Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/gbT6yrL0ptDUEh54-tPkKoRGaWI.roa
File: gbT6yrL0ptDUEh54-tPkKoRGaWI.roa (raw, json)
Hash identifier: 68eS+Jn4ma2Drltk4K2tGBBi9Jtx5MHAXlhwTDIa5a0=
Subject key identifier: 81:B4:FA:CA:B2:F4:A6:D0:D4:12:1E:78:FA:D3:E4:2A:84:46:69:62
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 018FE46270429CE9C5D970A66544D4CC9CB6
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/gbT6yrL0ptDUEh54-tPkKoRGaWI.roa
Signing time: Tue 04 Jun 2024 17:53:27 +0000
ROA not before: Tue 04 Jun 2024 17:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 45.156.23.0/24 maxlen: 32
45.156.25.0/24 maxlen: 32
45.156.27.0/24 maxlen: 32
178.255.222.0/24 maxlen: 32
185.159.128.0/24 maxlen: 32
185.228.235.0/24 maxlen: 32
193.176.153.0/24 maxlen: 32
193.176.158.0/24 maxlen: 32
193.176.179.0/24 maxlen: 32
193.176.190.0/24 maxlen: 32
194.36.171.0/24 maxlen: 32
194.36.209.0/24 maxlen: 32
194.116.214.0/24 maxlen: 32
194.116.215.0/24 maxlen: 32
194.116.216.0/23 maxlen: 23
194.116.216.0/24 maxlen: 32
194.116.217.0/24 maxlen: 32
194.120.24.0/24 maxlen: 32
194.120.116.0/24 maxlen: 32
2a13:7c00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:62:70:42:9c:e9:c5:d9:70:a6:65:44:d4:cc:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jun 4 17:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81b4facab2f4a6d0d4121e78fad3e42a84466962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:92:7e:95:56:c4:50:aa:5d:9a:49:96:71:
58:03:46:69:ac:02:59:33:c9:4d:b9:15:4f:db:ba:
21:f5:b6:ca:46:8d:1f:6f:99:37:be:81:2e:98:4a:
df:0e:43:ed:7e:4f:dd:b8:ff:c9:9a:fa:54:78:5f:
41:e4:c1:bb:14:97:71:0e:6b:12:17:7a:eb:dc:72:
c1:ca:d1:ee:8c:e5:21:2d:09:16:bb:71:af:0a:e2:
ca:39:4c:d6:43:0d:f0:5b:ea:f8:81:ee:ca:e8:81:
ae:6d:01:e0:6c:96:0d:b6:94:9a:34:54:63:7d:a3:
49:08:64:a0:64:21:d4:3c:b8:ea:96:a8:7f:9f:e0:
0b:fa:36:65:89:8b:3b:60:61:13:e3:97:0a:6f:c8:
53:05:ad:cb:1e:b9:d1:7f:7b:a1:60:37:6d:01:51:
95:1b:fc:48:9f:6c:91:0a:6e:9f:a0:e0:05:5b:48:
3e:0e:95:fe:06:e9:58:10:a0:d3:be:86:e8:64:86:
84:a8:0e:c4:a1:51:04:b6:1a:7c:d9:f8:3e:9b:2d:
d6:50:4e:04:01:53:3e:03:49:dc:c7:df:06:21:25:
3c:38:91:06:8d:48:cd:0d:83:ad:9a:30:9b:74:7f:
6c:94:e4:0c:4a:04:12:fc:29:3d:06:76:cf:89:5e:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:FA:CA:B2:F4:A6:D0:D4:12:1E:78:FA:D3:E4:2A:84:46:69:62
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/gbT6yrL0ptDUEh54-tPkKoRGaWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.23.0/24
45.156.25.0/24
45.156.27.0/24
178.255.222.0/24
185.159.128.0/24
185.228.235.0/24
193.176.153.0/24
193.176.158.0/24
193.176.179.0/24
193.176.190.0/24
194.36.171.0/24
194.36.209.0/24
194.116.214.0-194.116.217.255
194.120.24.0/24
194.120.116.0/24
IPv6:
2a13:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
6c:c8:89:e5:56:cb:8b:21:d9:47:d9:98:cf:d3:03:0c:a5:d8:
92:ab:71:7f:7c:24:ce:8d:bf:76:bb:33:08:83:c7:ba:59:1f:
99:91:f9:60:aa:ed:d6:cd:e8:ee:47:55:a1:0f:df:d3:66:a0:
a1:dc:7d:b7:41:97:08:f7:a6:6c:70:15:3e:45:3f:b0:76:42:
f2:be:be:0b:c1:fb:a5:24:97:30:1b:0c:9d:cc:db:b5:07:6c:
3c:6b:48:68:65:cd:b3:af:31:7f:33:80:e1:50:6c:bd:13:0e:
97:65:2b:de:fd:fe:19:ad:1d:a0:7d:86:5d:23:a7:43:0d:c0:
4d:26:06:9f:6d:7c:98:50:03:04:2f:c3:75:6a:a8:a7:96:b2:
96:af:81:48:5d:b5:a1:e8:4d:52:70:0c:7d:e7:f6:0b:82:46:
c7:53:16:c1:a2:aa:2a:5f:2d:4b:8a:8c:8c:08:b5:1d:5f:a9:
04:56:3d:6c:81:35:bc:ad:ce:12:4e:5a:c3:1d:67:7a:0f:c7:
3a:02:0b:a7:19:ee:e2:a8:99:1b:2e:2b:bf:a4:44:71:be:e0:
f1:55:57:ca:cd:eb:1a:16:59:4e:00:b0:c9:3c:3e:f2:73:9a:
ec:b7:b3:fa:84:dc:6b:86:3c:d5:43:4f:3a:c9:c8:5b:82:8a:
50:7a:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 10:01:20 2024 by rpki-client on console.sobornost.net