Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/oF-Ek0vc7mBri9FGk_mpmL8uruE.roa
File: oF-Ek0vc7mBri9FGk_mpmL8uruE.roa (raw, json)
Hash identifier: KsomTEk/slK6DwUBV1VEkTscCXP9/ICiVx37ZGVmIPc=
Subject key identifier: A0:5F:84:93:4B:DC:EE:60:6B:8B:D1:46:93:F9:A9:98:BF:2E:AE:E1
Certificate issuer: /CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Certificate serial: 0207997F
Authority key identifier: 1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/oF-Ek0vc7mBri9FGk_mpmL8uruE.roa
Signing time: Tue 07 Jun 2022 12:02:11 +0000
ROA not before: Tue 07 Jun 2022 12:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.252.0/24 maxlen: 32
171.22.253.0/24 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
45.80.116.0/22 maxlen: 32
45.80.116.0/24 maxlen: 24
2.56.228.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34052479 (0x207997f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Validity
Not Before: Jun 7 12:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05f84934bdcee606b8bd14693f9a998bf2eaee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:57:c9:4f:78:33:c7:d3:41:2c:8b:aa:1a:
0f:1b:18:52:cd:8f:d6:38:3e:e6:3c:2e:4b:b4:70:
3c:c6:2a:8d:a7:36:03:00:d6:66:8e:a1:f0:f6:18:
a0:10:7e:ea:e7:d3:1f:20:d6:04:bc:07:c3:bd:45:
f2:22:e4:9a:ec:3c:41:de:92:cb:39:d9:b4:65:07:
cb:09:7e:51:7c:93:b7:08:ae:49:dc:83:5f:cd:4d:
1d:1d:95:72:39:7b:02:15:d9:2a:71:56:76:92:8d:
e5:25:73:da:8e:b3:86:a4:f7:ea:bc:05:7d:ba:cf:
18:cc:5b:5f:03:ab:72:f6:b0:a5:6f:21:dd:3c:f3:
e4:15:e3:66:db:26:69:4f:c4:4f:e8:6d:90:eb:65:
97:69:2c:fd:97:7d:a3:64:5d:37:e4:e8:34:f9:46:
9e:35:9c:e2:8a:18:ee:f1:89:41:35:ae:34:b4:98:
d7:6d:b8:56:fe:08:17:87:f9:cc:01:8b:be:6a:55:
ce:c8:75:40:ba:54:29:b3:28:74:47:9e:de:49:df:
90:fe:78:73:5d:78:48:9c:bf:66:46:27:c6:37:4e:
d0:2d:cb:6d:13:fe:a7:69:e2:54:03:a2:62:a7:89:
e5:a2:c6:9a:03:34:fa:85:6b:40:cd:e4:b2:25:d2:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:84:93:4B:DC:EE:60:6B:8B:D1:46:93:F9:A9:98:BF:2E:AE:E1
X509v3 Authority Key Identifier:
keyid:1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/oF-Ek0vc7mBri9FGk_mpmL8uruE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.228.0/22
45.66.176.0/22
45.80.116.0/22
45.82.96.0/22
45.84.228.0/22
139.28.120.0/22
171.22.252.0/23
Signature Algorithm: sha256WithRSAEncryption
30:13:5f:e6:a0:53:ec:a0:58:b1:e5:b6:ac:4e:84:14:5d:a5:
71:9e:e9:0f:a5:02:36:95:bc:f7:48:76:5c:3e:68:8d:34:f2:
7f:00:8f:94:21:63:20:c3:6e:cd:ef:7b:ad:27:71:42:a9:ec:
86:6c:50:86:c6:6e:68:3e:7a:a7:24:3f:21:ee:7e:b2:66:fd:
ad:ec:18:e9:bd:8c:94:ab:97:ca:cf:10:51:28:59:07:59:cb:
91:93:97:94:06:91:6b:a4:c5:69:51:87:e1:97:b9:09:5a:5a:
97:08:f0:69:9c:50:60:ba:a0:3c:e1:e3:0d:52:18:b9:bc:3f:
8d:75:e6:e2:95:a4:b8:81:df:4f:50:b1:57:05:d3:bc:ac:de:
80:e3:9e:09:79:99:5a:46:97:c4:8f:e0:1b:de:bd:a8:7d:62:
fd:84:90:d7:66:1e:13:02:24:b2:87:fc:4a:60:11:db:8f:d5:
82:f6:86:48:9e:c5:fb:91:e3:27:79:11:50:bd:3e:bb:16:3f:
3a:92:ef:db:5c:fb:e0:fd:9f:ea:8c:56:0d:5f:e4:6d:b4:c3:
48:05:52:72:c6:cb:40:a8:b3:41:45:2f:7c:d4:86:77:09:7b:
de:fb:43:33:4a:eb:6a:3c:08:35:d1:11:fe:55:fb:fa:d1:bf:
38:ab:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net