Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/6y2rHq0dgaGpLoeeaov7ThH73Lg.roa
File: 6y2rHq0dgaGpLoeeaov7ThH73Lg.roa (raw, json)
Hash identifier: XBc+Oav8npUKjyITJamKC+Qec8vihFO7KQJFdNUkkwE=
Subject key identifier: EB:2D:AB:1E:AD:1D:81:A1:A9:2E:87:9E:6A:8B:FB:4E:11:FB:DC:B8
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 019252A54C2D82F1969243E6525EEC804D1E
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/6y2rHq0dgaGpLoeeaov7ThH73Lg.roa
Signing time: Thu 03 Oct 2024 13:50:17 +0000
ROA not before: Thu 03 Oct 2024 13:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29545
IP address blocks: 86.111.32.0/21 maxlen: 21
86.111.36.0/24 maxlen: 24
86.111.37.0/24 maxlen: 24
86.111.38.0/24 maxlen: 24
86.111.39.0/24 maxlen: 24
86.111.40.0/22 maxlen: 22
86.111.40.0/24 maxlen: 24
86.111.41.0/24 maxlen: 24
86.111.50.0/23 maxlen: 23
86.111.50.0/24 maxlen: 24
213.163.229.0/24 maxlen: 24
213.163.232.0/24 maxlen: 24
213.163.233.0/24 maxlen: 24
213.163.238.0/24 maxlen: 24
213.163.242.0/23 maxlen: 23
213.163.244.0/23 maxlen: 23
213.163.249.0/24 maxlen: 24
213.163.254.0/24 maxlen: 24
2a00:1f88::/32 maxlen: 32
2a00:1f88:a402::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:a5:4c:2d:82:f1:96:92:43:e6:52:5e:ec:80:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Oct 3 13:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb2dab1ead1d81a1a92e879e6a8bfb4e11fbdcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:07:f1:c2:15:69:d1:31:24:0e:fa:d5:95:
44:06:9a:c3:38:fc:64:a8:d9:42:2c:2b:c3:55:4e:
fb:9a:b8:35:66:f3:79:c9:60:71:08:14:46:0a:3c:
bf:54:43:5d:39:d6:4b:2c:80:d0:3b:a2:eb:c4:9b:
84:0d:66:98:a1:74:fe:66:c5:a6:63:31:43:83:42:
aa:fc:ba:2c:82:62:0b:ee:49:18:a5:57:a9:b2:5c:
b2:fb:85:5e:20:52:37:d9:08:f8:c9:cf:9c:00:ee:
6a:49:82:60:dd:22:8c:48:7b:b1:0e:ae:24:0f:99:
1e:ac:30:67:42:81:22:14:37:ee:c3:9a:47:55:94:
4b:d5:ef:ab:43:5b:fc:9e:d6:72:7f:61:d2:44:c7:
27:51:e9:40:4d:d8:fb:68:46:a4:04:ce:55:10:15:
1d:41:de:b0:c8:bf:8f:b4:bb:6f:90:a3:d1:f0:fa:
86:ae:09:2d:6c:6c:c9:09:9c:97:90:3f:3a:c3:4f:
80:d2:5b:ed:df:90:d2:0e:85:3a:cc:c0:52:46:85:
38:89:f1:93:60:ec:f5:82:22:11:ee:b5:59:7f:d5:
c1:ca:e1:de:fc:8f:e8:42:6a:d8:bb:e5:bb:13:18:
d6:b1:07:23:c5:5a:26:68:4a:10:1d:b6:bc:84:c6:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:AB:1E:AD:1D:81:A1:A9:2E:87:9E:6A:8B:FB:4E:11:FB:DC:B8
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/6y2rHq0dgaGpLoeeaov7ThH73Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.32.0-86.111.43.255
86.111.50.0/23
213.163.229.0/24
213.163.232.0/23
213.163.238.0/24
213.163.242.0-213.163.245.255
213.163.249.0/24
213.163.254.0/24
IPv6:
2a00:1f88::/32
Signature Algorithm: sha256WithRSAEncryption
6b:d1:5f:35:b7:13:0e:9a:2d:41:14:7c:18:d9:5e:25:f9:1a:
9d:ce:43:03:39:58:f8:75:2f:1c:68:ca:60:bf:2c:52:dc:99:
b1:83:0a:a6:e8:ca:67:60:7c:83:b2:8b:cf:41:3b:3d:cf:af:
e6:ee:4f:a2:96:4f:e7:63:b2:28:b9:fb:57:39:f2:84:54:21:
67:eb:58:50:f1:27:db:9c:5c:f3:25:e7:7e:89:39:14:fa:91:
2f:f3:12:43:44:c6:d5:08:40:67:3c:46:9a:bd:f4:cb:cd:7f:
b6:bd:12:8a:a7:ba:72:2c:be:9a:2c:e9:25:69:82:28:ba:97:
8e:d9:94:69:a3:71:46:ff:78:7f:45:b8:1d:98:9b:0f:ff:0a:
3b:7b:2a:d8:2d:ba:ac:8a:70:da:cc:bd:ed:13:71:26:9c:93:
4c:d8:e2:ce:66:31:70:e2:b5:76:b6:2b:14:a9:5e:12:87:4a:
b7:7a:fd:27:4f:06:d2:a0:79:4f:9b:38:47:8f:77:77:4f:5f:
39:52:d1:32:20:5b:85:05:0c:a1:6e:f7:38:e7:3a:44:96:cb:
40:a8:89:08:1a:7b:a0:ce:15:fe:99:2d:be:5d:e6:11:74:ac:
42:3c:09:9e:0d:83:27:50:e6:d1:c3:ce:3e:07:a6:5f:4f:1a:
54:09:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net