Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/hazOCirNkrTL2l8cgG5qxnW_kEY.roa
File: hazOCirNkrTL2l8cgG5qxnW_kEY.roa (raw, json)
Hash identifier: nVm5m+Ij5R93KiDmeAcpq8WodWb7k0x14GTFpoG58YQ=
Subject key identifier: 85:AC:CE:0A:2A:CD:92:B4:CB:DA:5F:1C:80:6E:6A:C6:75:BF:90:46
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 018D401FA347A65A536ADE44DF3F84EE0BD0
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/hazOCirNkrTL2l8cgG5qxnW_kEY.roa
Signing time: Thu 25 Jan 2024 10:17:11 +0000
ROA not before: Thu 25 Jan 2024 10:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31383
IP address blocks: 78.41.72.0/21 maxlen: 21
78.41.72.0/24 maxlen: 24
78.41.73.0/24 maxlen: 24
78.41.74.0/24 maxlen: 24
78.41.75.0/24 maxlen: 24
78.41.76.0/24 maxlen: 24
78.41.77.0/24 maxlen: 24
78.41.78.0/24 maxlen: 24
78.41.79.0/24 maxlen: 24
83.137.16.0/21 maxlen: 21
83.137.16.0/24 maxlen: 24
83.137.17.0/24 maxlen: 24
83.137.18.0/24 maxlen: 24
83.137.19.0/24 maxlen: 24
83.137.20.0/24 maxlen: 24
83.137.21.0/24 maxlen: 24
83.137.22.0/24 maxlen: 24
83.137.23.0/24 maxlen: 24
2001:4038::/32 maxlen: 32
2001:4038::/33 maxlen: 33
2001:4038:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:1f:a3:47:a6:5a:53:6a:de:44:df:3f:84:ee:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Jan 25 10:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85acce0a2acd92b4cbda5f1c806e6ac675bf9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:2b:e3:57:bf:91:d2:94:ce:ae:75:a8:db:
3b:c3:ed:d9:10:5a:3f:eb:09:13:96:13:d6:a2:e8:
c6:ab:53:f1:43:21:09:94:da:02:c2:b0:3c:27:0f:
b7:c3:03:b8:1f:6c:e7:47:5a:a6:76:85:97:ec:aa:
48:a7:17:ab:19:ca:2b:55:2d:1a:09:ae:be:67:61:
fc:87:46:2c:bd:c2:87:dd:df:7e:0e:f0:05:b4:b4:
ba:41:33:63:82:ac:ba:f1:98:7c:14:ac:bb:fa:f9:
11:58:73:ea:b6:96:a3:18:7f:f7:17:e4:e0:00:08:
cf:35:7d:94:71:69:00:c5:12:cf:1e:5d:ad:57:91:
27:6c:23:3c:23:9b:ae:c9:86:cf:96:20:01:05:74:
4f:96:48:27:fe:07:d5:37:89:27:2b:f8:03:4a:1c:
d9:28:5a:d2:da:87:a8:80:0b:14:4d:46:54:ed:53:
f8:d7:3d:8e:44:9d:a1:58:13:2c:3a:45:76:e9:34:
0c:f6:78:03:3a:20:b4:79:7e:49:70:13:41:d0:65:
a5:6f:98:89:47:87:0b:48:ad:76:7a:d8:f1:af:12:
6e:2f:cd:1f:67:16:eb:9e:7a:7f:1e:ff:bd:60:ff:
d6:c7:a0:1a:f8:75:4a:3d:31:c8:03:a1:80:9e:d5:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:CE:0A:2A:CD:92:B4:CB:DA:5F:1C:80:6E:6A:C6:75:BF:90:46
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/hazOCirNkrTL2l8cgG5qxnW_kEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.72.0/21
83.137.16.0/21
IPv6:
2001:4038::/32
Signature Algorithm: sha256WithRSAEncryption
06:3c:07:31:a8:95:7f:89:f1:db:71:da:8d:8e:59:46:72:55:
c0:3b:21:7e:51:3a:c3:9a:ad:83:e9:2c:ff:05:92:74:30:40:
b1:a1:1d:50:43:97:4f:28:bd:91:fe:ee:16:43:9c:10:45:54:
cb:1f:5e:87:8c:a0:fd:a6:42:cd:b5:8d:14:90:60:90:af:d4:
03:04:00:5f:6b:dc:57:b5:21:32:68:f3:5a:c1:ca:6f:93:3f:
8c:c5:0b:33:64:51:b6:30:ab:6b:10:97:34:54:bd:95:bf:06:
16:87:4a:71:0e:3e:f6:1e:a7:67:df:6a:7b:b6:7e:3f:ab:aa:
b6:59:cd:cf:6e:24:55:dc:0b:b9:3b:3e:ba:51:f7:c0:b2:8c:
e9:76:6d:61:7a:f7:db:ee:77:e0:1f:c2:62:04:26:0e:16:c8:
a7:71:49:41:b9:ef:5f:77:7c:57:52:17:84:02:b0:82:b4:ab:
79:e1:ac:60:25:4a:d9:68:82:60:da:24:a0:5c:69:23:b5:65:
cd:b1:51:1d:a0:f2:d1:02:de:ad:c1:ff:ab:1f:07:2d:23:c9:
f6:36:77:cc:70:1e:4f:70:c5:3b:2e:e6:52:6a:c8:2d:79:1d:
ec:48:5b:2b:c4:a3:fa:d4:2f:47:82:33:cc:d7:4f:bd:d7:8b:
56:db:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net