Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/UMrdVcvTWyqgeFbW-oo4LjzCVNo.roa
File: UMrdVcvTWyqgeFbW-oo4LjzCVNo.roa (raw, json)
Hash identifier: XQLKmI4Sis3L6YL3/dg7vjYaS9Q++FOsVQCLsq2DA5U=
Subject key identifier: 50:CA:DD:55:CB:D3:5B:2A:A0:78:56:D6:FA:8A:38:2E:3C:C2:54:DA
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 0193BAA4D21EF78A9FEA7FF5A9105A4A30D2
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/UMrdVcvTWyqgeFbW-oo4LjzCVNo.roa
Signing time: Thu 12 Dec 2024 11:33:04 +0000
ROA not before: Thu 12 Dec 2024 11:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34790
IP address blocks: 80.74.16.0/20 maxlen: 20
85.234.64.0/19 maxlen: 19
185.188.172.0/22 maxlen: 22
195.162.20.0/23 maxlen: 23
217.72.112.0/20 maxlen: 20
2a00:d000::/29 maxlen: 29
2a00:df00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:a4:d2:1e:f7:8a:9f:ea:7f:f5:a9:10:5a:4a:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Dec 12 11:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50cadd55cbd35b2aa07856d6fa8a382e3cc254da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:0c:84:36:f5:ee:31:ff:f3:94:d8:a4:94:
da:c8:37:5e:ab:f4:8a:1f:9a:79:41:0b:81:e4:b9:
d8:5e:7e:3c:c0:d5:e4:67:50:0f:21:39:49:02:bc:
db:f1:30:4b:88:89:1f:bc:c5:df:92:99:4d:03:4f:
83:5a:db:a0:7e:9c:b3:cc:18:fc:f9:95:53:87:5f:
1a:16:ea:a9:90:48:c0:d0:b0:9c:1f:03:79:75:dd:
04:9c:ef:a0:6b:0b:44:ec:97:6c:6e:ed:72:b2:40:
15:61:fb:ca:ec:06:b8:81:fb:0c:3b:af:55:e6:c2:
8e:7d:b2:60:2d:ee:ad:6a:c5:19:62:49:34:82:f7:
0c:1c:df:7f:53:f7:52:72:83:4f:a3:c8:94:29:c9:
d5:c7:e7:62:ed:fd:84:4d:65:6b:10:14:46:c7:e6:
e8:62:e7:d1:bc:43:2a:ba:cb:41:a4:c7:a6:f3:82:
85:fe:c6:94:69:60:1d:04:97:40:1d:f5:b2:5b:6c:
4b:16:14:49:5e:0b:d1:40:f3:99:04:f0:a1:7b:f4:
26:8f:d3:b8:34:93:a7:78:ff:5b:07:95:45:1d:d8:
d7:fd:b5:8c:68:84:9b:9f:fa:86:9b:fb:64:ee:b0:
6b:03:90:75:8d:1f:25:a2:69:4b:8e:c8:a6:7b:6c:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CA:DD:55:CB:D3:5B:2A:A0:78:56:D6:FA:8A:38:2E:3C:C2:54:DA
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/UMrdVcvTWyqgeFbW-oo4LjzCVNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.16.0/20
85.234.64.0/19
185.188.172.0/22
195.162.20.0/23
217.72.112.0/20
IPv6:
2a00:d000::/29
2a00:df00::/29
Signature Algorithm: sha256WithRSAEncryption
97:ad:d9:bc:cd:2b:1c:47:b8:9c:76:77:85:09:b6:61:96:5a:
17:28:ff:34:b5:6e:d5:0b:16:6e:8b:a1:53:1f:46:3d:a3:a3:
6d:34:6e:82:a4:ee:79:e1:a7:3f:fa:f1:fd:2d:a7:06:38:98:
c6:36:d3:b0:d0:c5:6d:00:62:8d:07:e3:3b:45:10:f1:b7:04:
0c:9b:8a:dc:3e:eb:46:12:b9:f8:1a:4d:0a:f9:23:15:f9:c9:
49:42:fa:da:e6:7c:d6:c4:7a:4f:3e:b5:ee:ce:19:39:dc:a5:
c5:f5:0d:09:39:33:7e:8f:7d:96:f3:eb:34:5f:c5:c8:1e:68:
36:09:67:2d:80:6d:23:27:52:d9:ad:d0:4c:1c:a8:37:c1:af:
85:11:d6:64:89:9f:05:e0:85:13:8c:cb:72:da:67:51:1a:df:
ee:26:92:f0:37:fb:dc:4e:06:0d:a1:d7:7d:c7:5e:7c:0b:77:
3c:63:c2:c9:4f:c7:be:55:8b:11:63:11:69:27:99:9f:6e:2e:
6a:c0:d9:90:28:ab:10:b9:08:77:33:75:ea:44:3f:c4:98:c7:
c0:54:81:b1:9e:5e:5d:9c:0f:e4:b2:d4:df:db:76:5b:94:84:
be:50:cd:c3:4d:2b:b9:df:1b:ce:ab:8f:df:45:6b:ef:aa:12:
26:83:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net