Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/YvsgYAbZw8WZqR3-VbQR8RBg_vc.roa
File: YvsgYAbZw8WZqR3-VbQR8RBg_vc.roa (raw, json)
Hash identifier: YXR3ir4Bxa5RdMPaZ5HU6qwMLREKV2yxh5BkjdRlv2k=
Subject key identifier: 62:FB:20:60:06:D9:C3:C5:99:A9:1D:FE:55:B4:11:F1:10:60:FE:F7
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 018CC2DB2D60FE6960C5469F65BCA5580A44
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/YvsgYAbZw8WZqR3-VbQR8RBg_vc.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58143
IP address blocks: 5.35.170.0/24 maxlen: 24
5.35.169.0/24 maxlen: 24
5.35.172.0/24 maxlen: 24
5.35.168.0/24 maxlen: 24
5.35.171.0/24 maxlen: 24
5.35.174.0/24 maxlen: 24
5.35.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:60:fe:69:60:c5:46:9f:65:bc:a5:58:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62fb206006d9c3c599a91dfe55b411f11060fef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:76:80:87:2a:49:e2:44:dd:4f:df:b3:a2:
68:53:de:b3:40:77:0c:75:17:e4:05:dd:e9:18:40:
5a:6d:6f:c7:e6:b4:03:73:60:a3:03:37:d4:4c:59:
95:43:be:32:84:1d:f1:a7:86:05:fb:2e:b3:f9:02:
2f:3d:77:e4:03:ab:ba:f3:00:05:a0:c3:e1:50:f9:
f8:68:77:55:db:9d:b9:27:8a:44:4c:f5:2e:3e:d7:
03:77:93:1f:63:83:78:89:35:4c:ba:56:f4:d0:08:
7f:7c:f0:4f:18:ed:1b:fd:b4:31:23:cc:67:c2:86:
f2:2c:ec:12:84:ba:eb:f5:9c:89:a1:32:47:17:47:
bb:0c:d2:64:d7:34:e9:45:38:e4:36:8a:6e:d5:77:
e7:b8:c8:9a:ea:ee:d8:6a:67:ff:1f:c1:36:e5:d3:
77:be:b1:31:7e:91:24:75:b1:32:5e:a3:ae:93:87:
c6:32:7e:3f:65:96:6d:d3:09:1d:39:75:19:52:51:
bd:d3:71:b2:53:d9:60:f1:f3:29:00:30:22:44:02:
fc:7d:9c:c0:11:be:32:db:ff:5e:1e:cd:e4:72:15:
4f:7b:65:a0:aa:ee:7e:e7:0d:08:33:86:d5:70:d7:
04:5c:a8:92:ae:57:f0:23:46:ca:7c:44:dd:61:35:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FB:20:60:06:D9:C3:C5:99:A9:1D:FE:55:B4:11:F1:10:60:FE:F7
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/YvsgYAbZw8WZqR3-VbQR8RBg_vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.168.0-5.35.174.255
Signature Algorithm: sha256WithRSAEncryption
30:17:51:83:7d:9c:d8:74:3a:a3:29:6c:6e:f3:68:84:2c:f7:
b9:76:4c:23:c6:1f:06:3c:64:82:be:79:7a:b0:0e:f6:cb:4a:
43:e1:2a:11:00:6a:52:2c:ca:7c:6c:eb:51:99:c9:e6:fb:a4:
81:9c:95:20:74:a4:cb:81:d3:3e:b6:7a:28:e7:75:d7:3b:ce:
7a:77:84:fc:eb:7e:ac:92:18:58:d4:ca:58:0e:53:1e:ab:3b:
70:ca:29:87:72:ee:d3:f3:47:dd:88:f2:0b:06:14:b6:e9:02:
34:50:2a:6f:77:1b:7c:74:07:2d:0a:09:84:da:26:f6:6d:34:
53:d9:45:bc:43:72:80:8a:e5:cf:fe:18:6a:55:cb:98:96:e6:
7a:aa:ba:44:53:ef:23:c2:2f:5d:f6:80:b8:47:e5:60:19:8e:
83:cc:72:02:35:5d:9e:34:74:d8:e2:e2:a9:7b:18:ae:e4:29:
58:41:96:e3:58:36:b0:ef:16:09:42:12:a7:7c:ae:b7:40:e5:
6e:ec:91:cc:43:24:10:3a:ec:90:ce:8a:92:40:50:a2:a1:ea:
98:9f:88:d0:32:0d:cb:2c:79:92:f4:2e:28:3e:4a:69:13:81:
e2:a5:7f:c3:55:3c:3b:b6:ff:a7:42:fa:ab:99:be:b8:e9:21:
c1:3b:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net