Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/cc3E9NYT3zK9RahzYzm_461KSh4.roa
File: cc3E9NYT3zK9RahzYzm_461KSh4.roa (raw, json)
Hash identifier: RxJk7TmxcGC2Xrzy7U56keNeUx9+7sEoihgPsaroPdU=
Subject key identifier: 71:CD:C4:F4:D6:13:DF:32:BD:45:A8:73:63:39:BF:E3:AD:4A:4A:1E
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01916F2B945B0AED3BE56F1075DFCBE4AA1D
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/cc3E9NYT3zK9RahzYzm_461KSh4.roa
Signing time: Tue 20 Aug 2024 09:43:32 +0000
ROA not before: Tue 20 Aug 2024 09:43:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.36.0/24 maxlen: 24
185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
2a06:8f00::/30 maxlen: 30
2a06:8f04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:2b:94:5b:0a:ed:3b:e5:6f:10:75:df:cb:e4:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Aug 20 09:43:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71cdc4f4d613df32bd45a8736339bfe3ad4a4a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:7b:10:4a:bd:59:a4:4e:7b:5b:44:05:48:
55:99:b5:01:0d:fa:1c:68:16:2a:64:14:a6:b2:0c:
c0:54:c2:ab:07:c9:2c:3c:5f:bd:c6:4c:65:dd:47:
86:d5:27:f0:0a:41:d2:66:1b:5f:f7:35:26:2c:dc:
aa:5f:92:86:55:cc:f9:6c:a4:05:4d:c5:4e:1a:ed:
24:28:f8:1c:2d:41:90:28:49:2a:f8:4e:8c:39:90:
e9:dd:ca:93:12:a9:d7:26:7e:20:a1:7a:c8:a2:af:
39:f6:43:ce:41:30:60:8d:a4:e9:8e:52:97:c8:c4:
31:4c:b6:3f:7c:8b:2a:1b:2e:85:93:82:68:a9:43:
37:8e:3a:48:76:85:2c:79:fa:36:22:ae:05:e8:cb:
83:21:d3:20:6b:f6:99:0f:76:c4:d8:d2:9f:78:5c:
41:36:81:e3:cd:51:84:19:d1:fc:14:13:85:00:db:
6a:91:24:8a:68:5a:40:74:67:97:53:b7:05:1c:c8:
a2:db:d6:71:b4:3e:8f:22:74:9d:9a:2b:65:cb:80:
73:3a:4b:64:3f:78:6e:f0:09:8f:35:e5:57:a1:22:
3f:97:91:3e:df:69:04:e9:e2:39:f5:bd:5b:8b:d2:
a5:85:66:d8:99:ef:4d:9c:06:c7:53:cc:2b:3a:32:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:C4:F4:D6:13:DF:32:BD:45:A8:73:63:39:BF:E3:AD:4A:4A:1E
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/cc3E9NYT3zK9RahzYzm_461KSh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0-185.120.38.255
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
81:c2:75:0b:c4:15:ae:fb:72:e6:06:4a:74:de:58:aa:ae:f4:
ab:3f:59:91:7c:82:50:4a:fb:b6:ff:9b:c8:b7:90:f0:cc:6e:
4f:c2:64:c9:18:a4:6a:9e:ef:45:4c:66:e6:e1:8f:e7:99:cc:
15:09:16:4f:43:8c:4e:21:e4:65:3e:c2:3c:ea:af:b3:37:8f:
79:e2:76:4e:82:6b:44:16:79:74:05:35:c6:9e:9a:27:5e:6e:
9c:5c:3c:47:12:32:29:92:2f:13:2a:ff:39:d4:66:9f:03:79:
ef:e4:4e:fc:28:c1:c5:49:d2:de:e1:18:e4:5b:7e:a3:41:22:
f5:97:a6:69:95:44:2c:14:75:a9:37:6c:c1:98:f7:2a:b5:b1:
17:47:86:97:96:63:5a:e5:1e:81:cc:d6:9a:e6:c0:12:f7:34:
c5:4e:4d:ae:a8:4a:80:7c:36:a4:78:24:d4:f6:ea:32:38:46:
99:50:25:b6:03:70:27:3a:21:9b:ac:a7:b1:f1:cd:8f:cc:c9:
3c:3f:ff:92:23:d9:01:80:93:20:a4:89:4f:aa:f7:6b:91:0e:
f9:f0:01:0c:1e:8d:54:fa:ed:f8:80:fe:c5:79:e5:c7:f2:5b:
cc:f8:6b:69:c2:3c:c6:a6:ed:ea:da:75:4c:f0:64:25:47:a1:
75:38:96:90
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZFvK5RbCu075W8Qdd/L5KodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjQwODIwMDk0MzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWNkYzRmNGQ2MTNkZjMyYmQ0NWE4NzM2MzM5YmZlM2FkNGE0YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ip7EEq9WaROe1tEBUhVmbUBDfoc
aBYqZBSmsgzAVMKrB8ksPF+9xkxl3UeG1SfwCkHSZhtf9zUmLNyqX5KGVcz5bKQF
TcVOGu0kKPgcLUGQKEkq+E6MOZDp3cqTEqnXJn4goXrIoq859kPOQTBgjaTpjlKX
yMQxTLY/fIsqGy6Fk4JoqUM3jjpIdoUsefo2Iq4F6MuDIdMga/aZD3bE2NKfeFxB
NoHjzVGEGdH8FBOFANtqkSSKaFpAdGeXU7cFHMii29ZxtD6PInSdmitly4BzOktk
P3hu8AmPNeVXoSI/l5E+32kE6eI59b1bi9KlhWbYme9NnAbHU8wrOjK1xQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHHNxPTWE98yvUWoc2M5v+OtSkoeMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvY2MzRTlOWVQzeks5UmFoell6bV80NjFLU2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5eCQD
BAC5eCYwDQQCAAIwBwMFAyoGjwAwDQYJKoZIhvcNAQELBQADggEBAIHCdQvEFa77
cuYGSnTeWKqu9Ks/WZF8glBK+7b/m8i3kPDMbk/CZMkYpGqe70VMZubhj+eZzBUJ
Fk9DjE4h5GU+wjzqr7M3j3nidk6Ca0QWeXQFNcaemidebpxcPEcSMimSLxMq/znU
Zp8Dee/kTvwowcVJ0t7hGORbfqNBIvWXpmmVRCwUdak3bMGY9yq1sRdHhpeWY1rl
HoHM1prmwBL3NMVOTa6oSoB8NqR4JNT26jI4RplQJbYDcCc6IZusp7HxzY/MyTw/
/5Ij2QGAkyCkiU+q92uRDvnwAQwejVT67fiA/sV55cfyW8z4a2nCPMam7eradUzw
ZCVHoXU4lpA=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net