Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/V3cs-iRD6dnteVFxhqBOeP2wGbc.roa
File: V3cs-iRD6dnteVFxhqBOeP2wGbc.roa (raw, json)
Hash identifier: AOmNjT42YuK8VlBIVb24+kZE0vVAzBXx9XO8GoeCaRo=
Subject key identifier: 57:77:2C:FA:24:43:E9:D9:ED:79:51:71:86:A0:4E:78:FD:B0:19:B7
Certificate issuer: /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial: 018CC64A3AD863380B7B95FB37692E183618
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/V3cs-iRD6dnteVFxhqBOeP2wGbc.roa
Signing time: Mon 01 Jan 2024 18:30:02 +0000
ROA not before: Mon 01 Jan 2024 18:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35710
IP address blocks: 193.111.100.0/22 maxlen: 24
45.84.32.0/22 maxlen: 24
91.132.200.0/22 maxlen: 24
2a12:13c0::/29 maxlen: 32
2a09:d180::/29 maxlen: 32
2a0e:9580::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:3a:d8:63:38:0b:7b:95:fb:37:69:2e:18:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Validity
Not Before: Jan 1 18:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57772cfa2443e9d9ed79517186a04e78fdb019b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:b6:7f:60:db:d1:88:3d:8a:91:8d:40:67:
43:ca:10:7b:c7:28:69:a7:a0:7a:17:88:96:96:db:
ec:1c:58:a1:b3:44:48:b1:72:1a:46:69:14:03:e7:
f7:dd:40:fb:ea:de:4c:0c:21:e7:53:fd:2b:dc:6d:
89:43:63:1c:88:aa:7d:b7:62:9a:c2:28:62:c9:95:
f6:c3:7e:24:98:18:30:28:b1:95:10:93:9c:63:9a:
ba:53:e5:81:07:de:b8:c2:a7:6f:eb:fb:de:7d:82:
b2:e3:f8:94:4b:9c:8b:15:97:46:38:6b:25:92:e8:
45:ae:b9:6e:94:b6:d9:bc:6d:b3:e2:09:d6:a0:28:
11:28:41:6f:68:20:44:81:08:91:de:ac:55:ed:ec:
56:2e:db:ad:c6:ea:d3:06:bb:3e:1a:c5:fe:f4:11:
58:0c:6b:0f:85:3e:e8:0b:09:54:4e:85:ce:93:99:
5c:ba:ca:7d:0f:22:da:94:0d:2b:7d:21:7a:74:e8:
39:e0:d4:9d:4d:03:b5:bc:99:9e:23:c7:c0:41:d4:
12:04:00:b9:5b:1f:74:e0:7c:59:ca:3e:8a:9f:8d:
6b:53:76:26:5b:91:59:28:ca:a5:cb:31:94:39:f7:
b2:86:2b:7b:09:52:1a:88:e2:28:02:95:9e:a5:98:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:2C:FA:24:43:E9:D9:ED:79:51:71:86:A0:4E:78:FD:B0:19:B7
X509v3 Authority Key Identifier:
keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/V3cs-iRD6dnteVFxhqBOeP2wGbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.32.0/22
91.132.200.0/22
193.111.100.0/22
IPv6:
2a09:d180::/29
2a0e:9580::/29
2a12:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:c2:97:48:bd:60:f3:85:cb:04:9f:29:84:1a:72:c8:cc:2f:
6e:7f:c9:84:9d:5a:f2:9c:f4:d4:b8:71:7a:92:cb:e4:ae:8f:
ad:de:c9:85:53:58:8b:6d:54:e8:32:40:30:ca:d9:a5:ee:df:
cc:db:2a:f8:ef:da:f0:8b:b3:c3:25:7b:20:73:95:d9:0e:bf:
b3:88:3f:68:d7:d1:0e:f6:09:fb:27:fc:4a:00:29:09:86:f5:
6d:50:1d:11:ed:41:61:dc:f8:f9:3e:f1:30:36:22:0b:07:e3:
17:69:19:11:06:73:a1:16:7e:7b:42:d5:7d:5b:6c:21:b0:f7:
96:19:92:f7:7e:c6:0b:6f:16:ab:a2:d2:de:06:c9:92:bf:8b:
cd:7b:83:de:10:de:12:7f:d3:f2:84:47:f8:40:78:96:42:89:
3b:90:0e:2b:a1:b3:1f:1e:4e:da:33:08:61:e4:02:6f:80:1e:
3e:87:67:f1:7d:53:26:62:fd:2f:a7:ac:f6:c3:46:21:c8:d5:
67:2e:86:b2:1a:9e:2a:d5:79:4b:6b:f3:4c:90:06:c5:23:26:
8e:2f:e5:cb:c3:df:4c:21:a8:0b:dd:7e:14:46:f5:eb:a0:ff:
14:13:ca:25:99:69:67:07:82:cb:e4:2c:2a:7b:53:81:49:16:
c7:01:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:19:19 2024 by rpki-client on console.sobornost.net