Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/L4oJKnOogGe1njngANsHzAnvWAg.roa
File: L4oJKnOogGe1njngANsHzAnvWAg.roa (raw, json)
Hash identifier: BKw5Jk7/I6ZOFMoCU+dk5IltR5aTGH0UBq8dcXmcba8=
Subject key identifier: 2F:8A:09:2A:73:A8:80:67:B5:9E:39:E0:00:DB:07:CC:09:EF:58:08
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 0193D027CC19D6C42CD39C030FCD58330F37
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/L4oJKnOogGe1njngANsHzAnvWAg.roa
Signing time: Mon 16 Dec 2024 15:48:09 +0000
ROA not before: Mon 16 Dec 2024 15:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.64.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.66.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
185.206.88.0/24 maxlen: 24
185.206.89.0/24 maxlen: 24
185.206.90.0/24 maxlen: 24
185.206.91.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:27:cc:19:d6:c4:2c:d3:9c:03:0f:cd:58:33:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Dec 16 15:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8a092a73a88067b59e39e000db07cc09ef5808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:78:8a:ae:7e:81:6f:52:2e:5c:1e:fb:1a:
28:62:4b:31:a6:de:7f:e5:83:59:54:95:d9:3b:fe:
d7:bf:05:c2:3a:33:94:e1:1c:20:d4:da:26:db:18:
c7:c7:83:6e:af:a5:89:68:5a:b9:91:8c:cf:45:26:
a1:f9:e6:9f:24:e8:0b:36:98:bf:f9:a2:dd:79:f2:
ed:67:61:5a:61:56:14:8f:17:26:01:39:37:87:9c:
a8:16:4c:ca:04:1f:fe:8c:e9:0a:0a:05:1d:62:63:
01:b6:f9:2d:8e:76:26:78:67:8c:9b:3a:5c:a0:c8:
ab:02:48:e3:22:ec:a5:8b:3a:78:ef:fe:17:3c:8b:
b2:b1:71:bb:a4:16:e4:53:0f:cb:44:7b:e0:1a:ab:
7f:05:7f:cd:e4:cc:25:99:6c:a0:a4:f7:09:a4:2e:
ae:e8:b3:6e:c9:15:4f:1e:3a:bf:06:02:3b:cb:13:
4a:83:f8:09:c9:5a:a6:56:15:a0:fd:d2:87:cd:34:
50:86:5c:70:7a:ad:b9:ab:30:cf:e8:32:42:e3:7e:
8a:32:8c:7a:66:65:14:50:f7:25:d6:e0:5c:f2:4e:
a3:69:5e:c0:6a:b6:20:68:bf:bd:55:ab:75:ae:19:
b2:ae:75:bc:45:0b:31:e4:1a:f9:17:7d:57:27:b3:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:09:2A:73:A8:80:67:B5:9E:39:E0:00:DB:07:CC:09:EF:58:08
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/L4oJKnOogGe1njngANsHzAnvWAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
13:67:ed:6c:b4:7f:9b:2b:7c:82:b6:01:c1:79:df:83:4f:59:
98:54:65:b8:2a:56:18:95:bc:a4:3b:a4:05:21:1f:73:b4:20:
00:89:f0:8a:08:6a:60:92:d9:87:23:9b:07:5b:61:e5:c2:0c:
40:6d:23:c1:2e:a0:94:02:c1:61:e8:59:ca:ea:a0:38:0b:c3:
48:4a:ab:b9:97:f2:3b:9c:5c:b7:61:07:26:04:9c:2e:27:f6:
ca:fd:a2:2b:cc:1a:97:22:1f:08:a9:96:0d:93:9b:db:7b:ad:
79:5d:bf:6d:4c:64:5c:31:1e:68:85:47:be:8f:80:19:27:de:
d8:ca:bd:70:e7:63:03:8b:1c:54:a1:86:82:2c:31:6d:a2:42:
5b:8e:59:3d:63:e2:7e:32:68:54:2c:ee:41:32:5e:ea:a9:19:
eb:c4:34:10:7f:a7:bc:99:d1:49:f4:b6:23:af:ab:75:c5:c2:
ed:4e:b9:c2:f1:a7:91:1f:29:13:c8:97:49:f9:02:13:04:0b:
19:0a:51:af:d5:7f:66:b4:6a:c7:9a:3c:75:99:37:70:37:e4:
c0:29:aa:14:c0:8e:7e:7d:4a:7d:63:2c:e0:11:b3:62:f0:03:
94:87:ed:20:17:d8:9d:0f:96:5a:66:a6:81:10:bf:99:2a:e0:
34:40:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:24 2024 by rpki-client on console.sobornost.net