Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/szfJzrRM0SHqwyW-S_mE8YsZ03g.roa
File: szfJzrRM0SHqwyW-S_mE8YsZ03g.roa (raw, json)
Hash identifier: td/spxtYIvgZ71jrLD/BDm1s+xk3sQmhZ8KpYsPLw6o=
Subject key identifier: B3:37:C9:CE:B4:4C:D1:21:EA:C3:25:BE:4B:F9:84:F1:8B:19:D3:78
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 018E188F322C02A6932DB26EA3C7993D90C8
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/szfJzrRM0SHqwyW-S_mE8YsZ03g.roa
Signing time: Thu 07 Mar 2024 10:57:01 +0000
ROA not before: Thu 07 Mar 2024 10:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 192.115.0.0/21 maxlen: 24
192.115.4.0/24 maxlen: 24
192.115.7.0/24 maxlen: 24
192.115.208.0/24 maxlen: 24
192.115.210.0/23 maxlen: 23
2a01:4280:2::/48 maxlen: 64
2a01:4280:7::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:8f:32:2c:02:a6:93:2d:b2:6e:a3:c7:99:3d:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Mar 7 10:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b337c9ceb44cd121eac325be4bf984f18b19d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:3a:27:30:90:9a:3a:cd:3d:fd:e1:cc:70:
8e:70:23:c1:fb:8a:26:4a:71:28:df:d0:08:1a:3a:
ed:6e:81:58:8a:ef:4c:52:c3:c7:42:13:a0:5f:11:
06:bc:b8:6d:2f:16:24:6e:33:e7:e8:37:4e:d6:51:
a6:d3:15:f0:42:7e:63:b9:ec:5d:ce:e2:ff:37:05:
d2:8f:f0:dd:41:d4:c9:37:01:ee:4c:ff:8e:2c:79:
22:f8:e3:be:8a:7e:9c:95:c3:1f:b4:8c:53:08:fd:
20:4e:0a:c1:c1:96:34:d0:33:6c:72:d8:af:9d:29:
e3:a5:55:1c:31:60:66:55:72:23:92:be:b1:3b:54:
6b:4b:b0:95:70:fd:2c:68:0c:b2:31:7e:4e:dd:4f:
63:b6:39:2b:72:f6:53:75:e5:21:b8:5a:6e:95:12:
3e:be:c3:13:76:32:ab:75:4f:a7:0b:93:eb:ca:0f:
aa:2d:ee:67:ce:ab:7e:b0:df:bd:5f:66:f9:7d:4b:
3d:17:1e:70:87:ae:82:41:02:08:bb:f5:25:38:52:
16:1c:6a:95:e1:14:2a:43:cb:70:03:1f:15:50:98:
5a:8f:6a:3f:cb:ae:74:3d:ee:8c:dd:1c:38:2d:41:
49:4f:77:a0:84:91:38:36:a2:f8:58:4d:49:53:af:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:C9:CE:B4:4C:D1:21:EA:C3:25:BE:4B:F9:84:F1:8B:19:D3:78
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/szfJzrRM0SHqwyW-S_mE8YsZ03g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0/21
192.115.208.0/24
192.115.210.0/23
IPv6:
2a01:4280:2::/48
2a01:4280:7::/48
Signature Algorithm: sha256WithRSAEncryption
1b:14:b7:d0:04:a1:68:8c:c1:01:38:b0:a6:1f:51:8f:59:e6:
c2:35:f7:9e:69:d4:97:e2:ed:8a:f7:04:b8:e6:12:38:1f:a7:
e9:23:a4:ab:2e:0b:cb:51:e8:1a:83:e3:e5:5b:a5:aa:96:3f:
36:9e:ff:ef:fd:5a:e8:ea:4b:db:ca:d1:4f:43:99:34:a1:8f:
75:55:88:df:04:1b:6d:69:35:01:c1:8e:2e:2b:5a:1a:b7:85:
eb:cc:e8:ac:02:46:0b:d5:08:6f:f1:d9:d1:bc:a8:0c:1b:a4:
ba:f9:ec:61:87:b4:72:9a:e3:ec:46:61:0c:7d:e8:a8:56:45:
68:c2:5f:81:8e:0e:57:9c:d0:b7:9d:af:35:fa:37:98:fb:b9:
b1:d7:3d:8c:79:f7:cd:f8:cb:2e:22:a0:62:ec:81:16:b2:86:
82:15:9a:54:fd:4d:df:88:e9:03:fb:1b:c7:36:f6:04:2d:bc:
b7:bb:e5:ff:e9:b9:88:96:93:78:21:c5:15:f3:64:98:cd:4f:
d4:5e:8c:80:8a:e5:9d:a2:b4:1b:a5:4f:11:8a:44:b2:fc:76:
16:0a:63:89:8d:68:91:fb:1d:e2:87:39:8f:8f:1e:76:02:e3:
d4:ba:98:d6:d3:e6:ab:a5:22:5a:5c:61:ce:49:91:dd:49:1e:
92:2b:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:40 2024 by rpki-client on console.sobornost.net