Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/aae5d5-05a1-45bd-a640-1869a1df6cb8/1/VZO50P1eQgz_hEMlQ1GRtjQWBG8.roa
File: VZO50P1eQgz_hEMlQ1GRtjQWBG8.roa (raw, json)
Hash identifier: LIBtpPbyhWPFAPutNB+rQWnl9R7uNYTmlFkwztdI8TU=
Subject key identifier: 55:93:B9:D0:FD:5E:42:0C:FF:84:43:25:43:51:91:B6:34:16:04:6F
Certificate issuer: /CN=35e99f34a1729ec376ee982dfb995dc94b7999aa
Certificate serial: 01856FD5015E5831DF43E4F34A3B118F3764
Authority key identifier: 35:E9:9F:34:A1:72:9E:C3:76:EE:98:2D:FB:99:5D:C9:4B:79:99:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NemfNKFynsN27pgt-5ldyUt5mao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/aae5d5-05a1-45bd-a640-1869a1df6cb8/1/VZO50P1eQgz_hEMlQ1GRtjQWBG8.roa
Signing time: Mon 02 Jan 2023 00:15:08 +0000
ROA not before: Mon 02 Jan 2023 00:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49628
IP address blocks: 188.227.192.0/22 maxlen: 22
188.227.192.0/24 maxlen: 24
188.227.193.0/24 maxlen: 24
188.227.194.0/24 maxlen: 24
188.227.195.0/24 maxlen: 24
185.81.93.0/24 maxlen: 24
185.81.94.0/24 maxlen: 24
185.81.95.0/24 maxlen: 24
185.81.92.0/22 maxlen: 22
185.81.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:01:5e:58:31:df:43:e4:f3:4a:3b:11:8f:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99f34a1729ec376ee982dfb995dc94b7999aa
Validity
Not Before: Jan 2 00:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5593b9d0fd5e420cff844325435191b63416046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:1d:e4:0b:12:75:29:24:80:e6:52:7f:60:
4d:40:4c:16:da:17:38:d2:d9:63:a7:11:28:cc:34:
06:e0:51:32:31:fa:ee:41:88:aa:b9:70:a5:3e:c3:
bb:34:ec:c1:06:15:3d:8b:a4:0f:0d:69:73:73:6d:
00:d3:d9:0e:0c:33:58:7b:d5:24:3d:44:e8:f0:13:
64:29:7f:6f:bd:5c:24:0e:13:d3:99:46:2b:8a:a8:
6b:d6:60:6c:c3:6b:c9:b2:97:a5:be:cd:60:70:70:
26:0a:02:b6:53:43:71:07:39:0f:5a:67:c9:32:8e:
d4:cb:44:19:6e:ce:40:2f:90:c6:aa:09:80:03:f4:
aa:0e:32:7a:fb:c2:09:68:da:cd:1f:42:90:a1:9b:
9e:94:e0:45:38:35:db:a5:aa:e8:81:3e:8c:a4:2d:
1e:d9:99:a3:64:3f:ee:f6:6e:02:5a:80:2a:34:51:
a7:0b:b5:ca:f4:c3:c7:d0:43:15:4c:99:14:0b:d6:
16:e0:cb:8d:e6:49:35:1b:b4:2d:90:2c:47:f9:20:
6b:e8:2a:92:b7:3d:4e:32:bb:06:4f:1f:54:c3:6c:
2f:7a:2b:51:6d:e2:a3:e3:da:4f:c9:c6:1b:62:33:
f6:82:47:6e:a1:6f:90:de:63:cb:ad:26:0d:7e:d4:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:B9:D0:FD:5E:42:0C:FF:84:43:25:43:51:91:B6:34:16:04:6F
X509v3 Authority Key Identifier:
keyid:35:E9:9F:34:A1:72:9E:C3:76:EE:98:2D:FB:99:5D:C9:4B:79:99:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NemfNKFynsN27pgt-5ldyUt5mao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aae5d5-05a1-45bd-a640-1869a1df6cb8/1/VZO50P1eQgz_hEMlQ1GRtjQWBG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aae5d5-05a1-45bd-a640-1869a1df6cb8/1/NemfNKFynsN27pgt-5ldyUt5mao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.92.0/22
188.227.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:9d:ae:30:89:62:0c:74:86:fe:fe:b4:c1:02:8d:59:a1:ec:
70:54:75:de:c0:de:6e:1b:2b:ae:92:bf:03:d2:b2:32:a1:b8:
dc:ce:fd:eb:f5:5a:c6:e3:09:b4:0e:44:ac:31:fd:8d:51:59:
ab:a2:77:b1:f4:bc:47:a6:1f:78:fe:6e:72:49:fb:f2:5f:ec:
36:77:ab:ad:2f:4d:e1:c1:05:83:95:50:a8:b5:6a:27:52:7b:
c1:fc:84:38:0d:0a:96:3a:26:27:96:31:40:2f:b8:4f:4b:50:
4a:88:bd:64:b6:ab:7f:fd:ce:db:7b:e6:a3:dc:97:03:e1:b6:
23:86:f1:9e:99:a0:34:0b:37:03:3d:d1:c6:54:3e:c8:3d:e3:
9c:5b:ef:e1:52:be:c1:37:5b:aa:27:04:8b:7f:3d:e4:d8:eb:
f1:8d:42:f2:7a:e9:6c:db:b7:a0:d2:b1:88:b1:f5:b6:c7:d2:
53:48:79:c4:13:b2:2f:c7:62:a0:b6:7e:65:71:b6:f5:51:70:
0b:ba:22:e1:de:84:69:b0:83:f0:1a:35:3e:5c:74:b1:92:48:
74:79:b8:42:43:86:cd:13:13:b2:16:12:a7:da:06:4e:24:4b:
c3:e2:08:23:87:cb:6c:a2:e1:09:f0:4a:f6:c0:a5:f6:87:01:
77:ae:ad:e7
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 28 11:22:04 2023 by rpki-client on console.sobornost.net