Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b41984-0575-4e35-9b23-d8efe8a8591c/1/tP-vs28Gnad7qMBCn43GkcBD7g4.roa
File: tP-vs28Gnad7qMBCn43GkcBD7g4.roa (raw, json)
Hash identifier: Luynv7SzCfNxJQTXUZDRgiMm/nXba6azzgQyANfpQ1w=
Subject key identifier: B4:FF:AF:B3:6F:06:9D:A7:7B:A8:C0:42:9F:8D:C6:91:C0:43:EE:0E
Certificate issuer: /CN=6a417929ea0d4c3697836bd01ed045c3a70f12b7
Certificate serial: 670FFB
Authority key identifier: 6A:41:79:29:EA:0D:4C:36:97:83:6B:D0:1E:D0:45:C3:A7:0F:12:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akF5KeoNTDaXg2vQHtBFw6cPErc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b41984-0575-4e35-9b23-d8efe8a8591c/1/tP-vs28Gnad7qMBCn43GkcBD7g4.roa
Signing time: Tue 01 Mar 2022 12:02:00 +0000
ROA not before: Tue 01 Mar 2022 12:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34219
IP address blocks: 178.255.16.0/22 maxlen: 22
178.255.22.0/24 maxlen: 24
178.255.20.0/23 maxlen: 23
159.253.116.0/23 maxlen: 23
159.253.118.0/24 maxlen: 24
159.253.119.0/24 maxlen: 24
93.94.4.0/23 maxlen: 23
185.2.56.0/22 maxlen: 22
2a03:1e00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6754299 (0x670ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a417929ea0d4c3697836bd01ed045c3a70f12b7
Validity
Not Before: Mar 1 12:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4ffafb36f069da77ba8c0429f8dc691c043ee0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:2b:64:43:62:6d:b3:b3:5c:fd:f1:17:da:
d3:0b:39:b5:1d:41:69:d3:d5:e5:3b:7e:64:3b:52:
1d:24:b7:31:f4:4c:10:38:5a:ee:f2:02:e5:c8:8d:
ee:38:31:59:e8:db:a5:c3:0a:24:ed:43:25:4b:7c:
ca:6a:2e:24:64:39:4e:24:41:eb:0a:0e:12:29:e1:
47:73:a3:20:42:f7:ee:a6:45:84:9f:50:56:40:39:
80:7d:1d:f0:5b:da:06:fb:17:c1:e3:f7:56:c7:56:
c1:32:3f:4d:a2:6e:84:36:7d:a9:01:4a:48:dd:9e:
c4:43:e7:20:56:4b:4f:7b:67:9d:ec:5b:a8:50:6e:
83:16:e1:39:3e:85:32:29:70:ad:ee:42:42:f3:a2:
66:99:db:b1:47:7b:ae:9e:3c:89:2d:e4:49:03:5c:
00:bf:ab:2e:e2:46:84:5a:2d:09:04:be:b7:78:aa:
af:c3:19:99:bb:b1:b0:23:e0:30:be:a7:44:9a:c2:
d9:6f:08:27:c4:e8:6f:fc:26:7f:71:c8:4e:c8:e8:
d6:a1:06:7c:1f:31:f1:80:b9:cc:30:35:dd:d3:3b:
6d:16:7d:43:b1:de:bb:70:68:06:1a:88:52:fc:24:
e5:91:3d:9b:ac:3f:7e:b4:f2:46:9f:fb:ea:e1:38:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FF:AF:B3:6F:06:9D:A7:7B:A8:C0:42:9F:8D:C6:91:C0:43:EE:0E
X509v3 Authority Key Identifier:
keyid:6A:41:79:29:EA:0D:4C:36:97:83:6B:D0:1E:D0:45:C3:A7:0F:12:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akF5KeoNTDaXg2vQHtBFw6cPErc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b41984-0575-4e35-9b23-d8efe8a8591c/1/tP-vs28Gnad7qMBCn43GkcBD7g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b41984-0575-4e35-9b23-d8efe8a8591c/1/akF5KeoNTDaXg2vQHtBFw6cPErc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.4.0/23
159.253.116.0/22
178.255.16.0-178.255.22.255
185.2.56.0/22
IPv6:
2a03:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
7a:22:b7:78:27:0d:57:3c:16:ad:05:c5:09:99:5e:62:16:d5:
ca:58:c9:f9:e7:4d:e7:fc:5e:1a:0f:c2:2a:cd:4f:da:29:f8:
20:12:d8:34:0f:49:78:62:0d:2f:8c:e4:b8:0a:95:f5:a0:ac:
a6:2b:fc:a3:d7:fd:e7:8e:9d:a8:b5:17:34:36:b2:e6:d3:0b:
ef:fa:51:ca:d7:2b:81:62:dd:60:a9:bc:5b:62:2c:9b:84:07:
21:79:af:3e:57:2a:e9:59:30:46:86:22:ca:ba:c3:38:86:dd:
13:cc:73:7e:1d:1a:60:a0:65:3c:3b:cd:0e:ee:34:2f:c1:48:
04:69:8b:43:1f:bb:d7:0d:2a:b8:b0:bc:eb:28:22:05:d3:c2:
4c:9e:ac:5f:d7:22:0f:bc:13:96:2a:70:42:23:46:e8:76:47:
c5:3d:3c:e8:d2:23:26:35:ef:da:cc:60:a8:de:80:06:c2:52:
07:9f:c8:00:d9:d6:b5:04:29:ae:6e:a4:c9:6e:56:ba:54:da:
ed:8e:9c:8a:b0:25:f5:6b:25:3d:b1:48:84:13:06:92:9f:a2:
cc:bf:5e:f3:71:8e:5f:3a:1a:9d:f8:1e:81:3a:49:8b:d2:c0:
01:6a:6e:e6:46:4e:a0:4a:e1:74:53:8d:2c:30:8a:bc:e5:1f:
4e:18:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net