Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/1-jP0ib22-sK-6iU5i34dVspxFxM.roa
File: 1-jP0ib22-sK-6iU5i34dVspxFxM.roa (raw, json)
Hash identifier: ZXsvwx5r1midSUY62fmB54K7pTE5rd940a+7tYg6+0Q=
Subject key identifier: FA:33:F4:89:BD:B6:FA:C2:BE:EA:25:39:8B:7E:1D:56:CA:71:17:13
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0190E91633B8173C50CCA44A5833F56CDA99
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/1-jP0ib22-sK-6iU5i34dVspxFxM.roa
Signing time: Thu 25 Jul 2024 08:51:04 +0000
ROA not before: Thu 25 Jul 2024 08:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 167.160.5.0/24 maxlen: 24
185.98.157.0/24 maxlen: 24
185.181.52.0/23 maxlen: 24
185.181.55.0/24 maxlen: 24
192.161.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:16:33:b8:17:3c:50:cc:a4:4a:58:33:f5:6c:da:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jul 25 08:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa33f489bdb6fac2beea25398b7e1d56ca711713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:37:9c:bc:31:50:c0:9e:09:06:11:b0:13:
cb:e9:d3:1f:4e:33:3f:d4:c2:c0:6a:de:a3:ae:c4:
e1:f1:70:54:ea:b5:68:2e:5d:32:ad:2a:65:e1:2f:
35:fc:7a:59:2d:37:a3:8c:a1:c0:c5:75:d0:96:4b:
53:68:45:75:8b:ee:1d:60:c2:aa:24:cc:7e:06:32:
c1:c9:b8:69:f8:7b:4e:ea:08:95:46:51:1c:a7:a8:
66:61:2e:04:2c:12:26:bd:be:c4:dc:67:03:0a:57:
e3:c0:80:d9:86:0a:b8:8b:e7:e7:64:a9:bd:bd:16:
d3:46:d3:e4:c1:86:25:b6:13:33:d9:f4:c3:a1:f3:
9f:3c:8f:cb:b1:9f:64:ae:d4:2c:c1:b8:22:44:46:
91:7f:d8:f6:09:5d:98:01:1a:8a:7e:69:a7:e6:12:
29:c9:a3:17:0e:cc:96:d3:6b:bc:0d:7e:52:bd:4c:
37:44:4b:30:81:bc:86:fd:7d:80:c6:c4:8d:cb:18:
4e:37:9c:5a:67:0d:62:f4:48:a2:a2:30:66:4b:15:
69:4e:d6:83:52:f1:0d:ea:e1:a7:c7:5b:df:f9:66:
b9:17:de:11:04:69:81:4f:ff:2a:81:b9:70:b0:d9:
ff:ad:af:0c:8d:dc:40:c1:a9:2f:0f:15:a5:13:c8:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:33:F4:89:BD:B6:FA:C2:BE:EA:25:39:8B:7E:1D:56:CA:71:17:13
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/1-jP0ib22-sK-6iU5i34dVspxFxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.5.0/24
185.98.157.0/24
185.181.52.0/23
185.181.55.0/24
192.161.7.0/24
Signature Algorithm: sha256WithRSAEncryption
54:15:a5:d7:6f:b9:6e:98:4f:58:c1:18:89:d5:49:73:94:8a:
5f:81:24:a7:6a:79:cb:bd:35:22:bc:14:17:6e:3d:13:11:b6:
79:59:a5:06:93:7b:21:d0:8b:32:7d:f6:c6:43:f8:1a:fd:dd:
c7:80:f4:af:d2:ad:fa:96:32:62:d3:cd:e2:31:98:aa:50:e9:
8c:a2:2d:4c:8f:15:9e:fd:d3:c2:b9:51:5e:f7:4a:4b:ad:8b:
5a:2d:0b:01:9d:08:83:35:a5:17:15:57:4e:ea:95:d0:40:d5:
9f:8a:af:a3:f1:ae:74:fc:56:45:f9:44:cb:25:90:2b:84:23:
4f:a3:ed:8a:7f:f4:a8:c5:a3:c2:3e:46:f6:22:3d:be:7e:21:
4b:f9:fa:25:1b:31:df:ea:70:a9:e5:b2:14:7a:d8:8e:e6:49:
83:f5:e7:a4:3c:c7:b6:d5:02:8c:d2:01:e2:c5:71:04:29:fb:
be:39:16:e5:ca:00:6d:fb:0b:ec:91:e6:73:dc:9e:1f:b0:95:
be:c7:b0:82:83:0f:9d:e9:b4:9a:58:ad:c7:0c:02:78:46:1a:
bb:9f:30:8b:4a:18:76:ad:76:7f:1d:29:ca:0a:b5:99:03:67:
2b:c2:15:8d:de:3e:7b:3f:39:10:1b:5d:e4:78:59:6b:02:c7:
86:92:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 01:00:27 2024 by rpki-client on console.sobornost.net