Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/1MqyDgW19xkKAgtOBg2AqMhw1u4.roa
File: 1MqyDgW19xkKAgtOBg2AqMhw1u4.roa (raw, json)
Hash identifier: PH32vO47GW77/ClZ8zvENSvrxdI4RCrKxNkXk6g1Jnw=
Subject key identifier: D4:CA:B2:0E:05:B5:F7:19:0A:02:0B:4E:06:0D:80:A8:C8:70:D6:EE
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019396BB7A25D1B142E1D37B61961F56C1B4
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/1MqyDgW19xkKAgtOBg2AqMhw1u4.roa
Signing time: Thu 05 Dec 2024 12:11:29 +0000
ROA not before: Thu 05 Dec 2024 12:11:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 195.36.16.0/20 maxlen: 20
195.36.16.0/24 maxlen: 24
195.36.17.0/24 maxlen: 24
195.36.18.0/24 maxlen: 24
195.36.19.0/24 maxlen: 24
195.36.20.0/22 maxlen: 22
195.36.20.0/24 maxlen: 24
195.36.21.0/24 maxlen: 24
195.36.22.0/24 maxlen: 24
195.36.23.0/24 maxlen: 24
195.36.24.0/22 maxlen: 22
195.36.24.0/24 maxlen: 24
195.36.25.0/24 maxlen: 24
195.36.26.0/24 maxlen: 24
195.36.27.0/24 maxlen: 24
195.36.28.0/24 maxlen: 24
195.36.29.0/24 maxlen: 24
195.36.30.0/24 maxlen: 24
195.36.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:bb:7a:25:d1:b1:42:e1:d3:7b:61:96:1f:56:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Dec 5 12:11:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4cab20e05b5f7190a020b4e060d80a8c870d6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:db:d4:e2:14:de:50:2d:13:2b:9e:1f:1e:
a0:b1:9d:90:50:b0:c4:3f:30:62:1a:ac:cc:7b:64:
e4:33:5d:84:ff:e1:9b:b2:29:d3:01:68:3e:b8:21:
7a:5d:b4:49:47:c4:96:88:d1:a4:83:26:85:63:d4:
b9:02:22:cb:be:e3:41:91:31:fe:73:69:60:42:13:
e3:57:d3:5e:e5:a7:0a:ce:bf:bb:63:0b:fe:b6:73:
93:f5:84:c8:21:a5:5d:9a:ee:ae:a1:03:47:21:6f:
f1:1b:2a:10:11:50:5f:0e:a3:a9:ba:9e:9c:4a:03:
fb:ff:bb:e4:57:8e:e6:79:d3:a2:da:cc:77:32:37:
cf:25:17:14:06:7b:1f:46:3c:0c:0e:86:e0:b3:c6:
09:1b:04:ac:d1:67:72:94:87:7a:64:bd:d1:a3:4d:
a1:dc:42:b6:8f:2e:91:7f:27:be:bc:2e:d8:37:a2:
0e:cb:d8:0d:1a:6a:a1:22:dc:b8:94:52:46:0d:3e:
5f:57:be:72:10:3a:a5:47:56:d2:a9:ef:d9:7d:57:
4f:d3:a9:32:43:2a:89:6e:6f:97:ff:a9:58:bf:fa:
f2:0a:75:be:3f:e4:66:87:56:ed:f8:47:a6:19:6a:
ff:74:ec:c5:6e:02:87:c0:7a:2b:a9:39:e2:b1:ef:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:B2:0E:05:B5:F7:19:0A:02:0B:4E:06:0D:80:A8:C8:70:D6:EE
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/1MqyDgW19xkKAgtOBg2AqMhw1u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.36.16.0/20
Signature Algorithm: sha256WithRSAEncryption
19:08:88:69:df:19:66:17:89:06:36:f1:7e:19:0b:53:5f:fc:
ce:11:0b:97:09:53:8a:5a:ad:07:7a:24:56:59:25:eb:f7:d4:
75:f1:09:3d:91:aa:f6:71:0d:33:54:23:3f:f5:6d:fa:a5:82:
5a:05:d6:a4:73:fd:01:a8:3b:cf:03:a7:37:d4:ad:e5:95:f6:
5b:e9:7a:81:9c:4c:f4:af:85:b3:0c:0e:e7:a0:9a:f4:fd:19:
8f:4f:22:21:4b:98:22:bf:c8:3a:fe:15:0a:f2:89:9e:d9:00:
54:0a:d4:a2:cc:7e:0f:44:5c:b3:45:84:69:80:40:9f:87:9c:
23:fc:7b:c6:bb:0b:d7:90:a4:33:0b:b8:95:d5:03:d1:46:6b:
25:b8:7d:c8:50:f1:e1:df:09:01:8f:19:75:4c:d9:f8:3d:68:
4e:77:6e:fb:3c:52:4b:b3:78:dc:1c:7f:f1:6f:c1:69:54:25:
79:a7:32:98:00:3f:6e:df:52:56:7e:0c:1b:78:65:d8:d1:62:
02:9c:46:3d:32:fe:7e:d7:bc:bd:a4:28:e0:d3:d1:77:68:87:
d6:1e:d1:34:fe:e8:be:c3:ff:5b:d6:e6:12:6b:40:9e:14:82:
ae:a8:88:cf:cf:3b:2d:03:97:9e:57:e2:e3:2e:6c:83:64:16:
b8:91:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:01 2024 by rpki-client on console.sobornost.net