Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/HmA4UiB4LPpDbPlFjGRz_qb9jyE.roa
File: HmA4UiB4LPpDbPlFjGRz_qb9jyE.roa (raw, json)
Hash identifier: WwgNkP03m7sxNT0IE2Z0YtbjPr08BSX6qgxYlA4JmpI=
Subject key identifier: 1E:60:38:52:20:78:2C:FA:43:6C:F9:45:8C:64:73:FE:A6:FD:8F:21
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 019103001D10B4E2BD63BF016D777B231EAB
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/HmA4UiB4LPpDbPlFjGRz_qb9jyE.roa
Signing time: Tue 30 Jul 2024 09:37:04 +0000
ROA not before: Tue 30 Jul 2024 09:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:00:1d:10:b4:e2:bd:63:bf:01:6d:77:7b:23:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jul 30 09:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e60385220782cfa436cf9458c6473fea6fd8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:fd:d3:b6:b8:df:e9:53:b6:e7:f1:60:c9:
52:7d:f3:bd:45:40:9a:aa:31:f5:ae:3c:05:5d:b2:
d7:e2:cc:83:6b:24:f0:b6:37:f0:fb:1d:92:65:dd:
c8:0f:a6:4f:3c:50:20:b2:22:48:72:cd:79:23:c5:
16:e2:a5:0c:47:b6:c4:c7:7c:2d:71:f9:a7:11:ce:
ab:25:9d:2a:ca:29:4b:3c:f8:3b:60:23:6b:e5:27:
bf:c2:5c:bb:41:6e:13:d3:35:a9:ac:88:3d:ba:c8:
1e:d0:8a:85:ba:98:25:60:6c:5d:02:c7:34:f7:bd:
ca:b4:57:a9:3a:85:da:8f:26:b5:7d:f1:c1:59:3d:
a8:08:7b:ac:98:13:3f:46:eb:66:8b:c1:b7:9b:11:
96:87:d9:ac:59:1c:22:03:7e:2c:69:d5:41:0a:92:
df:a8:21:27:99:18:d2:cc:03:b1:de:ff:54:7e:e4:
f3:6b:c0:69:da:f4:80:8c:db:96:c3:10:96:9c:69:
89:a5:67:22:50:c7:55:25:6c:6d:5b:de:b6:6d:2f:
3f:69:f8:62:48:93:3e:d1:d5:a7:b1:f0:ba:cb:85:
33:c0:62:32:17:e7:16:f6:95:70:b1:ef:c4:cf:8a:
46:b0:0b:8e:b0:95:d6:69:e7:05:f8:4c:67:c2:d6:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:38:52:20:78:2C:FA:43:6C:F9:45:8C:64:73:FE:A6:FD:8F:21
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/HmA4UiB4LPpDbPlFjGRz_qb9jyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
213.180.225.0-213.180.226.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
62:e5:36:2e:57:47:c3:84:8b:1b:06:7f:ee:a3:2e:6f:e2:4b:
9f:8f:cf:9c:8d:ca:8e:7f:40:38:54:76:3c:8f:14:8b:95:10:
8f:ff:9b:bd:93:f0:bf:1e:e3:04:ec:7f:f1:f3:f9:28:36:ef:
83:b4:26:8f:49:10:6a:cc:dc:8a:e9:99:87:6c:52:11:7b:78:
0e:08:29:67:24:81:ca:17:0d:6c:a4:3f:2f:b8:9a:9e:03:ff:
01:e3:3d:b4:3b:b4:07:ae:69:29:cf:cb:d2:9e:b8:e0:f4:9f:
b5:b0:a1:8d:1e:3f:8b:ad:b7:3f:3c:f6:e2:34:5c:83:99:3f:
4b:9f:74:8d:b8:4f:40:c1:24:be:68:9b:79:21:f7:99:e1:b8:
38:5e:63:18:21:a2:57:88:26:fb:c3:ce:42:77:28:16:1c:3d:
fa:0e:29:4a:84:99:ed:81:1d:95:cf:ab:69:68:98:b5:10:da:
5b:6e:20:e9:79:06:36:1a:46:d5:cd:bf:7a:11:a2:9c:66:65:
ab:bd:28:39:9e:b5:28:2c:85:ef:6f:6f:e6:22:cb:a2:54:c4:
53:07:63:ee:3c:26:3d:71:82:2d:0c:ec:c4:ba:27:20:6c:12:
91:be:88:14:c7:06:a0:93:46:6e:4e:77:48:eb:e6:f6:ef:e2:
b1:db:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:11:54 2024 by rpki-client on console.sobornost.net