Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/Kozk0ALDnKh0Hg_80pzPr-kkySY.roa
File: Kozk0ALDnKh0Hg_80pzPr-kkySY.roa (raw, json)
Hash identifier: B956DaVLJYK9961QnTklcEAZGpSVkTaOjIgooBTVtnc=
Subject key identifier: 2A:8C:E4:D0:02:C3:9C:A8:74:1E:0F:FC:D2:9C:CF:AF:E9:24:C9:26
Certificate issuer: /CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Certificate serial: 01D1ECB9
Authority key identifier: 1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/Kozk0ALDnKh0Hg_80pzPr-kkySY.roa
Signing time: Thu 12 May 2022 12:42:02 +0000
ROA not before: Thu 12 May 2022 12:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.252.0/24 maxlen: 32
171.22.253.0/24 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
45.80.116.0/22 maxlen: 22
2.56.228.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30534841 (0x1d1ecb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Validity
Not Before: May 12 12:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a8ce4d002c39ca8741e0ffcd29ccfafe924c926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:0a:9b:72:ee:39:0d:d2:a5:2a:92:e5:82:
4c:76:ff:3c:91:b0:42:9b:4d:62:f2:69:da:50:ba:
b3:ba:f8:34:0b:dd:f1:e6:59:74:cb:7a:46:a0:96:
ba:fb:6c:d4:73:c5:3b:ea:87:a4:2c:3e:ab:0b:b3:
31:14:84:72:c9:89:1d:b4:d1:71:89:65:e9:a4:1f:
14:16:7f:b6:7d:17:54:8e:e0:59:73:fb:70:07:84:
84:66:cc:29:03:2b:48:59:5c:86:d5:bb:1b:30:df:
7c:d8:ce:b0:e6:60:74:5c:2c:df:8d:84:96:a9:d8:
9e:f6:57:33:79:cc:75:0f:19:f5:1f:28:c2:84:ac:
39:71:a4:11:47:fc:33:a1:83:0a:39:0c:f6:b3:e9:
8e:70:4b:bb:30:73:ad:04:08:05:4d:87:fd:79:10:
38:07:4e:fc:fc:dd:b7:de:8f:7f:e1:56:62:46:8c:
2c:fa:7a:be:ec:90:4b:19:fc:e3:a6:db:73:1e:e7:
5d:a9:be:2e:4f:11:cb:13:2e:6c:4a:ce:a8:f4:51:
6c:51:f6:6a:96:f4:29:3f:ac:9f:d3:14:58:55:5a:
bb:f8:64:c2:b5:1c:83:bd:91:23:24:39:1f:60:23:
50:93:29:02:55:a6:7d:bb:52:41:a3:46:20:83:d4:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:E4:D0:02:C3:9C:A8:74:1E:0F:FC:D2:9C:CF:AF:E9:24:C9:26
X509v3 Authority Key Identifier:
keyid:1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/Kozk0ALDnKh0Hg_80pzPr-kkySY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.228.0/22
45.66.176.0/22
45.80.116.0/22
45.82.96.0/22
45.84.228.0/22
139.28.120.0/22
171.22.252.0/23
Signature Algorithm: sha256WithRSAEncryption
e0:93:b5:ab:d9:82:4d:f6:56:40:70:74:86:d3:69:da:5e:c1:
01:a1:da:b2:be:8c:97:3f:e6:63:53:77:ca:6d:8a:f3:e8:74:
5b:6a:60:50:ba:3e:24:67:eb:f7:cd:cd:06:a7:ab:7f:ce:93:
fb:62:a8:7f:ec:26:2d:62:03:81:96:2d:b0:f6:34:80:71:7a:
7c:52:c8:27:2e:ff:3c:35:91:7c:48:06:f1:42:1a:c0:4a:5d:
d2:54:7b:9a:3f:96:8c:c2:72:f4:16:f0:f9:dc:c2:7f:ae:f5:
80:1c:06:76:7c:8a:95:8d:8d:e8:21:75:e9:e9:0f:3e:3c:18:
f0:11:dd:cc:14:5f:ca:ea:7f:fb:71:c6:5b:df:37:ef:88:9f:
c1:20:46:7b:aa:06:2d:76:c7:00:83:e7:5f:b2:76:57:4c:43:
4b:35:b9:9b:47:17:0a:47:1b:71:fa:28:ad:e8:7e:42:3e:85:
3b:70:d4:47:0d:35:ab:ff:dc:a7:24:d7:0c:3e:6f:af:05:90:
c2:a6:6e:3f:28:0b:fc:a4:3c:a8:ca:70:52:3b:20:db:73:73:
a9:d5:3f:54:0e:cb:27:6d:d7:92:cc:1d:1a:c6:b9:1b:df:8d:
60:b5:6c:74:c1:13:44:c4:c4:d1:7c:fc:38:8f:5d:72:f9:71:
b4:d1:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net