Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/i3gMiouWeCKnMIB_TrfbyffRZUo.roa
File: i3gMiouWeCKnMIB_TrfbyffRZUo.roa (raw, json)
Hash identifier: 0fNRpshhfFqiUThpf0y69dHSrR+cbKVCsqnbYb25WG4=
Subject key identifier: 8B:78:0C:8A:8B:96:78:22:A7:30:80:7F:4E:B7:DB:C9:F7:D1:65:4A
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 018DEFF70F8F28BE13517D1B57507CEB954C
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/i3gMiouWeCKnMIB_TrfbyffRZUo.roa
Signing time: Wed 28 Feb 2024 13:46:02 +0000
ROA not before: Wed 28 Feb 2024 13:46:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44772
IP address blocks: 185.129.56.0/22 maxlen: 32
195.28.14.0/23 maxlen: 32
2a04:8c00::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:f7:0f:8f:28:be:13:51:7d:1b:57:50:7c:eb:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Feb 28 13:46:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b780c8a8b967822a730807f4eb7dbc9f7d1654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:36:fa:2b:af:e6:d3:29:0a:8a:1f:55:e8:
fe:06:ae:d2:ae:85:56:92:04:1a:3f:ff:a6:b8:2d:
16:77:b2:78:fe:b8:d5:69:94:e6:84:7e:08:d8:22:
31:da:c2:97:4f:0b:66:f0:35:52:b9:bc:f6:7c:5c:
f0:c0:c9:9a:37:c6:1f:cc:bb:34:60:88:79:ed:f4:
eb:a2:c0:a8:ed:ba:70:87:c5:5b:52:c8:45:b6:b1:
0b:b3:d8:26:3a:63:38:10:5e:34:bc:1e:74:86:c3:
6c:f1:70:85:b2:7d:3d:0d:0e:f6:83:5b:7c:d1:d3:
81:3e:f4:8d:19:01:46:8d:93:31:25:aa:da:ee:fc:
22:1c:5d:e1:53:42:d1:a8:48:03:41:fb:cb:b5:ea:
fa:f1:ad:5c:4e:48:2e:bd:40:75:a2:16:96:9f:dc:
77:54:c3:bd:4c:75:bb:ec:30:de:73:a2:aa:ba:18:
1a:fd:f7:3a:56:42:7a:fe:e4:97:f1:dc:8a:d1:3f:
d7:9b:bb:6a:98:6f:16:2a:94:73:73:e5:ab:3d:c9:
84:7e:20:35:1e:9b:a0:a6:6a:c7:70:2f:8a:26:3d:
78:47:51:d7:97:68:aa:06:3d:bc:ce:ad:df:ce:1a:
32:dc:64:8d:e1:44:0e:be:c3:a8:00:0c:30:cb:9b:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:0C:8A:8B:96:78:22:A7:30:80:7F:4E:B7:DB:C9:F7:D1:65:4A
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/i3gMiouWeCKnMIB_TrfbyffRZUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.56.0/22
195.28.14.0/23
IPv6:
2a04:8c00::/29
Signature Algorithm: sha256WithRSAEncryption
8c:c0:aa:fd:54:4e:dd:62:4c:98:3d:0c:f4:e6:49:66:e7:60:
3b:18:7e:f9:47:5b:fb:05:b8:22:22:ed:d9:03:b1:3a:26:d8:
96:4e:82:05:96:20:6d:2b:70:96:21:e8:2a:06:ef:24:ce:67:
9f:57:7b:7e:e1:55:81:1e:33:fe:b3:74:5f:37:a4:2b:07:cb:
8b:e8:9f:55:ab:7e:a2:00:b6:6d:93:bd:0d:d6:9b:cd:c5:fa:
67:75:b6:c9:87:79:1d:a5:27:aa:4f:af:80:95:46:d5:c3:69:
b8:53:b8:ab:7c:24:8e:d2:da:59:01:ee:de:ce:02:76:03:2b:
58:8d:34:3b:c3:62:7e:0b:09:cf:b8:77:e9:60:bf:d1:06:ca:
c3:86:91:91:2f:f1:2d:aa:b4:06:9a:22:98:4b:b6:06:5a:4a:
49:c6:70:0e:47:e1:e9:2a:52:c9:31:98:cb:b1:bf:21:54:f6:
3a:33:e0:b7:8b:9c:ef:d1:28:42:d6:4d:4e:9c:20:12:fb:9c:
78:c8:52:89:6b:52:92:32:83:3b:83:64:64:29:c7:2e:1f:94:
1b:ac:1a:f8:5c:95:d8:46:74:3a:00:f4:ab:36:83:28:20:3c:
3d:cc:bb:94:05:3d:a2:49:a7:3f:9f:29:d6:47:c7:f7:80:d3:
ec:d2:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net