Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/f3l5kZ9ik1rbK9hUyh_-TsQtT4s.roa
File: f3l5kZ9ik1rbK9hUyh_-TsQtT4s.roa (raw, json)
Hash identifier: PLBts8GEyLvh4R2LaX9Zs1wTqGWoq434NK3VM0kGRPQ=
Subject key identifier: 7F:79:79:91:9F:62:93:5A:DB:2B:D8:54:CA:1F:FE:4E:C4:2D:4F:8B
Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Certificate serial: 018F6947B00B2DC25F86111D7E42D5738A06
Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/f3l5kZ9ik1rbK9hUyh_-TsQtT4s.roa
Signing time: Sat 11 May 2024 20:10:56 +0000
ROA not before: Sat 11 May 2024 20:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12840
IP address blocks: 212.109.96.0/20 maxlen: 20
212.109.96.0/24 maxlen: 24
212.109.98.0/24 maxlen: 24
212.109.107.0/24 maxlen: 24
212.109.112.0/22 maxlen: 22
212.109.112.0/24 maxlen: 24
212.109.113.0/24 maxlen: 24
212.109.114.0/24 maxlen: 24
212.109.115.0/24 maxlen: 24
212.109.120.0/23 maxlen: 23
212.109.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:47:b0:0b:2d:c2:5f:86:11:1d:7e:42:d5:73:8a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Validity
Not Before: May 11 20:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7979919f62935adb2bd854ca1ffe4ec42d4f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:68:cd:44:6a:41:df:a3:d7:38:f5:73:19:
73:b5:54:76:ee:08:74:ff:cd:9d:6c:18:99:2b:41:
f0:15:bd:46:1a:4d:73:9c:c2:34:86:35:cf:39:20:
94:d6:95:84:b6:e8:7c:f9:d3:fc:a8:7c:eb:53:8f:
18:90:a1:25:a0:59:b6:de:87:f5:86:13:f5:ec:a1:
41:87:a7:f0:36:2f:6a:52:d5:71:cb:cc:ba:d0:83:
77:24:b0:57:de:cb:45:43:44:52:2f:fa:bd:2c:50:
6d:c3:61:73:04:99:8b:4e:4f:7b:b7:06:3e:87:b4:
bb:b4:74:88:f2:79:8c:72:81:30:ab:8f:8e:1d:95:
d0:7d:38:99:23:be:aa:33:e5:6f:a6:de:27:4a:b3:
70:2a:95:9c:93:78:56:91:26:f5:a5:c6:72:f0:e3:
fd:f9:19:80:87:7b:48:e9:f9:0c:87:84:e4:b3:e9:
23:b0:6a:02:7b:f4:7f:66:f5:5b:4c:ea:cd:0c:e5:
6c:93:d2:4b:90:cf:c2:92:00:03:5e:54:44:83:76:
6a:5f:57:9a:07:41:48:aa:72:fb:eb:a1:09:67:78:
1a:96:06:64:8c:8b:7c:ae:b2:11:e7:3e:77:e1:6d:
e6:d5:79:25:27:f3:70:63:7a:b6:45:8f:4e:1d:ad:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:79:91:9F:62:93:5A:DB:2B:D8:54:CA:1F:FE:4E:C4:2D:4F:8B
X509v3 Authority Key Identifier:
keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/f3l5kZ9ik1rbK9hUyh_-TsQtT4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.96.0-212.109.115.255
212.109.120.0/23
212.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:69:a0:e1:31:0d:14:5d:5f:9c:0c:21:c8:68:19:a7:e0:e8:
3b:38:27:44:5c:bc:d5:1e:b4:4f:bf:b3:d1:96:d3:e7:b5:33:
dc:77:7a:76:fe:71:f1:56:3b:41:bc:d1:7e:ed:58:00:c2:7e:
21:c5:0f:5f:f5:a5:fe:af:d0:3a:05:46:00:60:03:64:ba:f2:
be:5e:78:94:10:9f:86:37:bb:92:a0:e6:cf:36:4f:02:64:a7:
75:45:56:59:2c:cb:04:93:94:68:81:90:2c:5d:dd:28:2f:5e:
26:e0:a2:02:95:64:84:3e:5b:08:90:36:07:7d:a4:67:1b:fd:
b0:b3:a9:1d:96:44:51:2f:71:af:25:fe:1b:7e:ab:76:3d:9c:
52:0b:51:20:78:79:e6:18:ad:76:31:df:f5:e8:18:12:b3:a1:
22:20:b9:cb:3f:c1:cd:5b:d6:ec:46:78:0d:0f:54:32:42:a1:
4c:98:78:98:5b:c9:ed:8a:3a:a9:dc:de:e4:b2:29:8a:dd:54:
6c:04:db:80:34:30:5f:45:f7:7d:da:dd:7e:70:78:ee:df:58:
ad:39:35:20:36:cd:60:96:47:56:04:f7:c5:f6:8f:7b:a6:74:
48:7e:2b:88:72:96:e1:ab:f5:fe:bf:28:56:c0:d0:0e:d6:78:
73:bb:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:37:07 2024 by rpki-client on console.sobornost.net