Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/GWfaBNVR5yHWNTJhyGpPSVQvQtc.roa
File: GWfaBNVR5yHWNTJhyGpPSVQvQtc.roa (raw, json)
Hash identifier: ypjRa56An2EgKpOLYfJRnxJKLzNH2j24RxgEc0AIqt4=
Subject key identifier: 19:67:DA:04:D5:51:E7:21:D6:35:32:61:C8:6A:4F:49:54:2F:42:D7
Certificate issuer: /CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Certificate serial: 01833542BE1EEE31089FD0956BC6282AD885
Authority key identifier: 1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/GWfaBNVR5yHWNTJhyGpPSVQvQtc.roa
Signing time: Tue 13 Sep 2022 05:11:49 +0000
ROA not before: Tue 13 Sep 2022 05:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.252.0/24 maxlen: 32
171.22.253.0/24 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
45.82.96.0/22 maxlen: 32
45.159.8.0/22 maxlen: 32
45.80.116.0/22 maxlen: 32
45.80.116.0/24 maxlen: 24
2.56.228.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
45.148.104.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:42:be:1e:ee:31:08:9f:d0:95:6b:c6:28:2a:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Validity
Not Before: Sep 13 05:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1967da04d551e721d6353261c86a4f49542f42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:cd:75:3b:ab:8f:6c:49:14:65:75:e2:e2:
1e:12:b3:42:50:b0:85:c3:22:17:08:bd:06:c4:ef:
88:de:51:0a:20:de:61:25:5c:e8:bb:cd:a1:8c:d2:
dd:91:19:d2:15:a7:c1:68:7e:05:7f:f6:81:c3:6c:
a6:6a:0a:5c:aa:b1:a9:d8:aa:cb:2d:e9:64:96:d6:
9d:99:84:18:fb:ab:e1:8b:8a:2a:57:67:12:71:08:
2b:b1:50:ba:83:ca:54:00:6d:65:62:86:97:11:ca:
fc:c9:37:7c:26:b1:25:f2:65:e6:c6:f1:01:2a:03:
01:29:57:75:4d:99:7f:04:67:7f:fd:16:2e:90:e0:
a0:42:18:59:86:5d:66:e9:94:78:fb:1d:ea:7c:0d:
bd:33:fa:c2:a2:86:ad:5a:5a:38:4d:f3:9c:72:56:
01:d5:ae:07:d6:87:45:78:64:2c:25:77:98:90:ab:
17:ba:1a:b2:aa:98:1b:20:c0:e6:75:9d:ae:a7:25:
1e:74:56:9c:4e:37:1c:97:3e:51:e8:4d:3e:2f:83:
10:05:94:60:5b:83:d0:a0:aa:5d:d4:6b:de:08:dc:
8f:3e:96:33:b2:54:e3:5a:96:e6:d4:41:8e:77:c1:
8e:c2:3b:08:69:24:07:bd:c9:e8:f2:02:08:ca:2a:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:DA:04:D5:51:E7:21:D6:35:32:61:C8:6A:4F:49:54:2F:42:D7
X509v3 Authority Key Identifier:
keyid:1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/GWfaBNVR5yHWNTJhyGpPSVQvQtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.228.0/22
45.66.176.0/22
45.80.116.0/22
45.82.96.0/22
45.84.228.0/22
45.148.104.0/22
45.159.8.0/22
139.28.120.0/22
171.22.252.0/23
Signature Algorithm: sha256WithRSAEncryption
07:56:ed:e6:f5:88:83:1f:1b:11:e1:af:75:52:5f:d1:4f:51:
7d:ea:03:fd:c9:6e:82:30:0a:b6:8a:72:02:6f:6f:c7:e8:9d:
74:67:00:27:c3:2a:30:86:ba:ab:cd:fe:72:63:45:c7:4b:53:
0d:1f:d7:f7:9b:68:02:86:7f:61:84:df:1c:6c:4f:3a:d6:cc:
e4:b3:a8:bb:4b:ad:38:24:86:06:4a:8c:da:b1:b5:26:47:69:
ea:a7:70:bf:9b:e8:f0:88:b4:4e:9a:18:6a:a5:f3:3b:fd:81:
1e:44:4b:c1:64:3a:05:ca:3c:aa:9c:eb:90:98:75:6c:28:3d:
eb:67:49:1a:81:28:5d:68:be:a1:28:ca:0e:33:85:fd:b3:53:
22:eb:1a:d6:c4:83:e0:ea:9a:b4:11:a3:8d:51:ca:c5:d1:5c:
6e:95:4e:c1:d5:de:3f:a2:08:5a:96:86:6d:bc:da:43:f9:2a:
91:d5:ce:41:64:df:a4:88:a3:61:9f:f2:4f:b7:0d:d6:37:be:
60:cf:2d:e4:57:9c:fc:86:b4:ef:78:44:e5:1f:7c:15:19:19:
00:d1:13:c6:dc:62:11:60:65:1f:15:28:51:7e:2a:a6:4f:a4:
8d:f7:1a:fa:af:8b:8e:84:6e:74:d2:4b:7b:bb:a8:ae:7e:fd:
47:df:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net