Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cvvdMI0ZN_9k_PP1wNEQuhEIPvU.roa
File: cvvdMI0ZN_9k_PP1wNEQuhEIPvU.roa (raw, json)
Hash identifier: I4Ia7aO7iyU7SSgvI5P1CTLRDM/RuBEy8S8xkrA8oCA=
Subject key identifier: 72:FB:DD:30:8D:19:37:FF:64:FC:F3:F5:C0:D1:10:BA:11:08:3E:F5
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 096948E9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cvvdMI0ZN_9k_PP1wNEQuhEIPvU.roa
Signing time: Wed 09 Feb 2022 07:15:04 +0000
ROA not before: Wed 09 Feb 2022 07:15:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157894889 (0x96948e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 9 07:15:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72fbdd308d1937ff64fcf3f5c0d110ba11083ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e2:15:3e:28:8f:32:51:35:5e:be:3e:57:2a:
b0:08:c5:6f:ad:91:95:1d:e6:f4:70:2a:88:10:1a:
ed:89:1a:a5:55:01:e0:c0:77:d4:25:0b:83:ec:37:
92:12:b4:71:5c:2e:88:40:e3:b9:98:06:98:5a:2d:
af:11:a1:2b:76:1b:cb:f1:7d:9e:20:be:87:c9:36:
47:e9:b7:62:6c:41:bf:e9:06:4d:79:b6:65:98:9d:
0d:f3:19:b3:47:70:57:25:43:06:ae:9c:6e:32:c4:
b5:1b:9d:88:b3:da:f5:f5:e5:eb:76:30:a5:96:19:
f5:41:cc:a8:be:b3:7c:51:54:ff:17:ff:bc:f3:24:
49:1b:c5:aa:0a:1a:02:66:c3:c0:05:4c:79:a5:3a:
16:b5:5d:bb:ab:98:3d:f6:16:b3:57:6f:d2:73:35:
23:c1:7d:6b:8b:4f:7e:31:dd:7d:4d:8a:b2:84:da:
fa:1a:92:53:f9:d1:fe:5f:ef:13:fc:e7:2f:7a:41:
f2:82:ee:14:cc:d9:1e:73:7f:b9:f9:82:b5:d7:54:
c8:79:13:23:db:5e:e5:3e:e4:54:f9:42:e9:a9:5e:
04:eb:d1:c5:0e:0d:fd:07:c6:4e:99:bc:ce:fd:3a:
b1:29:6c:d3:c0:60:03:56:d2:50:58:27:7e:9c:a5:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:DD:30:8D:19:37:FF:64:FC:F3:F5:C0:D1:10:BA:11:08:3E:F5
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cvvdMI0ZN_9k_PP1wNEQuhEIPvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
af:09:c8:ed:e8:30:3d:ca:ca:60:19:bd:4c:fa:63:a8:73:5d:
97:93:b2:75:8a:7e:4f:98:1b:af:a2:6e:f4:8e:ad:91:9a:7d:
28:3d:d1:d9:6f:3b:af:74:13:fc:32:3e:2a:7f:29:94:b6:9a:
2b:27:00:fd:73:1c:18:a2:39:73:95:10:b1:32:fe:b8:ad:ac:
f0:8a:3e:77:f4:2f:24:c8:8d:7e:5f:1f:6f:ef:ae:0d:e6:59:
ba:d3:b5:fe:4f:fd:58:e4:82:5b:4c:be:13:f0:fe:f6:6e:3b:
a1:5a:53:73:2d:92:d8:57:d8:35:1d:63:50:cd:73:68:ce:57:
39:c6:d8:36:86:3e:e9:4c:59:90:48:e8:15:0d:4c:bc:d2:7e:
31:ed:ef:35:e5:2c:cf:ec:82:97:18:da:d1:bb:e0:ab:96:60:
31:c8:a8:8c:ac:83:3a:c2:00:4f:1f:c5:e2:7a:12:1a:5b:45:
e2:a0:8c:b8:71:06:89:8e:11:d6:7e:50:45:62:62:57:ae:cd:
66:ca:4f:86:04:6b:d7:78:16:5e:33:a1:fc:77:c7:c4:58:fa:
eb:7f:1e:37:8c:7a:58:0f:a8:be:d5:ba:fe:3e:7b:8b:32:c9:
77:4e:6e:de:09:d5:9d:48:0c:7b:ca:84:bc:54:53:69:c9:04:
24:62:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net