Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/B2XiKt66uCMCIpA9FDQg-mu6RYM.roa
File: B2XiKt66uCMCIpA9FDQg-mu6RYM.roa (raw, json)
Hash identifier: zrrdVoHzauLV4upK7VOOoDnwSMAPadZlFMHmZvW/f1k=
Subject key identifier: 07:65:E2:2A:DE:BA:B8:23:02:22:90:3D:14:34:20:FA:6B:BA:45:83
Certificate issuer: /CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Certificate serial: 3199B242
Authority key identifier: DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/B2XiKt66uCMCIpA9FDQg-mu6RYM.roa
Signing time: Mon 27 Jun 2022 17:59:33 +0000
ROA not before: Mon 27 Jun 2022 17:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35226
IP address blocks: 89.184.56.0/23 maxlen: 23
185.179.40.0/24 maxlen: 24
89.16.64.0/19 maxlen: 19
109.106.96.0/20 maxlen: 20
109.106.96.0/19 maxlen: 19
78.143.128.0/18 maxlen: 18
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
2a02:2158::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832156226 (0x3199b242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Validity
Not Before: Jun 27 17:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0765e22adebab8230222903d143420fa6bba4583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:76:e4:e8:43:af:00:6f:74:ca:30:b3:68:
3f:f8:d9:ee:17:c1:84:ab:39:0a:8c:f6:3b:d2:29:
9b:dd:fa:2f:e1:28:b0:93:6b:ba:fc:bf:39:4c:e9:
ca:0a:8a:d7:5f:d1:58:89:0e:48:60:9d:a2:a9:61:
3b:74:e0:8c:c3:0e:27:3c:80:40:da:d2:27:87:d6:
cd:8d:42:9e:4d:a8:25:f2:39:5c:66:a2:40:0d:49:
5f:ce:6c:05:f2:78:54:ae:92:62:d1:44:0e:c4:e0:
09:b9:4e:63:d4:32:84:ea:f9:19:c8:b4:91:66:87:
eb:82:43:93:c0:b2:ed:87:a6:2b:fe:83:bd:90:ed:
24:76:99:e7:89:5c:58:7e:c1:0b:30:13:9b:13:f0:
d1:27:e1:53:65:26:0b:47:d4:8f:2c:73:a0:cb:75:
9a:d7:f9:86:04:45:db:ca:b1:0f:77:81:eb:3d:83:
f2:6d:0e:d1:5d:9d:25:5e:a6:89:0e:9b:b3:64:ca:
d9:98:6c:b4:39:7a:e2:df:89:e3:67:8d:97:69:7e:
29:2a:96:d5:69:c6:ab:5d:7e:85:25:89:45:58:38:
d9:52:76:7e:e3:3e:9e:f4:81:b4:fc:3a:d2:76:bf:
db:3e:22:f5:cf:ad:60:ca:9e:94:44:17:89:0a:c8:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:E2:2A:DE:BA:B8:23:02:22:90:3D:14:34:20:FA:6B:BA:45:83
X509v3 Authority Key Identifier:
keyid:DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/B2XiKt66uCMCIpA9FDQg-mu6RYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/3fBI6gK3VRUzURv6kEDdq-EZdMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.128.0/18
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
109.106.96.0/19
185.179.40.0/24
IPv6:
2a02:2158::/32
Signature Algorithm: sha256WithRSAEncryption
0d:5a:19:0a:83:f3:3b:01:fc:d2:c0:10:4d:88:f0:d0:a1:c6:
5e:40:53:13:69:03:a5:ae:9d:f0:35:6b:d0:95:0a:b8:02:ea:
b1:2e:5b:72:6d:d2:2d:20:f4:58:1c:35:3f:9c:4f:4c:d8:2c:
21:c5:bd:a0:e6:31:74:15:95:ae:bc:3d:46:02:48:93:46:66:
4c:65:d9:ac:79:78:6e:61:3d:d8:e0:e5:fa:b9:1e:42:77:23:
3e:81:c9:42:a1:0f:3c:49:45:f2:1d:a0:c9:48:f1:5f:15:0d:
12:cd:13:ca:ce:aa:10:54:f6:5f:2b:1c:e7:3c:70:f8:36:3c:
5d:a4:0e:99:0d:e7:06:b2:7b:62:e0:a3:bb:ed:ba:e1:2a:a4:
ea:2a:63:a9:fc:cc:91:56:8d:ea:89:d2:c1:71:0d:2c:c4:b4:
9f:e7:1e:29:95:7b:a8:01:86:86:4a:e4:41:c0:3d:d3:53:a1:
4c:16:7d:0c:9d:60:50:96:65:fd:bb:27:4b:79:24:a4:ea:65:
7e:79:fb:6d:83:6c:c3:d1:05:c1:31:12:3d:b3:f8:9c:2a:f0:
a4:f6:12:04:b0:8a:fb:65:a5:b9:e0:31:7b:99:d8:4e:e7:4d:
50:cf:ea:cf:0a:ef:07:f3:2e:97:ce:47:61:d5:9f:f9:34:c7:
ec:60:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net