Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/NAjTI2HWoA8kJQbyWYWVYfT6VLg.roa
File: NAjTI2HWoA8kJQbyWYWVYfT6VLg.roa (raw, json)
Hash identifier: pGyJSRO/1iPVqex6xW2ZFMPepWH9SotybJh+L6S6WnQ=
Subject key identifier: 34:08:D3:23:61:D6:A0:0F:24:25:06:F2:59:85:95:61:F4:FA:54:B8
Certificate issuer: /CN=3bc6197496971f4ca3c5e576d23a00f6288f82f2
Certificate serial: 0D6DD8
Authority key identifier: 3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8YZdJaXH0yjxeV20joA9iiPgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/NAjTI2HWoA8kJQbyWYWVYfT6VLg.roa
Signing time: Wed 13 Apr 2022 07:54:00 +0000
ROA not before: Wed 13 Apr 2022 07:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15594
IP address blocks: 217.116.112.0/20 maxlen: 20
212.9.32.0/19 maxlen: 19
217.10.64.0/20 maxlen: 20
82.116.96.0/19 maxlen: 19
95.174.128.0/19 maxlen: 19
2001:ab7:f000::/36 maxlen: 36
2001:ab7:3000::/36 maxlen: 36
2001:ab7:1000::/36 maxlen: 36
2001:ab7:2000::/36 maxlen: 36
2001:ab7::/36 maxlen: 36
2001:ab0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880088 (0xd6dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc6197496971f4ca3c5e576d23a00f6288f82f2
Validity
Not Before: Apr 13 07:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3408d32361d6a00f242506f259859561f4fa54b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:91:d9:7b:79:e7:cc:29:1a:8c:50:10:e8:
66:02:36:e3:80:e4:1a:81:b3:46:9e:23:a3:46:1d:
aa:14:d6:f8:d7:b2:c3:b0:1e:01:25:97:9e:ad:b1:
35:58:ed:14:9e:4c:af:e5:0d:e8:fe:eb:1e:46:c9:
f0:35:dc:8c:ed:e5:e5:ee:02:c5:19:fa:e2:10:c6:
14:13:8c:70:3b:24:15:39:af:8c:28:d9:df:35:ab:
bf:a5:4c:b8:3d:97:81:b0:23:0d:fd:8d:32:b8:aa:
ef:b1:ee:ec:92:6e:a4:74:f4:27:99:d7:e2:59:f2:
70:34:f1:99:c9:ea:77:c3:7f:a0:7a:4a:0f:9f:f6:
28:e0:73:74:2b:66:df:3d:f5:69:3d:f7:6f:b3:53:
7c:fc:d2:84:42:3c:05:1a:d1:a5:c5:af:cc:81:3f:
03:80:50:ce:59:72:08:06:b1:bc:54:57:3d:ff:a2:
a5:b8:71:a0:7b:a1:6a:fa:44:f1:91:47:24:3f:d6:
27:75:3e:e0:65:20:a8:a5:a2:7e:49:37:49:0a:8a:
80:f7:ea:e9:22:d4:f8:29:9d:9f:8f:2b:9d:58:68:
d8:3c:1a:0f:7d:4b:0d:f9:a4:50:51:05:3c:db:c9:
cd:a8:ba:98:e7:36:11:6e:a5:6e:3b:6f:75:d3:a2:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:D3:23:61:D6:A0:0F:24:25:06:F2:59:85:95:61:F4:FA:54:B8
X509v3 Authority Key Identifier:
keyid:3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8YZdJaXH0yjxeV20joA9iiPgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/NAjTI2HWoA8kJQbyWYWVYfT6VLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.96.0/19
95.174.128.0/19
212.9.32.0/19
217.10.64.0/20
217.116.112.0/20
IPv6:
2001:ab0::/36
2001:ab7::/34
2001:ab7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
