Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/3TAuZQtuG9-OIXa6b5B8AI-qmGs.roa
File: 3TAuZQtuG9-OIXa6b5B8AI-qmGs.roa (raw, json)
Hash identifier: 2MMQtMsKATInJMYJXVHECwigib+WWwYt2J0C+cV+NFU=
Subject key identifier: DD:30:2E:65:0B:6E:1B:DF:8E:21:76:BA:6F:90:7C:00:8F:AA:98:6B
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 018EA2DE0E2E7D0FCE26CD79ABDFEE5D65BC
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/3TAuZQtuG9-OIXa6b5B8AI-qmGs.roa
Signing time: Wed 03 Apr 2024 07:30:45 +0000
ROA not before: Wed 03 Apr 2024 07:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
103.14.208.0/22 maxlen: 22
103.14.211.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:de:0e:2e:7d:0f:ce:26:cd:79:ab:df:ee:5d:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Apr 3 07:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd302e650b6e1bdf8e2176ba6f907c008faa986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:27:a1:66:cc:92:46:26:5b:c0:62:d6:8f:
31:96:81:5c:38:f0:69:72:1e:c3:6a:a3:ef:88:6a:
cd:a3:5a:26:17:2e:7b:14:1a:75:f5:8b:eb:91:7a:
f2:6b:86:8d:07:1f:99:68:dd:ff:4a:ab:6d:e2:32:
ec:72:70:ed:42:5c:ba:fa:44:ce:50:3c:b2:3f:bc:
06:72:28:3f:a3:5e:3d:5d:f8:71:61:41:9a:e4:b3:
03:18:8c:17:77:42:66:00:b8:4b:a4:06:c4:e2:74:
34:ba:74:d9:8f:37:36:e2:e0:27:fb:ba:80:75:4d:
3a:b9:c8:43:63:e2:65:e8:ce:5c:c3:44:76:61:73:
a3:c1:0c:5d:fb:37:94:bb:34:a0:b2:f5:74:8d:73:
78:31:1e:84:b0:46:08:3a:0f:98:5c:a8:4a:e6:77:
88:8f:ff:c2:5b:39:f7:eb:3a:ba:78:cc:33:19:84:
e8:06:dc:7d:1a:4b:71:18:4b:fb:f7:c4:e3:ce:18:
28:ff:24:fc:08:e0:29:fc:12:05:9d:63:ea:49:77:
0c:82:c0:dc:80:0e:70:53:7d:12:3b:d9:db:52:de:
b6:a5:5b:91:7d:38:03:38:b9:33:03:51:08:b7:f3:
4e:a0:09:ab:ff:93:ff:3e:15:4f:db:96:a7:a6:7c:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:2E:65:0B:6E:1B:DF:8E:21:76:BA:6F:90:7C:00:8F:AA:98:6B
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/3TAuZQtuG9-OIXa6b5B8AI-qmGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.120.0/24
212.70.123.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
24:30:8c:21:9c:51:86:05:89:28:82:20:aa:61:17:20:57:e2:
98:3b:90:80:77:89:9f:42:6b:a7:5e:53:6a:46:0b:8f:b1:f3:
cc:9d:4e:4f:8c:29:7f:8b:d6:f6:9c:30:e2:ca:ca:eb:09:92:
35:4c:f5:55:35:02:a8:da:77:f4:33:91:18:8c:3e:3e:af:52:
da:bb:8c:19:6b:20:7a:ca:87:2f:b3:1b:9d:16:38:52:c9:3f:
ba:00:7b:7e:b8:dd:84:ec:db:47:55:4e:e6:f1:33:8f:fe:c5:
68:89:e2:7c:e3:17:a6:c0:c7:6f:b1:59:d7:fa:9b:41:c8:9b:
b6:d8:3c:77:02:fd:33:da:9a:a7:23:3b:09:90:76:19:81:ca:
08:70:08:a3:c6:e6:7d:af:08:7a:64:a7:46:5d:c7:e3:0e:ac:
e8:9a:6a:c9:ed:0a:62:3c:3a:99:17:23:25:15:75:e7:1e:cf:
17:1a:19:ef:a3:af:fb:e6:17:ba:be:a1:3b:e7:75:fb:4f:2b:
f3:7e:9d:95:38:9b:26:c8:2c:77:aa:44:c2:77:7d:dc:20:68:
8d:29:12:06:29:f7:12:27:ec:7d:8f:b8:e0:b0:37:48:04:62:
d4:35:d9:03:37:71:e9:c1:5c:8a:65:07:d9:c0:a8:09:53:df:
7d:d7:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 08:36:14 2024 by rpki-client on console.sobornost.net