Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/aARa36uWNAJ1vc5ZJSa_5lWS_FU.roa
File: aARa36uWNAJ1vc5ZJSa_5lWS_FU.roa (raw, json)
Hash identifier: sedSeptKQwQFZr7xaDJbbyJkxDOZDre1PLJvP0Bp8sU=
Subject key identifier: 68:04:5A:DF:AB:96:34:02:75:BD:CE:59:25:26:BF:E6:55:92:FC:55
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 018603F4040E9121DED2B83FD98B85824881
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/aARa36uWNAJ1vc5ZJSa_5lWS_FU.roa
Signing time: Mon 30 Jan 2023 18:32:48 +0000
ROA not before: Mon 30 Jan 2023 18:32:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8282
IP address blocks: 80.252.112.0/22 maxlen: 24
80.252.116.0/22 maxlen: 24
194.70.36.0/24 maxlen: 24
80.252.124.0/22 maxlen: 24
84.246.192.0/21 maxlen: 21
93.188.176.0/21 maxlen: 21
2a01:2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:f4:04:0e:91:21:de:d2:b8:3f:d9:8b:85:82:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: Jan 30 18:32:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68045adfab96340275bdce592526bfe65592fc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:07:40:86:28:8c:39:0b:b6:99:aa:84:bd:
5a:4e:67:7d:4c:4d:59:b5:e3:d7:62:7f:a7:25:36:
27:73:82:f0:31:7f:14:91:1b:08:65:9a:85:58:dc:
0b:b2:3b:f1:84:06:02:32:8c:68:91:87:57:1a:3e:
34:c2:87:db:bb:1f:c3:5a:81:06:cb:8b:04:0c:b6:
c9:ce:e2:26:d7:c2:4f:73:1b:92:26:8f:6a:cf:43:
37:b5:45:8e:e9:19:cc:25:55:9d:cd:21:72:40:42:
e7:49:7d:44:f6:48:f3:16:2c:e2:ff:4a:02:dd:09:
0e:cd:60:f1:6f:16:48:14:10:a8:56:9f:ec:9a:82:
17:50:7f:d0:88:a1:58:3b:19:6a:3d:4e:c0:ab:ab:
bf:15:2e:4f:5a:64:6c:38:ea:cc:55:ca:50:77:f3:
52:bd:e8:f2:50:d9:ed:12:f5:96:46:f8:a8:4e:ed:
bf:e9:5e:cf:bb:f3:e4:55:e7:3f:16:4b:d6:37:b3:
31:88:fb:f8:c4:cc:f0:fa:b0:34:71:89:91:cc:fb:
93:46:33:c4:5c:a0:a7:ec:8a:ee:6b:43:75:18:c5:
2f:4e:4f:43:32:12:7a:6b:61:ca:c2:9c:23:d3:ab:
75:c1:16:96:69:e4:73:5d:38:ba:0a:24:92:34:98:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:5A:DF:AB:96:34:02:75:BD:CE:59:25:26:BF:E6:55:92:FC:55
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/aARa36uWNAJ1vc5ZJSa_5lWS_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.112.0/21
80.252.124.0/22
84.246.192.0/21
93.188.176.0/21
194.70.36.0/24
IPv6:
2a01:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:6e:d2:b5:81:ab:65:ab:1a:34:22:83:ef:36:b6:f0:29:e1:
d4:aa:49:32:ef:8b:7f:d5:e0:0b:02:20:cc:7e:53:c1:f2:2b:
23:ad:b5:62:8e:7d:79:ec:c4:ac:48:6c:0a:70:b5:61:cf:90:
22:a9:cb:75:ae:3c:ea:06:58:65:a8:b7:b2:89:9d:6b:5d:6f:
71:d4:c5:cd:72:9e:48:86:d3:d6:1c:ba:11:ef:e4:ff:b6:51:
5a:a5:41:1b:72:bb:f7:a3:c1:c2:30:a8:05:07:9a:bd:5d:78:
ce:e7:d9:21:65:52:ce:24:61:e7:c7:b2:09:35:90:05:67:4a:
7e:e7:6d:5f:65:8b:ff:f6:ea:19:ca:d9:e8:a2:60:92:bf:ab:
88:2b:d8:44:e4:92:be:f8:03:60:eb:55:38:97:02:40:54:79:
87:76:9f:b1:05:bc:c2:51:b3:91:cb:32:15:19:9a:9c:77:4e:
48:55:89:46:32:32:9b:40:3e:28:2b:57:23:cf:12:ec:8a:96:
1a:9a:88:fc:f8:66:62:69:b3:28:b2:65:e3:e6:0b:74:25:f2:
7f:d2:12:92:75:1b:3c:de:81:2d:4f:42:e9:6a:39:d9:fe:3e:
c5:aa:f3:b7:13:8e:cc:5d:33:35:13:d3:51:47:19:84:ca:13:
2e:42:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net