Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j1Nieqd6xaEMR1QKej-dhXEo5O0.roa
File: j1Nieqd6xaEMR1QKej-dhXEo5O0.roa (raw, json)
Hash identifier: /9VsW+eNBsQfKfAVc8okIVdSvJQH0ij+iytiGf6FiMA=
Subject key identifier: 8F:53:62:7A:A7:7A:C5:A1:0C:47:54:0A:7A:3F:9D:85:71:28:E4:ED
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0193D3F8DF63E7A7D0261CC850F713ABE86C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j1Nieqd6xaEMR1QKej-dhXEo5O0.roa
Signing time: Tue 17 Dec 2024 09:35:22 +0000
ROA not before: Tue 17 Dec 2024 09:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35177
IP address blocks: 5.139.192.0/19 maxlen: 19
5.139.192.0/21 maxlen: 21
5.139.200.0/22 maxlen: 22
5.139.204.0/23 maxlen: 23
5.139.207.0/24 maxlen: 24
5.139.208.0/20 maxlen: 20
62.183.100.0/22 maxlen: 22
62.183.104.0/21 maxlen: 21
62.183.112.0/22 maxlen: 22
85.173.136.0/21 maxlen: 21
94.233.128.0/21 maxlen: 21
94.233.176.0/21 maxlen: 21
178.35.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:f8:df:63:e7:a7:d0:26:1c:c8:50:f7:13:ab:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Dec 17 09:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f53627aa77ac5a10c47540a7a3f9d857128e4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:eb:cc:3f:2d:dd:d6:2b:12:52:02:61:79:
ab:8b:ff:b1:eb:75:8b:ad:e8:68:6e:d1:d3:0f:11:
53:9a:57:66:01:3c:c6:8d:52:e8:5c:18:af:30:3c:
13:25:fa:14:28:37:cc:81:c5:92:d7:66:57:8b:0d:
98:94:d0:ce:1d:c5:1a:37:80:ee:58:82:40:7a:aa:
0b:e4:b0:13:91:3b:65:e5:58:2f:5c:7f:89:2e:ad:
8d:7f:81:c3:22:9a:5f:5a:5b:55:c8:f4:7b:32:1f:
19:a2:d2:ed:8e:cc:c0:ee:31:e5:b2:43:19:09:9f:
ae:19:ca:6c:53:68:bb:b9:bb:0a:81:37:7b:ea:80:
56:9d:4d:80:82:6f:28:de:f5:30:b4:45:04:ba:4a:
be:9b:31:8a:3e:b7:7f:a5:c0:9e:17:11:ea:aa:42:
8b:f6:08:b3:0b:12:54:6f:2a:6f:0b:90:6b:c4:d7:
4d:05:93:8a:62:b1:54:69:bb:03:b6:74:c3:e0:3f:
92:b0:2f:9d:04:f0:cc:e1:a8:88:f6:a3:44:ec:31:
c3:80:96:87:78:75:22:82:cc:01:99:7b:c4:57:6b:
46:25:f8:a0:1c:c8:b7:95:fc:68:d1:51:ed:98:98:
24:96:e1:57:a0:6a:b2:00:f1:2a:ae:80:61:84:3b:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:62:7A:A7:7A:C5:A1:0C:47:54:0A:7A:3F:9D:85:71:28:E4:ED
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j1Nieqd6xaEMR1QKej-dhXEo5O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.139.192.0/19
62.183.100.0-62.183.115.255
85.173.136.0/21
94.233.128.0/21
94.233.176.0/21
178.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
65:a2:20:22:20:ac:e7:14:23:a1:f6:3c:e2:5b:09:41:9c:2a:
46:da:48:b2:cc:e2:49:d4:8f:51:dd:e8:90:1d:7b:2d:29:8f:
cb:81:44:d4:db:c2:ed:c1:85:28:ea:ae:2d:91:76:88:ab:7f:
3a:a0:e2:0b:10:98:64:4f:cc:63:83:52:4a:11:38:bc:4e:60:
8e:a8:3a:8e:56:23:62:62:92:7a:75:98:2f:0d:76:eb:f9:77:
45:6c:bd:ea:84:52:c5:3a:7c:fb:f3:ee:89:f1:7b:56:f8:3d:
8f:7a:aa:3d:13:2d:e0:7b:11:2e:d9:a0:8d:fd:ef:b5:82:78:
c5:af:89:ce:19:86:c3:3f:39:59:eb:41:dd:40:55:ad:33:98:
02:ce:96:a4:8d:2f:0c:bf:5e:36:cf:e2:09:ac:0b:52:20:5f:
a1:b7:80:54:b4:45:62:04:a8:db:fe:ca:bf:63:4a:9b:fa:1a:
1b:fb:7c:3f:b7:49:ea:0a:23:4f:6a:47:6f:45:d2:5b:ca:b6:
7f:82:21:d0:15:01:75:30:9a:31:86:df:8c:b6:35:8a:67:84:
2a:21:0a:ab:c4:8a:4d:65:91:1f:a5:73:0e:c0:40:e7:d3:ca:
f9:50:5c:09:fe:1f:d6:5c:f8:e1:61:35:b2:9d:17:9c:38:f4:
1e:75:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:37 2024 by rpki-client on console.sobornost.net