14:bd:d6:52:74:a0:9f:a5:06:66:66:cb:2f:1f:ec:60:a9:5c:
c5:fc:b6:7a:63:20:66:48:8a:e9:71:dc:08:52:d8:1b:aa:aa:
95:82:b0:e6:ad:0f:99:3b:5e:d1:3d:f8:ee:c4:a9:c5:2e:7d:
ef:91:3c:5b:4a:83:e0:af:23:39:15:d0:00:e4:7a:14:25:7d:
5c:2b:82:2b:a3:9b:60:aa:2a:01:ec:d0:27:da:ab:50:48:1f:
a3:45:88:7e:b4:de:82:42:9e:e4:df:9f:f3:33:5a:46:45:fc:
07:b4:66:fd:f0:ee:7f:97:79:b0:76:0f:00:ff:80:34:e2:5b:
b4:0e:f2:c0:f0:da:a6:a4:e9:9e:44:d4:cb:cc:58:23:73:de:
83:b0:17:b0:02:3c:7f:ce:c7:83:cb:96:54:d0:2c:91:c0:f3:
f5:18:49:8b:3f:ff:47:58:1a:67:62:c7:64:50:a3:f4:95:96:
d3:46:ba:25:5e:57:d5:99:f9:df:86:03:87:06:6f:cc:20:d6:
73:61:6e:5b:15:e2:e1:66:e9:04:63:21:a4:72:48:57:20:04:
94:3d:38:74:32:13:fd:1f:cf:f6:47:90:e3:60:80:67:9e:8d:
c9:8a:d6:83:1c:05:33:ca:33:fd:9d:eb:6e:56:05:82:8b:ed:
be:78:e5:ab
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIDDW3YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNi
YzYxOTc0OTY5NzFmNGNhM2M1ZTU3NmQyM2EwMGY2Mjg4ZjgyZjIwHhcNMjIwNDEz
MDc1NDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNDA4ZDMyMzYxZDZh
MDBmMjQyNTA2ZjI1OTg1OTU2MWY0ZmE1NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp7eR2Xt558wpGoxQEOhmAjbjgOQagbNGniOjRh2qFNb417LD
sB4BJZeerbE1WO0Unkyv5Q3o/useRsnwNdyM7eXl7gLFGfriEMYUE4xwOyQVOa+M
KNnfNau/pUy4PZeBsCMN/Y0yuKrvse7skm6kdPQnmdfiWfJwNPGZyep3w3+gekoP
n/Yo4HN0K2bfPfVpPfdvs1N8/NKEQjwFGtGlxa/MgT8DgFDOWXIIBrG8VFc9/6Kl
uHGge6Fq+kTxkUckP9YndT7gZSCopaJ+STdJCoqA9+rpItT4KZ2fjyudWGjYPBoP
fUsN+aRQUQU828nNqLqY5zYRbqVuO29106KASwIDAQABo4ICQTCCAj0wHQYDVR0O
BBYEFDQI0yNh1qAPJCUG8lmFlWH0+lS4MB8GA1UdIwQYMBaAFDvGGXSWlx9Mo8Xl
dtI6APYoj4LyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TzhZWmRKYVhIMHlqeGVWMjBqb0E5aWlQZ3ZJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMi8zZDdmYzgtYjRkNi00NDMzLThkNWMtMmZkY2U4NTRmMTBmLzEv
TkFqVEkySFdvQThrSlFieVdZV1ZZZlQ2VkxnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8z
ZDdmYzgtYjRkNi00NDMzLThkNWMtMmZkY2U4NTRmMTBmLzEvTzhZWmRKYVhIMHlq
eGVWMjBqb0E5aWlQZ3ZJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFcG
CCsGAQUFBwEHAQH/BEgwRjAkBAIAATAeAwQFUnRgAwQFX66AAwQF1AkgAwQE2QpA
AwQE2XRwMB4EAgACMBgDBgQgAQqwAAMGBiABCrcAAwYEIAEKt/AwDQYJKoZIhvcN
AQELBQADggEBABS91lJ0oJ+lBmZmyy8f7GCpXMX8tnpjIGZIiulx3AhS2BuqqpWC
sOatD5k7XtE9+O7EqcUufe+RPFtKg+CvIzkV0ADkehQlfVwrgiujm2CqKgHs0Cfa
q1BIH6NFiH603oJCnuTfn/MzWkZF/Ae0Zv3w7n+XebB2DwD/gDTiW7QO8sDw2qak
6Z5E1MvMWCNz3oOwF7ACPH/Ox4PLllTQLJHA8/UYSYs//0dYGmdix2RQo/SVltNG
uiVeV9WZ+d+GA4cGb8wg1nNhblsV4uFm6QRjIaRySFcgBJQ9OHQyE/0fz/ZHkONg
gGeejcmK1oMcBTPKM/2d625WBYKL7b545as=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:25 2023 by rpki-client on console.sobornost.net