Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/BxDwxvH35YhWncJ7F1-jCr6vR9o.roa
File: BxDwxvH35YhWncJ7F1-jCr6vR9o.roa (raw, json)
Hash identifier: I7vRWRx3M8DBULrqWDqz6AnTZjfFFC8tSCdKw1ybAzA=
Subject key identifier: 07:10:F0:C6:F1:F7:E5:88:56:9D:C2:7B:17:5F:A3:0A:BE:AF:47:DA
Certificate issuer: /CN=3ea11ec3b0b19546d156c236b3f2798d18cb5f20
Certificate serial: 052E7EBD
Authority key identifier: 3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqEew7CxlUbRVsI2s_J5jRjLXyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/BxDwxvH35YhWncJ7F1-jCr6vR9o.roa
Signing time: Sat 01 Jan 2022 11:01:20 +0000
ROA not before: Sat 01 Jan 2022 11:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202543
IP address blocks: 185.246.170.0/24 maxlen: 24
185.246.169.0/24 maxlen: 24
185.246.168.0/24 maxlen: 24
185.246.171.0/24 maxlen: 24
45.154.178.0/24 maxlen: 24
45.154.177.0/24 maxlen: 24
45.154.176.0/24 maxlen: 24
45.154.179.0/24 maxlen: 24
2a0f:3980::/29 maxlen: 48
2a0f:c300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86933181 (0x52e7ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea11ec3b0b19546d156c236b3f2798d18cb5f20
Validity
Not Before: Jan 1 11:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0710f0c6f1f7e588569dc27b175fa30abeaf47da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:15:a3:b4:e1:63:e9:be:4d:4b:f8:e6:32:
44:5d:a4:46:a6:1a:af:7d:f6:85:8a:b7:d2:39:49:
6b:ff:a5:5d:d6:05:11:1b:6a:ad:b4:1b:39:c4:6f:
7d:8d:3e:32:d5:55:c5:c5:77:a4:02:e7:f1:8f:0b:
aa:c5:e5:3c:d7:f9:88:1c:e3:8d:d8:77:10:34:26:
aa:3e:e6:4f:1d:4f:f7:a4:08:e5:4b:64:34:48:f8:
ab:96:59:a8:ee:e1:7d:54:e5:cb:18:81:e9:6c:fb:
6f:05:c6:ca:63:68:a2:f2:9c:ff:f4:57:98:7d:41:
8f:ec:17:cb:d8:ed:fe:cb:99:b4:9b:ed:8c:75:00:
de:25:a9:0a:ff:b7:9c:d0:61:c3:d5:3f:6b:43:da:
96:b5:92:e9:e8:0d:31:7b:7e:63:7a:dc:1a:85:7d:
d1:62:e8:86:ab:fa:86:da:9c:27:53:4b:00:09:32:
ce:b8:5a:cb:9e:b4:bb:ea:5c:89:10:6d:ad:77:7f:
a6:a9:04:7a:0e:3f:2d:82:08:7c:96:2b:f8:15:55:
8d:1e:3e:f2:2b:8c:ce:d8:3e:a4:bc:ec:e6:2f:5c:
cb:46:97:e7:c8:41:56:dd:18:13:32:33:8a:d8:c6:
62:d2:6e:cc:aa:02:56:8d:52:ee:58:39:0d:fa:9d:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:F0:C6:F1:F7:E5:88:56:9D:C2:7B:17:5F:A3:0A:BE:AF:47:DA
X509v3 Authority Key Identifier:
keyid:3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqEew7CxlUbRVsI2s_J5jRjLXyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/BxDwxvH35YhWncJ7F1-jCr6vR9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/PqEew7CxlUbRVsI2s_J5jRjLXyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.176.0/22
185.246.168.0/22
IPv6:
2a0f:3980::/29
2a0f:c300::/29
Signature Algorithm: sha256WithRSAEncryption
2a:97:f7:c6:26:44:2d:30:7d:9e:a0:11:d9:fe:08:b5:3b:58:
1d:88:60:7f:15:96:6c:aa:8b:36:09:98:3a:ad:cb:7d:49:c0:
dd:36:a5:0d:2b:46:5c:40:49:29:ee:96:af:a2:11:e5:73:95:
18:b7:99:de:c1:52:22:ce:c0:41:22:87:bc:8f:a0:ee:a1:54:
cc:34:ba:ca:7a:6b:13:30:88:fd:68:10:9a:f4:70:73:08:f8:
1f:68:59:e0:7a:d5:b4:e8:61:eb:59:4b:b7:e9:00:d7:1f:e4:
2a:68:9e:cf:e4:7f:da:b5:8a:01:e8:5a:41:97:a9:5e:a5:46:
e3:1d:ab:1b:85:39:c3:94:bf:31:0b:da:66:72:3a:e4:79:68:
3d:87:9b:38:6e:ba:13:a4:39:b6:e4:c8:b8:06:b1:8e:a8:3f:
fa:ba:04:18:69:9a:ee:73:ef:be:7c:bb:95:b7:92:ee:d3:ad:
cf:28:b8:0b:1e:b7:c0:aa:fe:cb:0c:4a:70:af:f2:2a:87:f3:
a7:1a:95:e1:bf:35:3f:23:0c:6a:98:0e:7a:d9:52:d2:a5:51:
17:c5:e4:cb:a3:72:4e:ce:35:b8:ac:2a:05:81:9e:93:c7:61:
8a:ef:d8:3b:81:db:99:c7:4b:31:a1:6a:98:4c:6b:3f:f3:94:
f3:de:f6:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net