Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/jGJXcUfxxXQqZ1uBMIXFOqeWAzY.roa
File: jGJXcUfxxXQqZ1uBMIXFOqeWAzY.roa (raw, json)
Hash identifier: ylQgmZXRNIE+2KyYMxTz2MdG2i70LlzjSyB+711oQR0=
Subject key identifier: 8C:62:57:71:47:F1:C5:74:2A:67:5B:81:30:85:C5:3A:A7:96:03:36
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019222E7A1A1F6258D9E83B985E9E638F508
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/jGJXcUfxxXQqZ1uBMIXFOqeWAzY.roa
Signing time: Tue 24 Sep 2024 07:20:58 +0000
ROA not before: Tue 24 Sep 2024 07:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.64.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.66.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
185.206.88.0/24 maxlen: 24
185.206.89.0/24 maxlen: 24
185.206.90.0/24 maxlen: 24
185.206.91.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:e7:a1:a1:f6:25:8d:9e:83:b9:85:e9:e6:38:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Sep 24 07:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c62577147f1c5742a675b813085c53aa7960336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:d0:18:1e:21:bb:63:03:81:97:f1:c1:b2:
46:4a:02:2b:1d:b6:d0:b8:ae:6b:e5:ed:ec:ed:c0:
68:10:b5:52:7e:75:6e:87:c6:06:4a:b6:ff:e9:c8:
54:4b:9c:73:c5:5d:b7:42:c8:af:48:23:e9:97:99:
63:e5:56:d1:6e:e4:54:01:20:6a:9a:0c:a8:65:2c:
6c:85:81:d0:b4:a5:e3:3f:9b:a3:bc:05:a2:9d:64:
90:07:3e:2a:ed:23:9d:66:82:73:46:19:00:99:a8:
ba:df:20:80:06:cd:48:7d:87:d3:54:39:23:9d:b5:
08:ed:34:97:ee:dc:6c:70:77:de:6d:70:1e:92:34:
c7:93:a0:53:54:83:fe:7c:48:70:29:cf:62:0c:b7:
93:62:95:a9:c6:7f:76:63:75:b1:15:67:c4:9c:76:
12:33:bb:e5:7d:ab:1a:eb:10:f1:b7:fb:84:a0:87:
e6:3e:d5:41:a6:c7:17:9d:06:c3:df:04:e4:f6:12:
88:99:c8:28:9a:e2:12:57:dd:08:fb:47:a2:6d:e4:
1d:0e:e7:ce:38:78:34:ac:07:04:c7:94:22:1f:d7:
8b:11:ca:e6:df:47:0b:fb:bc:68:3c:7b:8b:f9:63:
7b:c4:4a:26:28:45:a0:4c:56:84:f6:c5:7b:76:c5:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:62:57:71:47:F1:C5:74:2A:67:5B:81:30:85:C5:3A:A7:96:03:36
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/jGJXcUfxxXQqZ1uBMIXFOqeWAzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
21:8d:25:83:32:20:df:9b:da:15:bc:c9:c3:71:25:39:cb:17:
0b:44:2b:0c:65:43:0a:01:cb:b8:4e:dc:b1:5d:6a:2d:0b:b3:
57:cc:35:1b:f1:78:e3:8e:98:95:32:92:27:9c:b8:0e:60:61:
49:8c:b5:48:1d:3d:2e:fd:28:7a:ea:5b:6c:26:d0:89:92:bc:
3e:81:aa:ad:9d:ab:87:3c:05:2f:b7:5d:56:bf:cd:9d:7d:d3:
7e:17:26:ac:4d:6a:94:f1:54:d2:63:c1:37:b9:07:02:96:7f:
b5:95:16:3b:e7:b2:1b:88:11:e6:bc:0d:ce:29:68:80:7d:2c:
a3:f6:04:94:9b:b9:38:7f:a0:c0:dc:cd:b2:85:5c:ca:1d:1a:
09:95:c5:6f:f9:e0:fb:5a:b8:57:62:c8:9c:7b:86:fd:d6:08:
69:1d:81:00:39:31:22:06:72:e9:d4:3b:c2:b3:e3:93:42:6d:
84:c6:d0:97:63:f2:1e:cd:83:cc:bf:2e:b5:72:d8:7d:fa:b3:
4b:36:98:91:68:ef:a1:31:a4:e9:3e:e8:2c:46:ea:62:7e:5a:
d6:3e:63:15:80:44:0e:90:4d:a4:b1:ac:4d:a8:26:8b:f4:82:
b0:db:e3:26:89:a7:54:5e:b3:33:cd:39:62:f8:6d:a5:3a:3b:
2e:79:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:15 2024 by rpki-client on console.sobornost.net