Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397086.roa
File: AS397086.roa (raw, json)
Hash identifier: 3jB41bfzLLFuFnqJWLSGHBsfyqFdfwgjwhovQZIn/nc=
Subject key identifier: 44:FA:BF:68:19:8A:E7:E5:3A:B9:46:F6:CF:58:11:52:A3:62:DE:91
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 184A9F33800AAF6204C8F0BE0208D5CB0FB35ACA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397086.roa
Signing time: Mon 21 Oct 2024 07:03:52 +0000
ROA not before: Mon 21 Oct 2024 06:58:52 +0000
ROA not after: Mon 20 Oct 2025 07:03:52 +0000
asID: 397086
IP address blocks: 92.112.168.0/24 maxlen: 24
92.112.169.0/24 maxlen: 24
92.112.173.0/24 maxlen: 24
92.112.174.0/24 maxlen: 24
92.112.203.0/24 maxlen: 24
92.113.232.0/24 maxlen: 24
92.113.233.0/24 maxlen: 24
92.113.237.0/24 maxlen: 24
92.113.238.0/24 maxlen: 24
92.113.242.0/24 maxlen: 24
92.113.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4a:9f:33:80:0a:af:62:04:c8:f0:be:02:08:d5:cb:0f:b3:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 21 06:58:52 2024 GMT
Not After : Oct 20 07:03:52 2025 GMT
Subject: CN=44FABF68198AE7E53AB946F6CF581152A362DE91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:72:62:9b:3e:e9:f9:4f:b7:cd:3b:be:fb:
47:6b:81:59:ef:ea:0d:8f:70:70:6d:22:c0:bb:5a:
62:7d:a1:58:3b:2e:e8:e0:e3:bd:c5:af:b2:ae:09:
2f:01:ae:a0:84:b8:fa:96:35:ed:eb:41:a4:17:f1:
ec:cf:5b:f2:94:61:81:8c:03:b2:c2:ed:e8:98:2f:
e2:3c:61:91:50:7b:8a:e9:d0:37:e7:d2:01:35:79:
e2:78:f1:df:07:8b:91:4a:a4:42:12:bd:1e:6e:3b:
3f:c8:af:1c:8c:a7:6c:2b:9a:92:8c:22:f2:ee:b6:
f9:38:92:45:a2:bc:a9:9a:a6:1b:ae:fd:48:d3:ee:
f8:41:ff:2b:60:c6:08:a0:29:c1:76:7f:7d:03:c7:
99:d5:d6:e9:6d:b6:08:11:4d:05:cd:1b:7d:de:c3:
24:da:0f:a3:00:7e:ff:8b:0b:66:0c:86:c1:4f:3d:
de:b2:76:7c:ca:69:b5:be:de:f2:9f:c3:ec:d8:93:
84:8d:ab:5d:5d:e6:46:db:09:68:aa:89:ad:1d:c5:
e3:fb:f5:d6:a6:e2:14:e3:d8:ab:15:dd:5e:e2:70:
d4:e1:f8:30:28:19:b0:56:c3:ff:21:2b:4d:7c:a9:
14:91:ca:d2:f2:7d:48:03:ec:c0:d8:f4:2c:31:0e:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:BF:68:19:8A:E7:E5:3A:B9:46:F6:CF:58:11:52:A3:62:DE:91
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.168.0/23
92.112.173.0-92.112.174.255
92.112.203.0/24
92.113.232.0/23
92.113.237.0-92.113.238.255
92.113.242.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:47:ac:b4:ba:b4:9e:c6:a0:ed:ac:b6:4d:d2:96:9f:c3:73:
b3:76:75:59:d0:ff:e0:65:db:34:c1:10:71:d4:12:0c:18:4f:
ff:fd:c2:a0:2c:fc:33:0d:af:8a:5c:24:1f:71:e3:49:94:7e:
88:f4:eb:c6:7e:80:62:f7:6e:81:a6:63:3a:0c:4f:af:27:15:
3f:cf:55:75:2a:1a:ba:ab:e8:74:03:f4:42:a9:e8:87:b7:bc:
e6:21:80:b7:3c:ff:fe:fd:cc:af:81:f9:2c:b5:15:4d:43:17:
a1:5d:ad:93:bf:97:a2:ea:c1:a1:7f:94:e8:53:4c:8a:59:c2:
67:1b:49:ba:51:e7:00:fc:69:ff:bc:6b:20:66:56:69:c0:53:
3c:38:02:bd:d9:35:19:9a:5e:8c:0a:21:d3:2a:91:36:a4:76:
a0:4e:ef:cd:ae:b2:a7:d9:f5:b3:e9:47:31:80:c4:97:df:01:
02:c7:74:23:be:d7:6c:48:10:15:60:bc:95:35:01:49:93:91:
c0:b8:45:08:36:a2:2e:45:46:85:43:ba:0d:60:ea:64:6d:92:
e1:72:60:16:9b:4a:ac:4c:f3:c5:ca:95:8e:69:89:4f:be:c2:
0e:c2:37:5b:76:a5:c3:20:5e:fe:ea:d4:a8:97:fd:61:04:29:
3a:c7:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:27:14 2024 by rpki-client on console.sobornost.net