Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/l3qFrUexJRTHGGAw_Qdr_XCL95o.roa
File: l3qFrUexJRTHGGAw_Qdr_XCL95o.roa (raw, json)
Hash identifier: MKnBbe3GSw5m2BNX7XolqqLdSD8MidQm/ajLwKkjGw8=
Subject key identifier: 97:7A:85:AD:47:B1:25:14:C7:18:60:30:FD:07:6B:FD:70:8B:F7:9A
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 018E6CC1347021DA08DBE655BBD4A31765FC
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/l3qFrUexJRTHGGAw_Qdr_XCL95o.roa
Signing time: Sat 23 Mar 2024 19:19:44 +0000
ROA not before: Sat 23 Mar 2024 19:19:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28968
IP address blocks: 62.181.34.0/23 maxlen: 23
62.181.36.0/22 maxlen: 22
62.181.38.0/24 maxlen: 24
62.181.46.0/23 maxlen: 23
62.181.48.0/23 maxlen: 23
62.181.56.0/21 maxlen: 24
62.181.56.0/22 maxlen: 24
77.232.32.0/23 maxlen: 23
77.232.35.0/24 maxlen: 24
77.232.48.0/23 maxlen: 23
212.59.96.0/21 maxlen: 21
212.59.109.0/24 maxlen: 24
2a00:f460::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:c1:34:70:21:da:08:db:e6:55:bb:d4:a3:17:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Mar 23 19:19:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977a85ad47b12514c7186030fd076bfd708bf79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:13:81:6d:62:c3:8c:06:e0:9b:e4:f9:58:
0d:6a:d5:ed:2b:23:fc:57:e8:3e:71:ea:06:21:90:
6c:2d:83:38:3f:01:03:85:1a:a3:c1:60:9e:43:15:
90:81:4b:c1:d0:71:6d:47:ba:33:bf:c2:35:49:a2:
85:f9:d6:5a:66:49:ec:b7:6a:1f:d3:a1:a2:3b:89:
8c:32:e1:d3:e1:c3:7e:79:25:5c:b1:c4:71:40:cf:
0e:49:e8:c2:f1:47:e5:73:54:c8:5b:2d:94:41:8b:
24:2a:f3:45:b9:ab:ac:5a:79:b4:37:72:d4:9d:19:
d7:86:74:5d:64:b5:00:79:cd:17:33:12:33:a1:5e:
d2:c1:e1:72:f8:3d:a9:a2:7e:aa:70:66:3f:7e:aa:
bf:c8:26:d0:15:7a:d8:65:87:6e:61:01:cb:06:86:
f4:08:f9:a1:95:f4:53:37:43:5c:ae:34:68:53:ed:
54:13:5b:56:98:14:19:52:6b:ed:e3:c1:e0:88:0e:
99:04:d8:3e:7b:e6:77:ca:d0:9f:77:23:d7:65:7d:
7d:6f:73:71:12:d7:bf:b7:cb:4c:01:20:8c:58:1a:
bb:fd:23:1e:a3:24:59:e3:4a:15:f6:18:f8:ce:a0:
c2:4f:6a:2c:d0:97:28:9b:4d:9f:d7:c4:da:28:a0:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7A:85:AD:47:B1:25:14:C7:18:60:30:FD:07:6B:FD:70:8B:F7:9A
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/l3qFrUexJRTHGGAw_Qdr_XCL95o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.34.0-62.181.39.255
62.181.46.0-62.181.49.255
62.181.56.0/21
77.232.32.0/23
77.232.35.0/24
77.232.48.0/23
212.59.96.0/21
212.59.109.0/24
IPv6:
2a00:f460::/32
Signature Algorithm: sha256WithRSAEncryption
71:8d:b6:44:ab:c8:d5:ed:e5:44:a9:8b:cb:84:68:6b:41:a8:
f5:0d:e5:9b:7f:5e:a0:18:f7:41:21:44:58:08:3c:7e:28:35:
62:b3:da:fb:59:41:dd:ec:1b:04:d8:5c:2e:b2:35:11:28:e8:
3d:c5:74:bb:4d:20:43:ae:db:0d:c5:d9:f8:f7:ad:60:b1:ee:
d2:c9:c9:86:57:60:3e:98:4c:a3:71:8c:e9:44:ae:56:0a:22:
08:75:a4:c9:bd:2a:6d:65:91:09:ee:20:03:77:bc:a6:8d:be:
fb:1f:60:d4:27:3f:e3:b2:21:4e:24:46:95:5e:fb:78:5e:f8:
5f:a9:3e:f6:1f:55:a6:d5:69:ec:31:16:2f:6f:f3:ce:37:04:
45:35:e0:dc:f9:41:12:9b:ce:05:69:54:3b:3b:26:4c:c2:11:
70:d1:de:f9:1d:53:5b:78:2b:a9:40:28:3a:59:e4:fa:5e:95:
e1:9c:7d:c2:2c:9c:ea:03:fe:6a:83:4e:ef:de:d6:11:97:e5:
76:55:15:8c:ab:19:75:38:29:c3:e6:5c:a9:93:c2:95:b5:8f:
1d:f7:44:68:41:23:b7:8a:d3:d5:6d:f8:86:a7:5a:4d:6a:e7:
cb:58:c0:d6:2d:b6:ad:06:31:f8:90:0d:76:7e:58:48:c1:47:
c3:2a:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net