Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/DufB89GM2SWcgG4ibvTSiELMwzY.roa
File: DufB89GM2SWcgG4ibvTSiELMwzY.roa (raw, json)
Hash identifier: CVpYeJMlpLN7P75RAU7KzIyKmYMdfnfhQVn26xe2MMg=
Subject key identifier: 0E:E7:C1:F3:D1:8C:D9:25:9C:80:6E:22:6E:F4:D2:88:42:CC:C3:36
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 0193F3CFDA05482F6DCC4D1975CC1DE2B014
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/DufB89GM2SWcgG4ibvTSiELMwzY.roa
Signing time: Mon 23 Dec 2024 13:58:25 +0000
ROA not before: Mon 23 Dec 2024 13:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52052
IP address blocks: 185.166.72.0/22 maxlen: 22
193.37.134.0/24 maxlen: 24
193.37.155.0/24 maxlen: 24
193.37.229.0/24 maxlen: 24
194.247.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:cf:da:05:48:2f:6d:cc:4d:19:75:cc:1d:e2:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Dec 23 13:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee7c1f3d18cd9259c806e226ef4d28842ccc336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:88:6d:e9:15:e6:37:92:cf:9c:b5:a0:a0:
22:3e:3c:5c:ef:93:aa:93:39:37:23:a7:a5:10:21:
5b:74:fe:fd:2c:a8:e4:25:a5:ea:e7:93:f8:cb:6b:
6b:0e:32:34:95:92:4e:a8:68:f6:29:12:2f:07:7a:
64:99:51:3b:5e:43:0d:fb:90:c2:af:62:28:cd:16:
27:49:eb:af:e5:cf:6e:e5:b7:18:f8:a3:e9:a3:83:
13:ff:df:16:69:78:6e:a3:81:18:ea:10:1b:81:6d:
62:39:e3:cc:08:63:20:35:6d:dc:96:16:e8:24:78:
fe:64:19:71:97:43:68:9a:37:44:cf:c1:6d:19:47:
0b:51:60:a0:8c:bb:6e:ed:c4:86:c6:42:a9:62:48:
58:06:91:83:81:ae:2f:b3:67:b3:1f:a1:46:e0:d6:
a4:81:23:3e:51:bf:97:ea:43:83:d5:de:63:9a:2a:
6c:e3:46:58:d1:28:01:7d:e0:3e:b2:82:aa:e5:d3:
89:b9:3f:27:b1:7e:fe:c8:1e:4d:45:c4:05:33:8a:
af:89:ce:98:ae:2c:8a:9f:42:b5:f6:94:79:11:5f:
07:96:c3:56:e0:9f:41:5b:bb:4e:cb:77:dd:91:9a:
1f:dc:ab:f6:66:c5:c6:bc:a6:95:c3:3e:2b:28:6f:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:C1:F3:D1:8C:D9:25:9C:80:6E:22:6E:F4:D2:88:42:CC:C3:36
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/DufB89GM2SWcgG4ibvTSiELMwzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.72.0/22
193.37.134.0/24
193.37.155.0/24
193.37.229.0/24
194.247.33.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f9:b2:7b:22:5c:a9:9a:ab:63:71:55:65:74:53:16:1d:56:
16:4e:1b:71:d8:57:fa:52:73:6b:9d:8e:33:52:fd:fa:81:f8:
6d:be:68:69:fc:fd:91:df:51:ff:6b:6a:e2:04:c6:57:f9:22:
7a:3a:d4:d5:f4:a2:45:b7:70:e7:55:0a:02:4f:dd:07:e7:ce:
9a:7f:32:e5:7d:50:b0:4c:5a:4c:7f:61:64:b9:0d:ee:9d:e7:
c1:ef:cf:f2:b2:25:61:b9:61:fa:a2:4f:50:61:02:a5:2c:7f:
17:6f:b4:80:57:a2:46:5f:75:23:b6:6f:aa:f3:ce:ba:9f:ea:
11:b4:04:9a:3c:8c:f2:e4:5d:75:ac:98:8e:ea:5e:fb:a1:55:
96:18:86:2b:32:59:f3:0c:b9:c0:44:36:da:2b:a4:0e:e4:37:
87:5f:cf:6c:49:6e:30:4e:d9:5c:dc:27:3d:81:08:1e:9a:60:
cb:68:93:8d:47:99:26:d4:ea:8b:2a:82:be:03:07:e4:b3:4a:
bb:6a:43:27:f0:d5:f8:b1:d7:69:5e:02:a3:22:6b:08:2d:32:
10:85:db:b7:75:c9:91:84:47:46:74:54:65:7d:27:7d:7b:20:
7b:08:39:f0:cc:d1:cb:74:4f:c1:66:7e:b9:15:18:e2:bf:0d:
d4:33:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net