Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/JFDyrffMwZjTIAyM3SL20ucpukU.roa
File: JFDyrffMwZjTIAyM3SL20ucpukU.roa (raw, json)
Hash identifier: u1F5TkYp7n3kAKajfLnteEEk7lVnlMNHHqSN0cNx5P4=
Subject key identifier: 24:50:F2:AD:F7:CC:C1:98:D3:20:0C:8C:DD:22:F6:D2:E7:29:BA:45
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F04B2F1FC3BED16EC943AF44DDC58
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/JFDyrffMwZjTIAyM3SL20ucpukU.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197184
IP address blocks: 89.252.222.0/24 maxlen: 24
85.14.55.0/24 maxlen: 24
85.14.54.0/24 maxlen: 24
85.14.54.0/23 maxlen: 23
85.14.53.0/24 maxlen: 24
85.14.52.0/23 maxlen: 23
85.14.52.0/24 maxlen: 24
85.14.52.0/22 maxlen: 22
85.14.8.0/22 maxlen: 22
82.119.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:04:b2:f1:fc:3b:ed:16:ec:94:3a:f4:4d:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2450f2adf7ccc198d3200c8cdd22f6d2e729ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c3:21:9a:9b:fa:8c:ff:ed:d7:5a:a7:e6:e6:
3f:f9:80:04:62:3a:55:3b:87:be:19:18:74:dc:b5:
ef:74:ca:d8:e6:f8:6e:82:e1:7f:1c:78:67:54:b7:
b6:c5:21:38:95:eb:92:bf:35:89:5a:aa:af:eb:4f:
d6:a6:18:18:17:8d:43:45:c3:aa:1d:4b:19:71:8f:
09:97:f0:6e:3c:e4:52:9d:04:94:97:6e:52:01:12:
4c:f1:e8:52:1f:d3:0e:6c:09:6b:74:3d:34:37:4e:
57:4f:75:b1:38:59:f6:8f:55:a5:7b:17:22:c0:3c:
ad:71:b8:6d:60:f8:45:98:29:12:4a:a3:22:32:42:
b6:88:45:a9:6f:08:ec:97:c4:cb:97:c5:85:fc:ac:
b1:ff:8b:69:3d:8e:56:b3:47:21:6a:76:5f:21:11:
a0:6d:d5:15:32:b9:5a:e1:51:96:26:a6:b1:58:1d:
00:6e:e0:c4:3b:df:0f:92:b7:db:5b:ec:c2:b3:fc:
62:88:a7:d9:53:87:e8:13:92:74:ec:0d:f1:83:1a:
aa:32:2d:fc:5d:7f:ae:8c:17:0e:da:e0:26:e7:e2:
61:5f:15:f9:e3:3e:fc:3b:f1:72:70:58:75:86:29:
27:c3:a1:ce:0e:c1:ad:99:96:0b:e1:ff:af:43:44:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:F2:AD:F7:CC:C1:98:D3:20:0C:8C:DD:22:F6:D2:E7:29:BA:45
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/JFDyrffMwZjTIAyM3SL20ucpukU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.88.0/23
85.14.8.0/22
85.14.52.0/22
89.252.222.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:6d:b2:95:9a:84:bf:0f:b3:f8:50:99:a7:9a:89:bb:79:aa:
db:1c:16:1b:6c:a3:ca:35:b1:b0:fa:ac:65:da:f7:8e:fd:aa:
84:ab:b9:74:51:6b:c8:c8:66:38:b8:86:5a:83:ec:45:97:d4:
aa:25:ec:54:a9:ff:b1:9c:c8:f3:80:03:c6:40:fb:cd:2c:3a:
cd:3e:02:58:68:4b:0b:e2:d7:f1:89:98:36:5e:a4:f3:cc:d8:
cf:27:5b:2b:25:c0:5f:07:c1:76:2b:86:e5:c0:b9:3a:a8:83:
59:9d:b8:66:be:32:a1:c9:87:6f:8f:97:3d:fc:2f:ce:00:e0:
b3:bf:c2:72:08:7e:d9:60:36:1d:0b:d0:d0:62:f2:34:4f:df:
a4:0d:7f:18:34:ec:63:f0:0c:5d:da:58:9b:56:f7:c3:f6:1a:
bb:a5:5f:9e:2f:33:e8:64:4a:8e:d2:a0:37:20:9a:5b:8f:11:
92:c8:ea:38:50:ac:ee:07:d8:44:90:f2:64:e1:96:a0:e8:5e:
c9:ec:64:c1:aa:a8:ed:da:6e:50:b3:63:7a:63:37:85:72:56:
fd:3e:33:dd:2d:ca:de:4f:a9:07:9c:2e:22:1a:7b:39:78:4b:
68:30:92:9c:5b:5a:fc:51:bd:59:25:e0:73:b0:77:2a:0d:13:
29:2e:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:14:32 2024 by rpki-client on console.sobornost.net