Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/5lDJ_LvXl8Ar9JWhSks6XfLsEh4.roa
File: 5lDJ_LvXl8Ar9JWhSks6XfLsEh4.roa (raw, json)
Hash identifier: X0p7XWusxDCmMxk1dLcu6v6FaoOq9TCDcAt2tdmyzBc=
Subject key identifier: E6:50:C9:FC:BB:D7:97:C0:2B:F4:95:A1:4A:4B:3A:5D:F2:EC:12:1E
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01939C4C3E8BE075A112E1EBA68776D845D4
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/5lDJ_LvXl8Ar9JWhSks6XfLsEh4.roa
Signing time: Fri 06 Dec 2024 14:07:42 +0000
ROA not before: Fri 06 Dec 2024 14:07:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200567
IP address blocks: 45.146.132.0/22 maxlen: 23
46.16.216.0/22 maxlen: 22
46.16.216.0/23 maxlen: 23
46.16.218.0/23 maxlen: 23
46.16.220.0/22 maxlen: 22
46.16.220.0/23 maxlen: 23
46.16.222.0/23 maxlen: 23
185.39.176.0/23 maxlen: 24
185.39.178.0/23 maxlen: 23
185.70.144.0/23 maxlen: 23
185.70.146.0/23 maxlen: 23
185.109.32.0/23 maxlen: 23
185.109.34.0/23 maxlen: 23
192.109.223.0/24 maxlen: 24
192.109.231.0/24 maxlen: 24
192.109.235.0/24 maxlen: 24
192.109.239.0/24 maxlen: 24
2a02:4500::/32 maxlen: 32
2a05:2a80::/29 maxlen: 29
2a05:2a80::/32 maxlen: 32
2a05:2a80:1::/48 maxlen: 48
2a06:4e40::/29 maxlen: 29
2a0f:1000::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:4c:3e:8b:e0:75:a1:12:e1:eb:a6:87:76:d8:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Dec 6 14:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e650c9fcbbd797c02bf495a14a4b3a5df2ec121e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:4a:c3:bb:78:b4:d6:7b:54:26:d2:42:c2:
57:0e:d1:05:28:6c:c3:93:e6:44:1b:0c:e4:1f:9f:
a2:17:b4:b5:b9:0f:4e:32:3b:76:52:54:b2:bd:04:
d6:d8:9b:ce:b4:73:1f:03:26:78:19:33:94:37:84:
e4:8f:d7:63:8c:f7:f2:87:d0:85:cb:ef:43:ad:e9:
c6:7a:ea:50:40:5c:f2:d4:70:b9:74:38:24:1c:e9:
7f:a5:0e:0c:78:67:4c:22:41:db:ce:bc:d6:56:b8:
5b:ff:df:ec:a8:c5:89:74:ed:ee:d1:93:ef:15:1c:
a4:55:c3:bb:b5:a2:3c:b5:72:d1:2f:12:f6:03:9b:
fe:47:1d:3f:d8:b5:3b:ae:f5:15:5f:c7:72:32:62:
0e:d2:35:25:59:e5:ab:02:cd:9a:1b:cc:a4:90:76:
f8:c1:9b:8f:cb:a2:17:d1:6e:b2:c2:5e:a9:e0:ec:
70:0f:a0:90:a4:be:a1:15:47:86:fe:7f:e6:eb:c0:
83:1a:92:4e:22:af:88:8b:16:42:47:71:4c:b9:26:
53:ff:06:bd:5c:f8:e7:dd:24:8c:93:ab:18:af:97:
f1:41:b6:bc:2d:cd:f3:29:4e:59:60:54:88:4a:78:
fa:c9:71:0f:af:03:35:0a:20:86:8f:bc:96:42:d2:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:C9:FC:BB:D7:97:C0:2B:F4:95:A1:4A:4B:3A:5D:F2:EC:12:1E
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/5lDJ_LvXl8Ar9JWhSks6XfLsEh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.132.0/22
46.16.216.0/21
185.39.176.0/22
185.70.144.0/22
185.109.32.0/22
192.109.223.0/24
192.109.231.0/24
192.109.235.0/24
192.109.239.0/24
IPv6:
2a02:4500::/32
2a05:2a80::/29
2a06:4e40::/29
2a0f:1000::/29
Signature Algorithm: sha256WithRSAEncryption
67:4b:f5:a3:8c:e6:34:e2:0e:4a:e8:7b:c0:e9:69:1b:7b:51:
eb:6c:0c:97:28:c7:27:1b:ab:7c:6e:e7:eb:c9:a7:8a:28:94:
fa:51:26:b7:c7:59:a1:52:40:86:75:a2:1a:8c:37:06:77:f1:
51:29:5e:2b:d7:bd:eb:38:77:0c:ac:61:60:b2:9d:38:58:96:
1f:42:bf:ca:82:20:f8:8c:8b:08:43:40:c7:87:4d:48:27:ae:
e4:4f:90:f7:6c:5d:4e:b9:dd:76:77:5f:bc:cf:68:3e:eb:95:
38:76:0c:13:11:ad:76:38:69:f0:50:33:03:51:69:aa:38:7f:
62:36:e4:90:3e:fd:42:3f:74:3c:7f:44:af:2b:2e:ba:cd:95:
8e:6b:87:5f:bc:83:86:26:2d:5a:54:4c:bf:74:64:85:4f:68:
18:f4:a4:81:ac:55:04:3e:b4:1e:1f:2d:fc:8d:c3:fc:32:1e:
68:fb:81:0d:7b:fa:a9:fe:4e:b4:90:13:a4:c9:ae:7a:2e:15:
f8:a9:f0:2f:77:ae:db:fd:2f:3a:e7:a9:17:73:c2:da:6d:f8:
87:5a:9b:8d:f3:e7:84:d6:0c:9c:cb:54:b2:d1:cb:37:d7:07:
0c:e4:7a:ce:f1:e4:17:5f:e2:f6:c2:89:2f:85:17:f3:ea:74:
15:c4:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:12 2024 by rpki-client on console.sobornost.net