Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ZT2ee0J84mfRTD_T1-HL9l-I2wE.roa
File: ZT2ee0J84mfRTD_T1-HL9l-I2wE.roa (raw, json)
Hash identifier: 9VSORImwxe1VfB9tB5gEu3ihRnjQN3O5/+u767mTt6A=
Subject key identifier: 65:3D:9E:7B:42:7C:E2:67:D1:4C:3F:D3:D7:E1:CB:F6:5F:88:DB:01
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01907CF9D0D090E62889D34E8DD6ED938154
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ZT2ee0J84mfRTD_T1-HL9l-I2wE.roa
Signing time: Thu 04 Jul 2024 09:01:05 +0000
ROA not before: Thu 04 Jul 2024 09:01:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.42.196.0/24 maxlen: 24
89.42.197.0/24 maxlen: 24
89.42.198.0/24 maxlen: 24
89.42.199.0/24 maxlen: 24
89.47.196.0/24 maxlen: 24
89.47.199.0/24 maxlen: 24
89.47.203.0/24 maxlen: 24
92.114.48.0/23 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:f9:d0:d0:90:e6:28:89:d3:4e:8d:d6:ed:93:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 4 09:01:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=653d9e7b427ce267d14c3fd3d7e1cbf65f88db01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:33:02:1c:43:96:9a:92:bd:d3:16:46:37:
59:24:ae:a0:1e:1f:85:69:00:c7:9d:5a:97:cc:72:
05:22:50:11:49:2b:13:04:26:d1:10:90:1d:9d:21:
0f:02:b9:ae:c6:3a:ed:7a:f3:f5:fc:00:2b:1e:0e:
41:78:13:f6:27:66:16:ae:ac:eb:36:39:62:32:40:
40:86:3c:f9:10:c0:59:f0:90:5a:dd:b2:46:2e:98:
7c:2f:7d:d3:ff:e8:71:2e:8e:b0:d9:f6:a8:0a:69:
4f:4b:ed:2f:de:ac:0c:e8:0a:d9:35:26:f3:63:c0:
79:31:2d:11:b2:5e:29:76:07:4d:84:78:d3:b7:fb:
f1:d9:77:00:e2:f6:f0:81:fb:7c:e6:19:45:5c:ec:
4d:8a:07:2f:a3:27:bb:04:1c:93:91:61:45:10:10:
5a:26:df:d1:09:57:27:b0:dc:13:f8:dc:13:56:3a:
ad:70:ef:d9:c5:94:36:cb:06:ef:9e:7a:70:f6:94:
15:b5:73:25:a1:44:36:7c:81:d8:22:e6:25:d1:27:
6a:1e:3d:e1:ad:c2:cb:08:6e:f8:c7:d6:59:e8:c0:
b0:96:02:5f:aa:8e:c7:ae:96:9c:bf:7e:56:ca:d7:
54:42:6f:78:39:47:e9:d4:b1:1d:20:1a:53:97:90:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:9E:7B:42:7C:E2:67:D1:4C:3F:D3:D7:E1:CB:F6:5F:88:DB:01
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ZT2ee0J84mfRTD_T1-HL9l-I2wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.196.0/22
89.47.196.0/24
89.47.199.0/24
89.47.203.0/24
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:f1:de:b8:7b:4f:bf:e2:67:31:fc:45:be:6c:e7:e0:47:ce:
f5:5d:cb:8d:7d:b3:79:ba:13:96:dd:f0:3e:17:5d:da:92:60:
11:d6:bd:70:96:f5:be:cb:94:26:ca:5a:b2:d6:de:f5:af:23:
22:1f:58:e9:78:52:61:75:2c:48:ab:17:ac:64:c6:dd:fc:0e:
83:3c:6d:9c:55:6a:d5:b3:2c:82:96:00:b1:70:43:c3:c5:e0:
45:c2:01:fa:62:ac:4c:f9:cc:f2:0e:00:79:ec:df:27:61:4d:
1d:85:53:00:ca:1c:a3:c6:f2:6b:ae:d3:3b:b2:51:a3:5c:47:
5e:cc:d8:83:c3:cc:a6:6a:28:2a:6d:4d:9a:77:fb:67:fd:ea:
b6:36:f8:aa:06:4c:79:ac:4b:4f:4f:b6:02:0d:b9:02:6b:35:
5e:0e:7c:e5:1a:39:5d:e3:6a:86:96:83:7a:33:f8:58:9d:e4:
ad:4b:40:09:90:86:9b:a2:ec:f7:29:51:e0:17:c4:94:b4:a2:
f5:5d:34:ee:3c:61:d7:84:1b:c2:14:cc:12:1a:43:d9:fd:cf:
67:f8:6a:b0:17:14:49:12:5a:8d:a7:6f:e2:07:ce:62:49:b5:
44:3f:d1:ed:99:cf:b3:9c:a8:29:00:63:59:b6:d0:43:2a:73:
a4:bb:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:12:37 2024 by rpki-client on console.sobornost.net