Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/HZqtQV4ZlYzSjH_FK623cy4fipQ.roa
File: HZqtQV4ZlYzSjH_FK623cy4fipQ.roa (raw, json)
Hash identifier: EuiK5DFCNIALQOFFuX2MyrTVQlwTI7Jq2JnO1Jk4BKM=
Subject key identifier: 1D:9A:AD:41:5E:19:95:8C:D2:8C:7F:C5:2B:AD:B7:73:2E:1F:8A:94
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0193D9EA5A0EA2C9D47A39A6D3102E3A8035
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/HZqtQV4ZlYzSjH_FK623cy4fipQ.roa
Signing time: Wed 18 Dec 2024 13:17:14 +0000
ROA not before: Wed 18 Dec 2024 13:17:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8865
IP address blocks: 37.128.152.0/21 maxlen: 21
82.139.128.0/19 maxlen: 19
82.139.128.0/20 maxlen: 20
82.139.144.0/23 maxlen: 23
82.139.152.0/22 maxlen: 22
82.139.168.0/21 maxlen: 21
82.139.176.0/21 maxlen: 21
212.33.64.0/19 maxlen: 19
2a02:1770::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:ea:5a:0e:a2:c9:d4:7a:39:a6:d3:10:2e:3a:80:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Dec 18 13:17:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9aad415e19958cd28c7fc52badb7732e1f8a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:9e:58:c1:36:f3:b1:2d:79:53:a5:f9:bf:
7a:9d:59:a7:5d:65:e7:bc:08:c8:34:b4:a7:da:4a:
4f:fd:ef:44:87:ec:94:70:bc:80:88:76:bc:93:dc:
2b:d4:4e:40:5d:d7:be:15:6f:58:66:95:4e:81:9e:
33:c7:67:ae:98:7b:4e:b0:cc:87:6b:e3:cf:bf:8a:
d9:34:7d:05:49:42:9a:c1:82:b8:1f:6a:ef:fc:8f:
60:58:61:f8:d1:fa:70:d6:97:92:25:cb:8c:3e:c7:
58:1f:f5:b3:f1:1f:98:87:b5:16:90:df:91:51:8e:
53:24:9e:3d:00:ad:1c:fc:69:2e:5b:6f:49:33:ad:
a9:13:3a:dd:c2:6e:61:48:24:c6:bf:4e:f5:b6:1a:
0f:a1:06:9c:fb:9e:04:6f:60:df:03:9f:14:89:f8:
6b:82:e4:42:04:9c:f4:49:1b:a0:4c:9f:25:8f:28:
85:43:e1:49:c5:73:39:90:8c:58:ef:50:7c:8d:89:
b3:e3:ad:7c:71:e4:6d:96:56:d6:36:cb:4b:25:49:
be:98:7a:4b:08:88:06:81:d9:1b:fc:31:7d:10:28:
46:fd:bd:22:73:45:bc:08:7d:2d:81:a4:24:49:6e:
a9:48:2e:59:f6:83:f0:20:05:ef:57:5c:ab:bd:4e:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:AD:41:5E:19:95:8C:D2:8C:7F:C5:2B:AD:B7:73:2E:1F:8A:94
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/HZqtQV4ZlYzSjH_FK623cy4fipQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.152.0/21
82.139.128.0/19
82.139.168.0-82.139.183.255
212.33.64.0/19
IPv6:
2a02:1770::/33
Signature Algorithm: sha256WithRSAEncryption
5d:ec:ba:23:a6:36:be:26:5f:80:1a:dc:01:d2:36:5d:cb:40:
4f:01:fb:f3:f1:b1:e7:21:5a:df:f3:1d:a6:28:5c:bf:e0:f0:
89:a4:ac:4f:13:4e:91:73:c8:37:ad:65:ac:9a:89:1a:44:ea:
07:88:5b:c6:f2:27:ce:05:d9:2d:35:41:8a:79:90:28:24:85:
4c:87:3a:c9:09:b3:9d:9f:0f:b2:35:88:05:a3:96:30:5d:df:
e3:84:9d:f8:96:76:25:74:ac:62:c5:8c:4c:a4:f0:cc:35:21:
f4:ea:b3:86:a6:13:1b:3a:e0:2e:96:89:ad:61:f2:b0:8e:82:
92:c6:cf:77:f9:f7:7b:d2:b3:16:08:f4:ad:69:16:e2:e9:e0:
31:23:54:0d:e3:97:a2:2d:47:df:1f:fb:81:e1:6f:63:1f:fc:
0a:54:ee:70:a2:99:62:fe:ca:02:7e:7f:fe:84:a6:cc:b2:bb:
52:c9:f7:2a:4b:ff:23:85:e5:76:1e:f9:92:65:ba:db:5e:53:
50:b3:bf:14:15:11:3e:83:d2:34:f6:58:e1:ea:c5:f7:52:d2:
32:3f:c5:6b:d2:fe:7b:f4:f0:ff:f9:cd:11:09:4c:5f:d1:9d:
9b:21:14:c9:3d:3c:5f:75:24:cd:04:af:28:dc:d9:0a:0d:ab:
22:d3:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:09 2024 by rpki-client on console.sobornost.net