Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/r5_qtskR0HrY64GYkBRBM0L_yM4.roa
File: r5_qtskR0HrY64GYkBRBM0L_yM4.roa (raw, json)
Hash identifier: zgRjMqm4U5acDV9BIctv+c5T7ZnF8ODyi8df8Jpups0=
Subject key identifier: AF:9F:EA:B6:C9:11:D0:7A:D8:EB:81:98:90:14:41:33:42:FF:C8:CE
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 0193F4E0ABE938C0D8EF9B451B6306104563
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/r5_qtskR0HrY64GYkBRBM0L_yM4.roa
Signing time: Mon 23 Dec 2024 18:56:25 +0000
ROA not before: Mon 23 Dec 2024 18:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31263
IP address blocks: 31.44.160.0/20 maxlen: 20
31.193.144.0/20 maxlen: 20
45.67.40.0/22 maxlen: 22
45.94.0.0/22 maxlen: 22
45.142.184.0/22 maxlen: 22
46.102.173.0/24 maxlen: 24
77.81.166.0/24 maxlen: 24
77.240.224.0/20 maxlen: 20
77.241.0.0/21 maxlen: 21
77.241.6.0/24 maxlen: 24
77.241.10.0/23 maxlen: 23
77.241.10.0/24 maxlen: 24
77.241.11.0/24 maxlen: 24
77.241.12.0/22 maxlen: 22
79.133.100.0/22 maxlen: 22
80.68.176.0/20 maxlen: 20
80.88.160.0/20 maxlen: 20
84.247.16.0/24 maxlen: 24
84.247.192.0/18 maxlen: 18
84.247.208.0/20 maxlen: 20
84.247.224.0/19 maxlen: 19
85.204.252.0/24 maxlen: 24
89.34.203.0/24 maxlen: 24
92.62.80.0/20 maxlen: 20
93.91.128.0/20 maxlen: 20
119.12.32.0/20 maxlen: 20
151.2.16.0/22 maxlen: 22
151.2.64.0/19 maxlen: 19
151.2.112.0/20 maxlen: 20
176.62.48.0/20 maxlen: 20
178.175.192.0/18 maxlen: 18
178.238.48.0/20 maxlen: 20
185.5.196.0/22 maxlen: 22
185.229.172.0/22 maxlen: 22
193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
2a02:600::/29 maxlen: 29
2a07:580::/29 maxlen: 29
2a07:4f00::/29 maxlen: 29
2a07:55c0::/29 maxlen: 29
2a07:5ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:e0:ab:e9:38:c0:d8:ef:9b:45:1b:63:06:10:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Dec 23 18:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af9feab6c911d07ad8eb81989014413342ffc8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:20:5f:65:70:49:c4:c9:ef:e0:b2:05:67:
b1:5e:cc:b7:a8:65:ae:a5:e8:a7:d4:58:a1:b2:66:
e8:17:5e:a5:33:b3:9a:c8:7f:5d:e8:a5:70:e1:66:
9e:f0:8c:c8:d2:39:e7:b1:6d:aa:64:b7:12:e6:95:
e3:c2:d8:53:39:12:60:ae:03:b7:fa:fb:81:e2:26:
e8:02:74:20:bb:dd:8d:6f:26:38:87:54:8f:32:33:
bb:cd:e8:42:2a:ea:5a:e6:4f:da:00:8f:c4:7b:96:
23:ad:35:1e:c6:34:96:f1:79:19:9e:97:a8:a0:1c:
de:04:78:1c:48:4e:c9:9d:5a:5d:16:e8:88:2d:86:
14:5f:21:26:52:7b:ee:8b:16:74:20:b9:d2:4f:2f:
55:82:10:1b:c8:1a:77:36:4b:d4:6c:e9:d9:98:d2:
42:2f:59:17:19:2b:3d:6d:db:20:f3:ec:34:db:fc:
f0:03:6c:aa:90:2d:38:23:a3:e4:c1:54:ec:f8:04:
88:c2:18:60:92:0a:29:79:80:9f:5f:1c:37:db:78:
ff:0d:53:ea:b8:c6:2c:b1:63:86:84:b6:32:0a:89:
1c:7e:7c:b9:bb:1b:02:02:b8:c5:e9:c0:f1:57:2e:
e5:3e:99:5f:76:2a:c7:d0:8c:4c:a7:0c:d9:b8:2f:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:EA:B6:C9:11:D0:7A:D8:EB:81:98:90:14:41:33:42:FF:C8:CE
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/r5_qtskR0HrY64GYkBRBM0L_yM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.160.0/20
31.193.144.0/20
45.67.40.0/22
45.94.0.0/22
45.142.184.0/22
46.102.173.0/24
77.81.166.0/24
77.240.224.0/20
77.241.0.0/21
77.241.10.0-77.241.15.255
79.133.100.0/22
80.68.176.0/20
80.88.160.0/20
84.247.16.0/24
84.247.192.0/18
85.204.252.0/24
89.34.203.0/24
92.62.80.0/20
93.91.128.0/20
119.12.32.0/20
151.2.16.0/22
151.2.64.0/19
151.2.112.0/20
176.62.48.0/20
178.175.192.0/18
178.238.48.0/20
185.5.196.0/22
185.229.172.0/22
193.135.15.0/24
193.135.24.0/24
IPv6:
2a02:600::/29
2a07:580::/29
2a07:4f00::/29
2a07:55c0::/29
2a07:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
39:42:3b:a4:05:0a:e0:0f:b3:77:cb:44:c4:ab:bd:fa:b0:80:
50:0f:10:29:94:d1:20:14:f0:f3:46:41:cb:90:94:98:c5:9d:
e7:56:8d:88:ae:24:ac:db:0e:d8:4a:96:3e:be:26:0d:8d:d6:
85:37:bb:b0:ce:32:e8:1a:e4:ee:5b:04:a4:26:43:85:42:15:
cf:ab:7f:42:12:e0:20:5a:6c:30:f8:39:8e:44:d6:30:fe:6e:
16:17:97:88:a9:da:8d:fb:22:a8:ba:de:ff:0d:b7:66:bb:f1:
46:43:cb:3a:66:93:f8:22:c7:c3:00:b4:6b:d1:56:dc:b6:83:
ab:68:c8:2b:f2:19:fb:76:c1:62:1b:a2:b8:65:7d:b9:52:b9:
65:02:6b:61:6c:d0:d5:5a:5d:68:18:5b:9b:1a:33:2e:01:dd:
57:f7:77:79:b3:46:e8:3b:e8:af:be:8b:73:15:dd:43:84:89:
54:bc:bb:68:8a:7e:7c:6a:ca:87:2e:0b:c0:a0:b4:0e:53:99:
39:85:88:b2:7d:ea:6e:38:5c:4a:b8:71:98:b6:15:35:e3:81:
bc:6e:cc:ae:c9:99:37:b7:ea:70:08:4f:7b:3f:73:9b:60:c7:
a2:21:f2:ca:7a:c7:e8:70:a8:26:a6:51:86:4c:69:d5:f7:fb:
66:6b:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net