Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/eV2QmziPwleb8FNw5BaAq7wilDA.roa
File: eV2QmziPwleb8FNw5BaAq7wilDA.roa (raw, json)
Hash identifier: VGY9y7N+IhVPbVITiveaXvTvfyMrvLaMI+dNq+skyEw=
Subject key identifier: 79:5D:90:9B:38:8F:C2:57:9B:F0:53:70:E4:16:80:AB:BC:22:94:30
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019072EE4D9A673963B7EC6031C86C9A6433
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/eV2QmziPwleb8FNw5BaAq7wilDA.roa
Signing time: Tue 02 Jul 2024 10:12:18 +0000
ROA not before: Tue 02 Jul 2024 10:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209344
IP address blocks: 185.133.200.0/22 maxlen: 22
185.133.200.0/23 maxlen: 23
185.133.200.0/24 maxlen: 24
185.133.201.0/24 maxlen: 24
185.133.202.0/23 maxlen: 23
185.133.202.0/24 maxlen: 24
185.133.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:ee:4d:9a:67:39:63:b7:ec:60:31:c8:6c:9a:64:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Jul 2 10:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=795d909b388fc2579bf05370e41680abbc229430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:20:b8:44:3a:6a:3e:9a:ed:a4:a8:50:92:
fc:82:09:31:1e:e5:27:5f:4a:00:15:24:54:13:0e:
f0:74:49:f5:09:21:33:11:9d:b8:c0:e6:97:d5:31:
b8:8d:9e:09:d8:e1:e6:5f:4d:d7:9c:3e:a0:10:9b:
46:e7:c8:2b:93:a0:a5:03:00:02:d8:a4:15:8c:6a:
6b:37:e7:be:14:7b:60:33:85:5e:f6:99:98:55:88:
c1:df:94:69:a2:94:17:a0:e1:cf:a2:94:47:79:22:
62:5a:18:28:9f:67:b9:58:b9:ed:90:ba:6d:0d:20:
d0:17:60:d2:82:95:2d:7b:54:26:72:86:08:a8:f7:
a0:a7:f8:3f:48:34:18:d1:b6:40:6a:a3:93:90:2e:
94:7d:19:ea:e7:b0:5b:63:a7:34:02:68:d5:b2:dc:
48:1a:5d:ca:77:73:24:84:9b:86:e9:89:cc:1e:34:
f8:48:27:8f:fa:ff:ba:02:3c:c6:d1:21:1f:1a:84:
34:e5:e8:d5:79:6b:2a:4a:e2:f6:ee:a1:18:69:14:
72:ca:c2:1f:63:53:c5:1f:cc:ad:30:96:88:c3:4d:
90:3c:01:26:59:f9:ec:3d:4e:f4:7a:04:07:2e:15:
e2:a3:c4:bc:04:c7:dc:77:31:78:90:89:18:38:a9:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:90:9B:38:8F:C2:57:9B:F0:53:70:E4:16:80:AB:BC:22:94:30
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/eV2QmziPwleb8FNw5BaAq7wilDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.200.0/22
Signature Algorithm: sha256WithRSAEncryption
81:74:50:a8:37:38:2e:50:a7:da:d1:5b:e7:5a:8a:e8:18:b7:
67:ea:c7:e8:cf:5f:aa:b8:23:93:0d:e1:3c:87:98:1b:88:75:
7e:87:bb:81:2c:32:dc:82:58:17:fb:0b:87:1d:fa:f8:c5:0e:
37:f6:9c:31:c9:d1:65:ed:f7:b0:cd:86:d7:4b:dc:2b:e1:a2:
9e:32:ee:8d:be:d8:9b:95:dc:99:79:f3:4e:df:ae:94:e2:3b:
5e:cf:40:a4:30:fc:21:f1:38:9f:36:d1:bd:0e:8b:bd:8f:42:
4b:2f:88:f1:ed:24:3f:25:a5:21:d2:7a:69:0e:8a:6a:3f:9e:
84:c4:8f:3b:22:97:4d:a4:82:4d:e7:f0:77:35:25:5a:83:cf:
23:50:1e:20:7b:c9:0e:98:fb:c5:5e:62:fd:e9:a5:05:8b:f0:
cc:5b:49:85:66:b3:96:8f:ab:e4:11:c7:99:c3:a7:ed:d5:26:
bf:85:79:f5:9e:26:a6:17:21:6e:b9:96:e8:9d:74:5c:58:06:
b8:13:8d:f5:43:36:c1:a8:05:4d:fa:a6:58:3a:86:76:e5:be:
0b:97:72:0b:2c:c3:fc:df:fc:ec:2e:44:b6:96:ab:c7:dc:b3:
1e:ae:11:48:d8:73:db:67:fc:1f:91:51:60:96:b9:13:24:25:
95:86:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net