Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5ba246-bd6b-49fe-a3fa-d0b02a0249e5/1/uWsRBKddBhbypxjJOtqRlUFKjN4.roa
File: uWsRBKddBhbypxjJOtqRlUFKjN4.roa (raw, json)
Hash identifier: RoBq2Lj0cw1s1Nj1+MIokHIwx0PmAHkt6L4Xihig1Vs=
Subject key identifier: B9:6B:11:04:A7:5D:06:16:F2:A7:18:C9:3A:DA:91:95:41:4A:8C:DE
Certificate issuer: /CN=3c5f1a9f0d98fd3f1e8ef162d098c14017e0b927
Certificate serial: 03BB2390
Authority key identifier: 3C:5F:1A:9F:0D:98:FD:3F:1E:8E:F1:62:D0:98:C1:40:17:E0:B9:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PF8anw2Y_T8ejvFi0JjBQBfguSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5ba246-bd6b-49fe-a3fa-d0b02a0249e5/1/uWsRBKddBhbypxjJOtqRlUFKjN4.roa
Signing time: Sat 01 Jan 2022 02:01:40 +0000
ROA not before: Sat 01 Jan 2022 02:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15683
IP address blocks: 193.243.152.0/23 maxlen: 24
193.222.140.0/24 maxlen: 24
91.203.48.0/22 maxlen: 24
94.45.32.0/19 maxlen: 24
91.196.192.0/22 maxlen: 24
91.200.248.0/22 maxlen: 24
78.27.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62595984 (0x3bb2390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c5f1a9f0d98fd3f1e8ef162d098c14017e0b927
Validity
Not Before: Jan 1 02:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b96b1104a75d0616f2a718c93ada9195414a8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:16:90:be:a5:00:4a:1d:4f:c8:ad:64:c2:
1f:fb:01:96:dc:eb:a6:28:95:d1:82:7a:1f:07:e4:
93:2c:42:19:8f:50:cd:63:93:42:95:c3:a6:1d:2c:
d8:c4:ce:53:0e:cd:f1:83:bc:48:a2:40:04:b6:96:
67:09:dc:ba:c2:8f:cc:e0:33:7a:53:9c:7e:e8:e1:
c3:35:69:bf:ea:35:c7:cb:df:78:23:3a:f2:c3:0b:
2e:ec:87:c9:30:b0:5d:69:f1:3f:48:ac:d4:62:6e:
50:ac:08:bd:c7:67:bf:1f:99:b4:ab:c6:f7:9e:13:
a6:40:a9:74:94:4f:4b:bf:91:16:fb:02:92:cd:4a:
46:1e:90:90:d3:91:21:02:18:91:d5:17:7b:60:14:
f2:e0:dd:16:33:70:72:ea:f4:21:c2:90:e6:5a:ea:
de:ad:f8:6c:d4:a5:99:99:a1:56:2a:4b:6a:57:30:
41:18:db:aa:04:de:fb:7d:8b:a4:6e:23:63:e2:78:
3a:81:0a:2a:2d:15:92:2c:dd:51:42:9e:64:f7:4d:
4f:e7:f3:3a:c7:f4:5d:bd:09:a9:0c:26:de:27:26:
38:eb:dc:c0:9f:f1:d4:60:62:26:99:fe:90:30:80:
9c:cc:ad:75:6d:9c:41:47:50:3a:97:54:87:cc:a6:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:11:04:A7:5D:06:16:F2:A7:18:C9:3A:DA:91:95:41:4A:8C:DE
X509v3 Authority Key Identifier:
keyid:3C:5F:1A:9F:0D:98:FD:3F:1E:8E:F1:62:D0:98:C1:40:17:E0:B9:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PF8anw2Y_T8ejvFi0JjBQBfguSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5ba246-bd6b-49fe-a3fa-d0b02a0249e5/1/uWsRBKddBhbypxjJOtqRlUFKjN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5ba246-bd6b-49fe-a3fa-d0b02a0249e5/1/PF8anw2Y_T8ejvFi0JjBQBfguSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.27.128.0/18
91.196.192.0/22
91.200.248.0/22
91.203.48.0/22
94.45.32.0/19
193.222.140.0/24
193.243.152.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:12:68:16:99:f7:59:c5:1d:54:6c:b5:95:70:66:61:1f:01:
55:c2:0d:16:85:51:e2:48:b4:fa:27:e0:d7:29:08:25:13:e7:
7c:bb:12:6d:06:95:d8:fa:3e:35:b4:5f:18:e8:37:77:c9:f8:
67:32:a8:d1:e2:2a:41:3f:2d:43:cd:3f:bd:04:f4:92:00:27:
0d:fc:a5:b6:5d:57:51:ea:c4:06:da:47:97:5e:3b:ae:df:71:
08:04:66:80:a3:f4:cc:f8:3f:cd:17:8c:29:22:22:48:e8:57:
fd:75:42:0f:7b:bc:ed:f8:e5:ab:aa:87:d1:87:c3:a2:5f:da:
c8:84:8f:cb:9b:e2:e6:7e:e3:cb:ed:64:1e:19:59:a9:ae:23:
b8:19:38:2f:ad:53:e8:98:05:28:63:28:1f:9f:78:f1:65:8e:
11:20:2b:e1:17:53:48:d6:17:9d:60:c2:02:5d:71:85:42:80:
32:b8:57:c9:60:89:5f:e8:3a:9a:a7:c6:81:1c:ab:f9:65:99:
f1:ec:96:07:2c:7c:4b:52:71:90:6f:54:56:c2:c0:c8:43:08:
bf:37:3b:3f:c6:2c:e5:06:4a:c2:82:46:65:84:11:ee:a7:d1:
2a:83:7b:1f:79:cc:7a:9a:e0:91:37:1c:e3:f8:f6:13:31:b8:
2e:78:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net