Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Q54Er4wZbhcegAWqBwAD0ApwaKQ.roa
File: Q54Er4wZbhcegAWqBwAD0ApwaKQ.roa (raw, json)
Hash identifier: Mk+6Wez0UrPv5XBzlNugSqQtx2BoRgObwyXBldOrU70=
Subject key identifier: 43:9E:04:AF:8C:19:6E:17:1E:80:05:AA:07:00:03:D0:0A:70:68:A4
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 01918F2527E873C7350B9A22D311ED069DCF
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Q54Er4wZbhcegAWqBwAD0ApwaKQ.roa
Signing time: Mon 26 Aug 2024 14:44:22 +0000
ROA not before: Mon 26 Aug 2024 14:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31263
IP address blocks: 31.44.160.0/20 maxlen: 20
31.193.144.0/20 maxlen: 20
45.67.40.0/22 maxlen: 22
45.94.0.0/22 maxlen: 22
45.142.184.0/22 maxlen: 22
46.102.173.0/24 maxlen: 24
77.81.166.0/24 maxlen: 24
77.240.224.0/20 maxlen: 20
77.241.0.0/21 maxlen: 21
77.241.6.0/24 maxlen: 24
77.241.10.0/23 maxlen: 23
77.241.10.0/24 maxlen: 24
77.241.11.0/24 maxlen: 24
77.241.12.0/22 maxlen: 22
79.133.100.0/22 maxlen: 22
80.68.176.0/20 maxlen: 20
80.88.160.0/20 maxlen: 20
84.247.16.0/24 maxlen: 24
84.247.192.0/18 maxlen: 18
84.247.208.0/20 maxlen: 20
84.247.224.0/19 maxlen: 19
85.204.252.0/24 maxlen: 24
89.34.203.0/24 maxlen: 24
92.62.80.0/20 maxlen: 20
93.91.128.0/20 maxlen: 20
119.12.32.0/20 maxlen: 20
178.175.192.0/18 maxlen: 18
178.238.48.0/20 maxlen: 20
185.5.196.0/22 maxlen: 22
185.229.172.0/22 maxlen: 22
193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
2a02:600::/29 maxlen: 29
2a07:580::/29 maxlen: 29
2a07:4f00::/29 maxlen: 29
2a07:55c0::/29 maxlen: 29
2a07:5ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:25:27:e8:73:c7:35:0b:9a:22:d3:11:ed:06:9d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Aug 26 14:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439e04af8c196e171e8005aa070003d00a7068a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:51:77:24:96:97:91:80:69:10:07:47:d3:
ee:ea:b6:09:6b:b7:84:f2:76:ea:fe:0e:31:43:71:
e9:85:89:ed:54:24:96:60:0c:d5:29:5e:71:be:3b:
bb:91:af:e3:a1:6c:a3:32:77:8b:34:16:a7:cc:fd:
5e:e1:9b:d5:3c:b6:95:46:40:22:18:bd:0d:f0:0d:
d2:2f:c0:d8:bd:fe:62:db:b5:e9:03:94:db:e3:2e:
31:21:f3:00:ea:9f:a4:b0:ee:b2:86:28:b5:17:eb:
e3:f9:39:c2:51:41:29:e7:39:ef:24:e2:8e:c5:2f:
18:5b:19:03:a6:c8:9e:16:a6:92:3f:5f:59:02:04:
84:8c:27:2b:60:f6:be:ee:08:21:3c:cf:f1:78:d3:
90:30:85:51:9a:c5:a1:23:13:4d:65:75:c2:5c:19:
2b:92:d8:39:fd:be:1d:9f:3b:72:44:55:da:0f:6f:
c8:86:e4:bb:f6:31:10:72:7f:3f:04:cd:50:78:4c:
9a:fe:ba:b3:16:78:34:5c:ce:15:b5:98:b4:51:8d:
04:dd:75:89:47:12:91:5f:f8:8e:2c:e5:4e:03:f8:
27:4f:7b:69:f1:16:2a:1c:76:3c:14:c3:76:41:3d:
78:4b:ba:fd:97:bd:0b:a5:63:97:75:e7:f5:1a:db:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:04:AF:8C:19:6E:17:1E:80:05:AA:07:00:03:D0:0A:70:68:A4
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Q54Er4wZbhcegAWqBwAD0ApwaKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.160.0/20
31.193.144.0/20
45.67.40.0/22
45.94.0.0/22
45.142.184.0/22
46.102.173.0/24
77.81.166.0/24
77.240.224.0/20
77.241.0.0/21
77.241.10.0-77.241.15.255
79.133.100.0/22
80.68.176.0/20
80.88.160.0/20
84.247.16.0/24
84.247.192.0/18
85.204.252.0/24
89.34.203.0/24
92.62.80.0/20
93.91.128.0/20
119.12.32.0/20
178.175.192.0/18
178.238.48.0/20
185.5.196.0/22
185.229.172.0/22
193.135.15.0/24
193.135.24.0/24
IPv6:
2a02:600::/29
2a07:580::/29
2a07:4f00::/29
2a07:55c0::/29
2a07:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:f3:0a:88:49:0b:2d:0d:4c:12:17:1c:77:d9:a0:6f:ce:e8:
3d:56:10:c9:22:ab:a8:3e:86:2e:40:58:34:f5:6b:ab:df:28:
8d:4d:0f:b6:ce:f3:54:ab:d6:db:ab:a6:dc:ed:24:81:73:4e:
5b:c4:2d:ad:19:ed:85:33:67:a3:2a:1c:3c:ec:52:b6:2c:ac:
22:f0:c8:f0:d9:1c:be:c4:c5:71:33:17:f8:35:61:63:f9:4d:
58:46:79:18:f6:98:0c:41:e1:4a:ff:08:f4:90:70:87:dc:ac:
3a:de:e6:78:83:2e:3d:a9:d2:9c:01:3b:dd:db:73:7f:cb:9a:
23:3b:2d:ed:f2:70:7b:86:54:5f:cf:21:ab:e0:fc:76:d6:f0:
24:de:f5:8a:51:19:fb:77:04:7e:3c:36:91:cb:ba:f8:b3:2e:
34:e6:9e:6c:67:04:dc:b5:b3:ad:30:a3:23:18:88:b1:9d:48:
11:fb:98:cb:e6:92:df:81:69:59:8c:90:6c:32:bf:a8:ac:c6:
91:2d:1f:5d:28:18:7a:2d:2a:e7:74:9e:42:72:c5:14:43:d1:
eb:60:f1:4d:95:cb:d0:e7:f1:af:9f:72:05:ea:f1:b7:8c:40:
67:0d:09:fd:d9:4b:86:9e:5b:32:16:21:b2:ea:62:76:5e:c2:
74:6e:58:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 30 00:32:14 2024 by rpki-client on console.sobornost.net