Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/vHovAoKN5Ubt3F5GvmRkhfzJkSQ.roa
File: vHovAoKN5Ubt3F5GvmRkhfzJkSQ.roa (raw, json)
Hash identifier: 9gcJeLKO3ObWGm1FZ7w7Dw3XNRbT/ebkuphw9pr5xYs=
Subject key identifier: BC:7A:2F:02:82:8D:E5:46:ED:DC:5E:46:BE:64:64:85:FC:C9:91:24
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 01922ED2EF8C1CF55B186F5FA6705D9C7E1F
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/vHovAoKN5Ubt3F5GvmRkhfzJkSQ.roa
Signing time: Thu 26 Sep 2024 14:53:48 +0000
ROA not before: Thu 26 Sep 2024 14:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197651
IP address blocks: 31.177.16.0/22 maxlen: 22
31.177.18.0/24 maxlen: 24
31.177.19.0/24 maxlen: 24
185.217.104.0/22 maxlen: 22
185.217.105.0/24 maxlen: 24
185.217.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:d2:ef:8c:1c:f5:5b:18:6f:5f:a6:70:5d:9c:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Sep 26 14:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc7a2f02828de546eddc5e46be646485fcc99124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:33:7d:3b:d2:fa:99:57:ff:f6:b3:07:03:
e6:64:a8:ea:e5:ef:a1:23:6f:fd:6a:46:8b:0f:f6:
99:94:60:f5:28:0c:4b:6b:09:56:8c:7c:5f:4b:4e:
78:1b:81:c4:8a:d5:5f:6f:8b:f2:4e:60:b3:de:5a:
59:c4:c9:a6:e0:12:9a:a8:91:b1:b1:d6:52:e0:74:
cb:e6:a7:7e:66:f6:6e:f8:39:a8:d8:43:53:f7:a1:
42:f7:e6:1e:9c:20:cb:05:20:39:13:65:f3:92:15:
84:72:04:33:98:22:be:79:bf:82:c0:82:89:eb:4b:
2a:9c:3e:5a:65:1f:99:2b:e1:d3:72:6b:38:ea:5f:
c1:b8:ce:fa:14:74:9d:e8:81:18:15:9b:42:31:b6:
dd:5c:32:af:ac:04:19:b0:58:9a:90:8a:b3:00:7c:
5d:e7:2b:95:e5:b5:d3:3f:10:2b:81:8f:d1:b8:19:
0a:c5:73:26:4a:1b:a8:f4:66:f5:ac:ba:d5:c4:3e:
cf:78:ee:06:fd:36:1b:4a:6a:ee:11:c1:fd:f4:3a:
b2:1f:01:e9:9d:eb:f9:e4:ff:7e:97:1b:50:d3:56:
0b:16:c1:84:5f:5d:16:2a:ba:6e:ad:a2:01:a4:8c:
f8:27:7d:53:43:6d:cf:83:9c:ee:b5:4c:ee:dc:de:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:2F:02:82:8D:E5:46:ED:DC:5E:46:BE:64:64:85:FC:C9:91:24
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/vHovAoKN5Ubt3F5GvmRkhfzJkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.16.0/22
185.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
af:3a:0e:91:51:81:ac:50:48:eb:5a:d1:6a:98:47:8d:57:b2:
e5:23:be:3c:55:e0:09:db:91:25:ed:e2:a8:90:d8:ce:45:40:
69:19:86:cf:29:a1:6f:8c:f6:7b:77:f9:b3:2b:f2:10:5f:e6:
d4:d9:bb:94:3c:28:02:50:f1:f4:b7:e8:62:89:ee:c6:cd:69:
fd:00:13:ca:5f:0a:3f:4f:63:54:87:5b:a3:5e:81:b6:4a:5f:
60:00:8c:ae:3e:57:43:d6:76:5e:29:4b:70:7f:81:7d:1b:aa:
6b:04:98:b3:96:c9:71:60:5c:23:78:2c:18:4c:9e:47:55:8c:
9a:a7:29:78:09:88:95:8a:97:58:3d:bf:81:5c:b2:ac:ec:4b:
bd:1e:f4:b4:c7:2a:19:18:3e:8c:62:dc:6c:1f:16:2c:ff:c8:
8e:fc:7a:d5:cc:10:05:bd:be:82:a3:7d:2a:ef:84:39:0e:0b:
78:83:ca:ed:dd:30:4f:0c:bf:ad:a6:18:07:25:9b:aa:ed:74:
97:75:cc:66:84:f4:67:92:25:cc:cb:e0:a6:0e:c3:b4:15:84:
7b:38:da:c9:76:db:08:8f:1c:8e:9a:b4:dd:97:09:cf:f6:4a:
ed:fb:45:78:88:ae:95:5f:a1:84:34:09:fc:a7:75:64:8d:bc:
2d:0e:dd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net