Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/3OFlVWdFNwLx0P8qp5KfzszVMXs.roa
File: 3OFlVWdFNwLx0P8qp5KfzszVMXs.roa (raw, json)
Hash identifier: ECI0P51Hu2AzbRpD6pirGAX3/qhDZT0+ZCVCsgOWPxE=
Subject key identifier: DC:E1:65:55:67:45:37:02:F1:D0:FF:2A:A7:92:9F:CE:CC:D5:31:7B
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 018CC5DCF3F943D9E9A582F1F6D8C1ADEA6D
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/3OFlVWdFNwLx0P8qp5KfzszVMXs.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21235
IP address blocks: 193.108.193.0/24 maxlen: 24
185.65.4.0/22 maxlen: 22
2a03:16e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f3:f9:43:d9:e9:a5:82:f1:f6:d8:c1:ad:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce1655567453702f1d0ff2aa7929fceccd5317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:cf:bc:b6:5c:75:ee:23:9f:b0:93:a9:34:
37:83:df:5c:fb:21:cb:e2:6e:48:33:a7:da:c0:64:
3e:38:10:55:10:55:bf:65:af:a2:8c:2a:d3:03:85:
7a:73:5a:53:5b:3b:a3:3b:09:48:f3:de:7c:74:22:
04:b4:a0:1a:7d:73:20:b6:65:20:8a:c0:51:93:4c:
66:15:6d:36:4b:bf:48:9f:44:24:fa:13:f9:61:81:
4e:8a:64:bc:c3:fd:b3:a1:b8:34:a3:8e:68:44:83:
04:c8:1f:96:39:97:fe:ef:17:0d:3e:ee:a3:a3:c9:
d3:0a:fd:4e:3f:c4:21:04:62:de:24:1b:bd:30:6f:
ec:13:21:93:32:48:15:17:35:25:69:78:28:0f:f3:
8b:5a:5c:25:ca:72:30:e5:ca:6a:ec:0c:b4:68:13:
c7:a4:ac:66:a5:bf:9c:dc:86:77:68:38:74:87:52:
93:05:da:eb:29:7e:4a:ae:f5:c7:7d:a1:76:45:ec:
ac:cf:e4:1b:03:a2:ea:89:70:41:ee:cb:45:4a:c2:
b9:62:40:aa:75:4a:a7:7f:ea:0a:f0:10:36:d7:d4:
19:72:4d:26:80:e3:50:05:21:56:8a:70:24:ef:95:
e3:44:b2:c8:8f:a3:b6:72:9b:9c:bc:e2:e5:1c:7f:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:65:55:67:45:37:02:F1:D0:FF:2A:A7:92:9F:CE:CC:D5:31:7B
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/3OFlVWdFNwLx0P8qp5KfzszVMXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.4.0/22
193.108.193.0/24
IPv6:
2a03:16e0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:cd:0f:b3:bc:14:5d:32:a8:6c:4f:f8:12:09:b7:98:bc:09:
44:3f:10:2e:b1:85:9f:07:85:c8:62:07:45:05:c6:c6:04:93:
3c:fd:06:28:f4:9f:e0:65:52:35:dd:7f:47:3a:65:7d:d3:ea:
1d:30:47:5e:56:7a:1f:0d:f1:c5:23:2d:e4:d5:2c:1a:81:fd:
a2:27:21:d8:18:49:78:35:9c:0b:3f:b8:6c:29:b4:d1:c5:b7:
96:55:5b:3a:ad:a8:99:36:5c:a1:06:60:ad:5a:f7:a3:92:57:
5e:27:e8:a8:2f:5f:f9:55:78:1a:19:a3:4c:74:e8:3d:1a:74:
fe:fb:4f:b6:ba:a5:b7:c6:f0:72:b5:a0:5f:56:9b:c6:41:cb:
90:91:2a:06:ce:e1:76:40:ea:4e:6a:5b:fe:1e:b9:59:eb:69:
90:5e:8d:f1:4e:50:d5:72:9c:d3:cf:8b:56:14:87:ff:42:c7:
21:d0:de:fd:b8:f7:6b:a0:eb:c9:b1:b1:c6:5b:0f:41:df:ba:
18:62:45:a4:6a:b2:fa:c8:6b:5e:69:bf:71:5d:ad:43:69:7e:
ae:c5:3d:83:35:11:2a:fc:62:9a:a7:39:8e:26:5b:c1:3a:56:
fe:fd:82:6e:6c:a8:b3:12:d3:51:cd:f4:5b:03:29:8b:0d:ba:
38:19:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:28 2024 by rpki-client on console.sobornost.net