Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/Pj32KPVSRQWJZntg-SMU6e-Ds_Y.roa
File: Pj32KPVSRQWJZntg-SMU6e-Ds_Y.roa (raw, json)
Hash identifier: Ia4gVvObtDqO+PqwUnBDPu4v5WcNfUNStCL6qwv2AW0=
Subject key identifier: 3E:3D:F6:28:F5:52:45:05:89:66:7B:60:F9:23:14:E9:EF:83:B3:F6
Certificate issuer: /CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Certificate serial: 017F30DE
Authority key identifier: 37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/Pj32KPVSRQWJZntg-SMU6e-Ds_Y.roa
Signing time: Sat 01 Jan 2022 05:05:30 +0000
ROA not before: Sat 01 Jan 2022 05:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210531
IP address blocks: 185.217.136.0/24 maxlen: 24
185.217.137.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25112798 (0x17f30de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Validity
Not Before: Jan 1 05:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e3df628f552450589667b60f92314e9ef83b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:9e:6d:4c:eb:78:34:ea:c3:6a:3c:fe:a5:
6c:49:ce:1f:d4:35:09:64:d1:01:80:5d:f5:47:02:
40:dd:69:e8:bd:1c:69:8d:79:bd:36:f7:62:d5:eb:
e4:09:5a:2c:eb:92:70:e5:61:65:ba:e3:f1:9d:0e:
2f:a3:2c:e6:ff:db:69:8a:8c:41:23:35:b2:7d:88:
5c:95:15:d5:87:c5:c3:d0:3d:80:97:55:5c:5c:fd:
d9:b9:cc:ae:c6:6b:04:5d:62:c0:53:3a:29:6d:c0:
39:ae:5f:ae:b3:3c:01:9b:e8:19:4a:16:77:57:ed:
82:50:a8:c3:cc:59:e3:cc:28:26:ea:8b:f8:8a:04:
32:b6:d9:9b:dc:12:9e:f6:2a:96:c0:c9:83:e7:c1:
1e:a4:7e:08:bb:c1:45:6d:91:08:af:20:5f:70:b9:
2f:73:ce:b3:0b:3c:0c:24:7a:e9:11:12:3f:2a:7e:
c0:2e:7d:c6:d7:e4:17:75:31:f9:70:ea:df:ba:c6:
21:5a:69:ed:c8:08:48:8d:2b:50:c6:6a:63:df:4b:
6c:a6:ab:13:9b:b0:02:69:10:1d:fa:24:73:49:2b:
68:fd:e7:d7:c1:d6:5e:07:9d:3d:26:f3:05:6f:a3:
7b:eb:c1:41:a6:1f:85:a4:fc:88:7e:2f:6c:f0:7b:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:F6:28:F5:52:45:05:89:66:7B:60:F9:23:14:E9:EF:83:B3:F6
X509v3 Authority Key Identifier:
keyid:37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/Pj32KPVSRQWJZntg-SMU6e-Ds_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/N4i9RNUBULUSk6XqUlVSjb_Av1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.146.0/23
185.217.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:17:b8:09:58:1c:28:b8:46:af:19:19:17:d0:f4:d0:a8:7e:
fd:c2:d9:7f:13:d0:00:d0:b6:1b:47:59:fd:62:f3:41:d4:53:
b3:7e:26:07:f2:72:0a:fa:2b:d4:6e:b4:9f:68:e4:bb:0c:1e:
1b:6a:22:0f:a2:0d:51:7f:86:35:57:43:fe:4b:f1:24:f1:9b:
52:34:b2:12:49:d8:0f:34:cb:ac:6a:18:ec:fe:42:4b:86:2a:
14:23:14:80:87:aa:b5:c4:e4:04:b6:b8:38:5a:ae:f4:ee:d3:
ba:a4:b6:85:5b:31:bb:0e:b4:39:e7:98:b9:fc:ba:73:b1:b3:
9a:73:ca:a7:cc:2c:fd:57:30:e2:07:7b:1b:31:f1:19:0c:d0:
49:39:fe:dd:b8:bb:58:82:b9:6d:1f:bf:c5:72:4a:fa:39:70:
7b:f1:de:34:11:0c:79:84:c9:6c:6c:a1:c3:9b:5c:46:24:7d:
33:48:53:43:5e:81:77:96:fb:ca:c8:40:80:db:2f:f8:17:9d:
18:aa:8d:56:00:50:00:6b:95:88:85:25:09:8b:d9:66:2d:30:
e9:e6:c5:ce:c2:33:5b:4e:9c:de:e3:a4:54:9e:eb:4d:fd:12:
b7:4c:83:22:56:b6:52:6a:b4:f2:8b:46:ea:0a:20:4e:64:f8:
70:f7:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net