Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/bw-9sNysRfacOueXXwLDxvIEnsc.roa
File: bw-9sNysRfacOueXXwLDxvIEnsc.roa (raw, json)
Hash identifier: tNLR8zOK+WmMJAck4JVEU+BnHrGwXEVE6OqQ//70pL4=
Subject key identifier: 6F:0F:BD:B0:DC:AC:45:F6:9C:3A:E7:97:5F:02:C3:C6:F2:04:9E:C7
Certificate issuer: /CN=ece7950d851bae7d7e2547fb981f42724afe3d79
Certificate serial: 1E921E
Authority key identifier: EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/bw-9sNysRfacOueXXwLDxvIEnsc.roa
Signing time: Sat 01 Jan 2022 01:03:28 +0000
ROA not before: Sat 01 Jan 2022 01:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44056
IP address blocks: 176.125.192.0/19 maxlen: 24
31.135.224.0/20 maxlen: 24
46.148.128.0/20 maxlen: 24
195.2.238.0/23 maxlen: 24
109.196.64.0/20 maxlen: 24
91.195.130.0/23 maxlen: 24
83.97.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003486 (0x1e921e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece7950d851bae7d7e2547fb981f42724afe3d79
Validity
Not Before: Jan 1 01:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f0fbdb0dcac45f69c3ae7975f02c3c6f2049ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:86:cd:c3:90:1c:ab:7c:a1:3f:ca:e6:40:
25:fc:0f:2c:4d:9e:cd:ed:2f:49:5a:83:a1:fe:7d:
cc:51:63:65:c7:bc:e4:7a:bb:14:95:f0:94:b6:70:
7a:74:71:50:66:9f:fb:a7:0f:6a:0c:cb:5f:b3:fa:
c5:ca:b9:11:07:60:36:d3:07:dd:f1:9c:14:23:dd:
2a:ba:4f:78:f6:e3:e5:0b:64:7e:48:b3:b7:ed:d2:
97:67:10:4f:99:a2:87:10:50:ad:9c:8a:f5:08:5b:
bb:b5:67:74:96:e8:f9:69:57:72:18:53:24:8a:20:
f9:01:90:6e:50:15:cf:10:d0:c5:60:67:01:e3:f6:
48:aa:60:78:c7:9d:f2:0a:c5:ae:bc:57:28:77:34:
df:e1:f1:d5:b5:42:ca:34:23:51:f4:63:53:e1:01:
67:d8:e3:20:a6:72:a5:9a:72:e8:78:10:46:9d:66:
c3:c2:5f:42:0a:ef:d7:73:60:f7:4d:27:5f:92:eb:
27:98:e8:20:e2:87:00:a4:7f:3d:8d:9e:e5:a0:0d:
73:18:b8:b0:42:ff:d1:17:7c:b9:60:33:20:c4:08:
c5:8e:13:11:a2:dc:4b:52:18:77:91:35:96:fe:35:
1e:ac:05:dd:0a:4c:49:c8:ac:09:4a:10:f8:c9:3b:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:BD:B0:DC:AC:45:F6:9C:3A:E7:97:5F:02:C3:C6:F2:04:9E:C7
X509v3 Authority Key Identifier:
keyid:EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/bw-9sNysRfacOueXXwLDxvIEnsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
Signature Algorithm: sha256WithRSAEncryption
63:22:dc:bc:f4:fb:c8:92:c0:a9:b4:4a:1d:22:c3:24:8c:a0:
65:0b:fc:fa:d1:41:04:ea:bb:ff:d5:1e:55:3d:60:95:ba:28:
4b:a8:46:74:a6:6e:37:fa:b8:06:11:66:94:b7:21:d6:9f:07:
6d:7c:4c:b6:ce:ae:2e:b8:35:d0:e0:86:c3:db:76:e4:48:29:
3a:9e:af:0e:b5:a2:ad:be:30:d9:84:5b:dd:f9:4e:93:a7:cb:
79:4c:2b:c3:a7:6c:ef:ab:d4:94:d3:0f:08:ea:48:d4:b9:87:
35:ef:9f:05:46:ed:f8:f8:82:a0:e7:99:20:e7:16:c6:81:8a:
c3:b5:e8:34:7d:7b:da:10:32:73:53:e2:c3:f3:5e:d3:f1:c7:
d6:24:7f:f8:fe:c7:9c:ac:6e:e5:34:e0:cd:14:e0:31:6a:f9:
43:21:b0:2e:fb:b1:78:46:44:64:2e:52:36:4c:6a:8c:5e:cb:
b8:61:81:82:01:99:73:ba:af:f3:ad:b1:01:39:80:41:6e:a9:
e2:87:ca:b0:51:af:86:53:7e:cf:f3:c6:5d:54:07:79:0d:6f:
1e:d9:cf:5a:cf:6d:68:15:8f:a3:35:7e:27:91:64:f5:54:b4:
01:fd:01:e0:75:53:a7:05:2f:40:84:02:30:5b:f9:28:bf:e4:
15:d1:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net