Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k3l06Dv3NN8ELWgClg-_dZa0zcg.roa
File: k3l06Dv3NN8ELWgClg-_dZa0zcg.roa (raw, json)
Hash identifier: /4Uak0iSYCECrflhHvlkzMXcoawEio4Td8zochO7yq0=
Subject key identifier: 93:79:74:E8:3B:F7:34:DF:04:2D:68:02:96:0F:BF:75:96:B4:CD:C8
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DAFF9A52D472D568679863D4898D4D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k3l06Dv3NN8ELWgClg-_dZa0zcg.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 176.116.11.0/24 maxlen: 24
62.3.60.0/24 maxlen: 24
62.233.52.0/24 maxlen: 24
212.18.124.0/24 maxlen: 24
194.104.239.0/24 maxlen: 24
45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
45.131.228.0/22 maxlen: 24
146.19.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:9a:52:d4:72:d5:68:67:98:63:d4:89:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=937974e83bf734df042d6802960fbf7596b4cdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:a7:50:a0:36:3b:17:c1:42:bf:33:99:46:
e0:13:ce:72:c2:c7:7b:b2:b7:4d:09:47:cb:b1:86:
65:d3:60:9c:bf:17:1c:1a:b0:15:d7:ee:fa:c7:03:
a9:df:ce:aa:c6:d5:4f:08:14:cd:c8:f5:30:8a:1b:
9d:6b:c5:44:d6:0d:e4:f0:15:c3:96:72:3a:a2:a0:
9d:09:12:4f:a0:54:57:1b:59:fd:62:82:fc:4d:3f:
98:e0:6e:13:c4:fd:78:6e:8e:c3:da:c6:41:81:bb:
d5:c4:9a:c2:54:7d:c6:55:77:c5:3c:1b:c8:0a:42:
48:e8:27:b9:ed:c6:8a:97:f4:e9:d5:05:7b:36:d9:
da:95:84:06:55:3c:f3:60:39:30:74:53:d7:12:aa:
fd:62:62:46:34:9b:5b:75:c7:b2:08:3e:a0:7a:07:
6e:1c:9c:82:76:fc:23:5c:56:f6:ad:31:4d:38:92:
e9:04:cc:73:a7:ad:9e:d9:3f:ba:37:6e:5b:94:ec:
52:84:40:53:0e:89:69:7a:b3:0e:33:c8:dd:ba:60:
c6:60:7b:9f:8b:76:d4:46:4b:9b:c9:25:d5:7c:e0:
22:83:a4:23:b1:c4:32:c7:f8:84:40:af:ae:b7:a9:
3c:cf:1d:22:00:c4:26:e5:99:9b:5d:21:dd:c7:e0:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:74:E8:3B:F7:34:DF:04:2D:68:02:96:0F:BF:75:96:B4:CD:C8
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k3l06Dv3NN8ELWgClg-_dZa0zcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
45.139.228.0/24
45.139.230.0/24
62.3.60.0/24
62.233.52.0/24
146.19.123.0/24
176.116.11.0/24
194.104.239.0/24
212.18.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:a1:94:7e:6c:95:96:a4:f0:2e:60:00:84:8e:c8:2b:5a:
ff:32:5f:2b:89:92:6a:f4:58:ae:f6:15:43:3c:7a:79:ca:0b:
76:09:84:e5:08:3e:75:3d:a6:9b:cf:a7:af:b8:5f:b9:67:e1:
7e:d1:ea:7f:ee:e3:c1:1f:81:e5:f9:b7:a9:c7:3e:a3:30:10:
32:69:ef:0a:96:a9:e2:d9:ad:ec:66:ad:10:bd:6f:d2:49:dd:
16:04:56:d9:44:cd:ec:81:9d:be:26:81:26:a9:65:31:5a:12:
f5:fd:f5:7e:98:28:43:38:64:e6:da:a1:0a:1d:d8:1a:db:0d:
6e:96:e4:5e:d1:33:04:e9:53:76:f0:68:51:7a:01:fd:0d:4e:
f9:9c:37:f3:05:d7:bf:cb:79:61:26:50:a6:1b:75:c4:0b:e8:
bd:20:bf:b2:b3:bf:c0:23:3d:cc:66:f6:ca:30:0c:6c:3c:73:
9c:ce:7a:54:51:ec:4e:7b:b8:ec:62:67:23:47:9d:a1:23:33:
a8:19:2a:16:67:c0:fc:2a:f7:80:f3:98:62:bf:87:40:66:3f:
cc:fa:58:7a:c4:a8:8a:65:fa:54:1e:4b:9c:46:0f:e2:d9:50:
d3:07:d8:cf:93:96:42:35:e6:00:f6:1b:5d:fa:fa:32:44:1d:
0d:25:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:18 2025 by rpki-client