Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/kw7nK7HWdKnEXx0Obk8eSE2ZkP0.roa
File: kw7nK7HWdKnEXx0Obk8eSE2ZkP0.roa (raw, json)
Hash identifier: ZT4ytpU0D2ucnUEy44bYEKJNESeMCmMnKom9f1tAaS4=
Subject key identifier: 93:0E:E7:2B:B1:D6:74:A9:C4:5F:1D:0E:6E:4F:1E:48:4D:99:90:FD
Certificate issuer: /CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Certificate serial: ABE49D
Authority key identifier: 1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/kw7nK7HWdKnEXx0Obk8eSE2ZkP0.roa
Signing time: Sat 01 Jan 2022 06:04:43 +0000
ROA not before: Sat 01 Jan 2022 06:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.252.0/24 maxlen: 32
171.22.253.0/24 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11265181 (0xabe49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Validity
Not Before: Jan 1 06:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=930ee72bb1d674a9c45f1d0e6e4f1e484d9990fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:c3:f2:cf:e1:6a:64:8e:ee:e4:7e:74:4f:
08:f6:61:27:38:32:12:14:92:f9:4b:cd:20:29:b5:
fc:f9:5c:98:58:b1:60:02:58:6b:d8:f8:c8:e5:71:
5a:f6:8a:f0:13:15:ec:c0:53:24:21:33:4b:c0:30:
f4:77:24:74:ba:48:05:53:44:2f:ba:b7:04:b8:50:
0e:b5:b4:f3:be:da:54:27:8d:0d:2e:ef:97:47:58:
ac:ee:c5:43:cc:c5:19:d8:d4:7c:b9:8b:b0:f2:5a:
af:48:b8:ee:82:88:02:8f:24:86:0e:2b:5e:ec:73:
04:07:e5:79:52:b2:e7:8b:e8:a1:45:ca:de:d0:5d:
ae:21:61:92:61:fd:a4:cf:5f:33:a5:4f:27:ef:f4:
d1:1d:06:82:cb:16:0d:05:c0:31:41:8c:f7:c5:76:
0f:bf:ec:ed:44:54:fc:3a:3a:5e:d3:e8:65:4e:0e:
e0:9e:ff:3b:94:25:34:9c:fb:34:fa:ae:ef:49:cd:
b1:36:33:e0:d9:93:07:0a:f1:f1:86:89:ff:1e:c5:
9a:43:67:5f:fb:c9:b7:7f:93:80:a3:ae:17:c2:8b:
57:93:7a:33:d6:2d:11:c3:ea:b2:56:37:b9:9e:9e:
2b:7a:49:75:f6:63:9a:d0:48:ce:f6:6d:c9:8b:0a:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:E7:2B:B1:D6:74:A9:C4:5F:1D:0E:6E:4F:1E:48:4D:99:90:FD
X509v3 Authority Key Identifier:
keyid:1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/kw7nK7HWdKnEXx0Obk8eSE2ZkP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
139.28.120.0/22
171.22.252.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:a9:44:25:53:c2:a5:03:ee:84:e1:3c:2e:cf:f5:c0:ab:79:
39:7d:2c:1b:51:f9:a2:88:dc:41:6c:a5:68:76:61:e9:90:64:
d4:e3:a4:70:ac:12:b4:40:ef:34:ff:c2:e2:db:84:a2:0f:22:
2a:7e:5f:dd:d9:34:d5:57:72:5f:71:bb:3f:b0:e9:46:2f:ec:
14:71:60:c0:7a:ab:5f:3a:b8:f3:7b:ba:02:06:5c:b1:03:d1:
d5:93:67:d3:ee:dc:35:3a:99:85:e7:56:2e:fd:33:37:d9:81:
6f:25:2b:45:08:e0:4b:68:78:37:fc:b6:39:a5:e5:26:e0:a0:
3e:ba:04:7f:0d:bb:0c:b9:e6:b4:7d:45:25:93:f9:58:1f:4e:
d1:22:5c:6e:99:9f:7d:31:55:18:3c:16:b2:b6:bf:7b:01:09:
fe:8c:bc:31:0c:80:2e:32:18:f7:d7:e0:79:82:ad:9f:65:f7:
b0:5a:3a:8d:88:ff:a2:7d:e3:2d:d4:84:bc:28:ae:fd:2d:d4:
c3:2d:2c:ed:9e:b9:d0:5e:72:fd:40:2a:cc:ec:2c:70:96:ee:
06:d4:d1:79:74:1f:2e:d6:9e:6c:52:bc:56:44:d8:48:5f:61:
73:61:01:e7:aa:1e:6d:1a:b8:af:ad:95:5c:14:66:da:7e:72:
bc:7c:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net