Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/z82kaTxtXwKaXXLojjCVL-L5rOo.roa
File: z82kaTxtXwKaXXLojjCVL-L5rOo.roa (raw, json)
Hash identifier: Y/+XK3sM14HoBjWCNuwwPlRsNOTaK6df7aDTfT3Y5dY=
Subject key identifier: CF:CD:A4:69:3C:6D:5F:02:9A:5D:72:E8:8E:30:95:2F:E2:F9:AC:EA
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0190460904668815B0A0E35DBF319D567E10
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/z82kaTxtXwKaXXLojjCVL-L5rOo.roa
Signing time: Sun 23 Jun 2024 16:58:34 +0000
ROA not before: Sun 23 Jun 2024 16:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205585
IP address blocks: 185.143.232.0/22 maxlen: 24
185.143.232.0/24 maxlen: 24
185.143.233.0/24 maxlen: 24
185.143.234.0/24 maxlen: 24
185.143.235.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
2a0c:a7c0::/46 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:2::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c6:4::/48 maxlen: 48
2a0c:a7c6:5::/48 maxlen: 48
2a0c:a7c6:6::/48 maxlen: 48
2a0c:a7c6:7::/48 maxlen: 48
2a0c:a7c6:8::/48 maxlen: 48
2a0c:a7c6:d::/48 maxlen: 48
2a0c:a7c6:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:09:04:66:88:15:b0:a0:e3:5d:bf:31:9d:56:7e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jun 23 16:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfcda4693c6d5f029a5d72e88e30952fe2f9acea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:54:1e:30:e7:e9:db:53:0d:40:c3:11:85:
30:41:5b:ec:b8:27:a7:a9:df:52:cc:97:fa:d2:6d:
50:c6:ed:a7:40:f2:a0:14:1a:dd:1a:91:8c:47:e9:
f1:4e:02:26:96:21:1f:71:95:16:eb:c8:e3:15:00:
2c:df:89:95:a6:55:ba:7e:7d:6f:42:5a:b9:80:99:
ca:42:2d:df:1f:83:a6:8a:7f:c4:26:71:2f:f6:80:
0f:60:6d:33:62:80:93:93:47:dc:95:7c:cd:56:9c:
a9:1f:19:5a:86:92:8b:35:2a:fc:43:f4:ac:71:2b:
40:ac:8c:9a:63:84:f1:53:2e:eb:4f:3d:07:55:60:
b5:9a:65:57:bb:fd:bd:1b:be:9e:9f:dc:56:10:37:
fb:e7:28:de:ea:5d:97:18:a6:6f:66:ca:53:ca:eb:
5e:c3:a6:0a:52:97:23:41:fe:ce:fc:2b:28:76:d4:
14:15:40:30:c7:9d:90:eb:46:8b:08:79:05:a6:0b:
30:37:f7:cc:40:2f:3d:21:48:53:92:50:d7:93:f1:
0d:6b:b4:73:6c:50:1a:af:9f:1a:5c:82:de:50:94:
cd:57:ea:e9:e5:21:60:12:59:e5:1f:7a:c2:33:a3:
2a:c6:34:ea:a3:05:64:4b:9a:b8:38:57:f3:fe:ea:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:A4:69:3C:6D:5F:02:9A:5D:72:E8:8E:30:95:2F:E2:F9:AC:EA
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/z82kaTxtXwKaXXLojjCVL-L5rOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/24
IPv6:
2a0c:a7c0::/46
2a0c:a7c6:4::-2a0c:a7c6:8:ffff:ffff:ffff:ffff:ffff
2a0c:a7c6:d::/48
2a0c:a7c6:1000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:54:2e:3d:a7:96:cf:19:75:7e:1c:d6:cc:ec:c2:cf:22:d3:
f2:7b:4b:7d:18:d7:f1:14:d1:99:75:d8:c7:89:31:2e:74:cd:
34:9f:20:37:01:c8:20:1c:3b:ad:73:e2:66:c7:f1:e6:d8:97:
09:1e:a7:94:2e:18:62:46:b5:b4:8c:8e:9c:58:18:21:97:10:
81:e7:d3:e4:10:29:d9:63:67:91:f2:1e:52:c1:1e:bc:ec:01:
8f:b2:b3:f2:e7:85:04:18:04:2f:79:57:c8:5e:04:18:14:9d:
8a:7f:8c:41:8a:be:25:10:bb:9c:e4:62:fe:54:d8:af:63:eb:
cd:11:ca:a5:4d:e3:aa:0e:92:99:1a:65:1a:61:46:7d:9c:a6:
0f:50:3c:c6:14:87:4b:7f:bf:73:1f:6b:b0:b5:76:1e:18:e3:
46:92:5a:02:8d:f3:f6:5b:de:10:60:80:18:90:3f:e1:f3:3a:
07:17:a6:9f:e6:ff:0e:96:12:04:cf:29:18:a8:e5:12:3c:aa:
a4:38:ad:88:e1:b6:9d:b3:fe:40:8a:df:0f:66:d3:20:b2:b4:
8d:42:c9:bc:a3:d4:dd:49:12:a0:b0:32:66:dd:2d:8c:e5:f4:
7f:62:18:d5:88:48:89:cd:50:79:c7:e8:90:10:45:6c:64:45:
a9:e8:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:42 2024 by rpki-client on console.sobornost.net