Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/GbG-iHDmf-_i-pCB78N2Eio4c1k.roa
File: GbG-iHDmf-_i-pCB78N2Eio4c1k.roa (raw, json)
Hash identifier: rzzcfe82O2b0aPHCQ4fyajM1hQu8g0+VTZIz4KUpVjc=
Subject key identifier: 19:B1:BE:88:70:E6:7F:EF:E2:FA:90:81:EF:C3:76:12:2A:38:73:59
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 018D1C7514ECA23A4363BC950738BC49E888
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/GbG-iHDmf-_i-pCB78N2Eio4c1k.roa
Signing time: Thu 18 Jan 2024 12:04:11 +0000
ROA not before: Thu 18 Jan 2024 12:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197019
IP address blocks: 31.31.72.0/21 maxlen: 24
37.157.192.0/21 maxlen: 24
46.28.104.0/21 maxlen: 24
46.28.104.141/32 maxlen: 32
89.221.208.0/20 maxlen: 24
185.8.236.0/22 maxlen: 24
2a02:2b88::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:75:14:ec:a2:3a:43:63:bc:95:07:38:bc:49:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jan 18 12:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b1be8870e67fefe2fa9081efc376122a387359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:3a:73:9d:9e:89:34:ea:63:7c:22:77:14:
b2:90:db:2f:9d:a1:ab:c1:bc:5c:40:b5:52:74:01:
10:44:4f:1b:53:12:6d:d6:fb:26:01:9c:ab:8e:78:
9f:a5:40:4e:f8:6b:5b:d0:40:83:ed:d4:a1:71:4b:
d3:2a:96:a2:aa:31:93:ba:d2:2b:71:b4:78:02:37:
c0:9b:fc:5c:26:7c:50:f5:25:2f:4a:f2:15:07:ee:
d7:1c:b4:3f:57:6b:eb:d6:71:23:82:5f:66:4c:35:
ac:c1:87:5a:c1:00:a9:e9:8a:85:9f:fe:7a:af:93:
47:0f:d5:a4:c7:7e:ba:0a:2f:0e:a2:71:28:5d:62:
cd:20:1f:03:58:2e:a4:f0:c8:97:97:eb:fc:ba:67:
70:df:ee:f7:3d:85:07:ee:c6:7c:99:9f:9d:0b:3e:
e8:10:56:d7:f3:6e:b9:b0:8a:07:7b:82:e4:e1:db:
97:32:99:f4:ea:01:ea:3f:24:15:c0:72:9f:f0:bc:
92:1a:d7:12:c3:d8:0b:f2:c5:e8:85:65:7c:11:18:
2a:1b:64:1f:9d:5f:24:92:2b:73:57:bf:68:25:71:
61:1d:c6:1a:cb:e8:02:b0:9e:64:22:1f:68:a3:31:
91:7b:fd:da:7a:c4:3a:45:fc:29:5d:1b:66:1d:ef:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:BE:88:70:E6:7F:EF:E2:FA:90:81:EF:C3:76:12:2A:38:73:59
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/GbG-iHDmf-_i-pCB78N2Eio4c1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.72.0/21
37.157.192.0/21
46.28.104.0/21
89.221.208.0/20
185.8.236.0/22
IPv6:
2a02:2b88::/32
Signature Algorithm: sha256WithRSAEncryption
27:2c:3c:dd:c4:22:b5:03:25:61:4e:34:8c:a8:54:01:d5:72:
a9:77:20:49:c0:fc:64:22:00:0d:4d:bc:0e:9e:d6:ef:02:58:
ab:b4:fd:20:2d:f8:8c:24:40:9a:66:81:6c:7a:3a:68:7b:91:
46:59:ce:de:c5:6b:8d:6a:5c:b1:71:e7:2d:40:b8:67:17:bf:
48:5a:d9:b6:6b:60:5d:a5:c5:79:a4:40:99:3d:8f:cf:df:0f:
bd:2c:c7:47:2c:58:41:e4:cc:b9:5a:af:b2:44:4c:6e:3a:82:
7a:04:f7:9e:98:d8:e9:a0:5f:61:47:74:a8:c0:37:75:68:79:
b8:41:0c:1d:47:fc:33:2b:6e:8f:6c:02:f3:3a:41:1d:d2:47:
01:30:77:98:97:ff:71:27:0e:2a:50:39:3b:f7:46:ef:55:13:
ea:00:46:5d:fb:c2:a7:80:a0:13:1d:7c:f0:57:b6:69:b6:c8:
fd:f2:fd:31:53:95:be:04:1a:b0:a3:d0:9e:a3:bc:45:8c:78:
01:a1:5c:f5:89:dd:ef:8f:7b:bc:84:31:1c:21:36:7d:2c:b3:
ec:00:f2:b1:12:d7:80:27:d6:ed:ad:f0:a0:d7:cb:f7:d0:53:
28:1e:7d:23:50:95:5e:f2:55:56:b1:f7:ea:be:6b:f2:be:36:
26:28:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net