Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/GSU7QnM-tUrDcl52nMAbpOu1cRc.roa
File: GSU7QnM-tUrDcl52nMAbpOu1cRc.roa (raw, json)
Hash identifier: f5YWYnJLzs8jCrtk+YoFaoRy3wel9wNGk2Lk5tRhLps=
Subject key identifier: 19:25:3B:42:73:3E:B5:4A:C3:72:5E:76:9C:C0:1B:A4:EB:B5:71:17
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018CC7958359133342F401312665CC90FA80
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/GSU7QnM-tUrDcl52nMAbpOu1cRc.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12462
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
212.66.160.0/24 maxlen: 24
185.123.120.0/22 maxlen: 24
2a0c:f5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:83:59:13:33:42:f4:01:31:26:65:cc:90:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19253b42733eb54ac3725e769cc01ba4ebb57117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:8e:4e:e7:62:8c:98:c6:ee:85:bd:4c:7a:
a4:5e:34:a9:e6:b8:9e:4c:46:38:f6:9c:84:3f:32:
05:9a:78:6d:47:86:64:30:d9:d2:1a:87:da:4b:f8:
02:6d:19:c0:dc:cd:5e:68:37:b9:7d:7a:bd:76:b1:
aa:99:36:35:ea:1e:55:ae:ac:9e:ad:f2:ba:dc:a1:
ac:37:2d:01:0c:c0:d9:82:49:e8:b3:94:1c:91:aa:
d7:a9:d8:5a:5d:57:ae:23:49:af:d6:d4:f2:ff:76:
66:5a:b2:f5:08:a7:65:7b:81:9b:dc:8e:51:b2:27:
9f:34:b8:15:ef:e8:35:26:56:e8:28:e5:9c:69:47:
bb:3e:1a:a3:48:1e:87:60:be:dc:08:78:10:19:08:
fa:9c:19:14:1c:cb:62:23:fb:7d:61:d3:1f:7a:f0:
e9:e1:8a:7f:fa:1a:34:12:0f:13:dd:4b:0b:bd:9e:
26:ce:c0:02:7a:b8:b4:79:d0:7b:c7:68:d9:81:fd:
8d:b3:c8:fc:f7:47:25:bf:41:5d:89:33:d5:75:76:
4f:68:a0:51:0a:f7:a6:9b:93:00:a8:7a:80:27:5d:
a2:92:81:26:a7:a8:95:7f:27:22:70:30:ee:24:1f:
f8:19:e4:83:6a:0a:c8:7a:3f:7e:29:2b:cd:20:1f:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:3B:42:73:3E:B5:4A:C3:72:5E:76:9C:C0:1B:A4:EB:B5:71:17
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/GSU7QnM-tUrDcl52nMAbpOu1cRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
IPv6:
2a0c:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
65:e9:10:1f:f6:38:7c:ef:95:63:dd:93:48:f6:07:91:9d:f4:
93:1f:bf:5e:5d:0e:f0:f4:38:2d:bc:c2:7a:c7:7b:a7:9e:f8:
77:47:87:55:7a:75:33:4d:c8:d3:d7:da:e9:69:3a:32:0f:35:
f9:fe:79:73:da:83:c8:a2:1d:e0:94:8c:4b:13:23:35:d7:e0:
61:db:5f:c3:9a:e1:c7:ec:0d:de:44:e2:a1:77:83:0e:24:bf:
c6:be:75:71:9b:e8:59:53:ba:65:50:1e:82:92:11:b0:30:02:
9c:31:6b:97:ad:ab:36:06:35:3a:92:0f:56:a8:31:48:41:60:
db:c6:8b:54:81:4e:58:d0:e4:61:43:bc:97:50:84:82:c7:d7:
84:d1:0d:31:64:da:4a:95:69:d6:7c:96:ba:85:0d:29:76:1d:
f8:8a:2b:a0:7c:2f:a1:96:e9:4b:f8:1a:64:01:78:35:c7:89:
d3:f6:c7:15:47:0c:e7:07:70:51:80:85:d8:27:75:91:d3:ad:
15:98:23:8b:3c:55:54:36:f9:b4:e4:ea:15:bd:cf:99:a7:84:
ea:d5:27:a2:38:cc:90:c2:5b:cc:04:da:cc:ed:f9:e4:d0:db:
f9:08:56:34:5a:ee:71:20:6c:85:a2:2f:2c:36:a4:38:66:5f:
9d:e8:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net