:49:42:64:10:3f:15:e7:99:64:32:d7:eb:69:e4:
52:4c:2c:85:dc:04:c2:95:33:02:55:86:4c:19:2a:
0f:ac:af:5c:e2:2c:a9:9b:0b:7f:2a:76:38:74:bb:
37:85:5b:b5:39:7c:39:7b:19:6b:5b:ef:04:72:b4:
c8:39:56:4c:e7:0f:fd:35:c5:57:bd:64:38:71:63:
a1:59:a9:f5:68:28:5c:fe:f3:04:ef:42:af:b2:68:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:EC:D7:1C:BD:D5:19:C0:6B:5F:D3:F7:4C:5B:20:08:D0:A1:6F
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/K8fs1xy91RnAa1_T90xbIAjQoW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.108.0/22
45.90.92.0/22
45.135.68.0/22
91.212.72.0/23
91.212.160.0/23
185.144.72.0/22
185.214.200.0/22
185.216.184.0/22
195.39.250.0-195.39.253.255
IPv6:
2a07:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
89:19:6e:2b:c7:01:72:34:3a:f4:6a:af:60:fb:93:ed:9e:82:
e2:4e:b2:5d:b3:52:97:4a:26:07:9c:b3:86:b2:ea:e1:26:cc:
79:ac:f1:7f:1a:c7:5a:e4:c6:f3:4d:c2:78:d4:75:53:dc:e3:
de:9c:e6:e6:fb:38:ae:83:f6:95:8d:b3:c3:ef:e0:17:28:6a:
87:d5:50:e5:2e:4d:0e:3e:da:80:89:d5:26:f8:f0:ff:f8:14:
3c:0d:68:51:3c:fb:c5:73:e4:10:b0:d7:39:79:de:18:2e:2d:
c5:15:39:7a:05:96:b5:69:87:69:c1:fd:71:9f:bb:20:62:d8:
27:91:53:ce:4c:71:6e:83:bb:47:d6:89:6f:0c:43:77:f7:53:
c0:c5:a2:b7:c3:6b:eb:7f:7e:19:ac:af:3e:35:46:03:38:0a:
56:34:58:ee:d9:93:1f:3a:fb:e4:f5:45:f0:d4:65:84:a2:46:
88:7e:35:a0:6c:db:26:25:4e:96:52:0f:02:e2:1a:f3:5f:46:
77:b3:a7:b7:9a:04:fb:67:45:a8:1a:28:7d:46:3f:39:de:6e:
a4:e6:d7:51:a6:dc:14:38:38:4c:50:27:3e:7c:56:26:4b:3c:
78:3e:be:36:ca:84:c4:cc:24:21:b5:a5:df:b8:b8:76:4b:14:
6a:89:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:10:27 2024 by rpki-client on console.sobornost.net