Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/3vpldlcedC8BYzQRrsJNj0QLlpg.roa
File: 3vpldlcedC8BYzQRrsJNj0QLlpg.roa (raw, json)
Hash identifier: jL5RHZrhA3uOsnV29cBScJnTl9J79jaM2lOUYIaPAdg=
Subject key identifier: DE:FA:65:76:57:1E:74:2F:01:63:34:11:AE:C2:4D:8F:44:0B:96:98
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 018CCA2BDB16E3B2820B3D1D5FE9EFC726FD
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/3vpldlcedC8BYzQRrsJNj0QLlpg.roa
Signing time: Tue 02 Jan 2024 12:35:20 +0000
ROA not before: Tue 02 Jan 2024 12:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42010
IP address blocks: 5.28.48.0/21 maxlen: 24
185.135.168.0/23 maxlen: 23
185.135.170.0/23 maxlen: 23
128.65.97.0/24 maxlen: 24
128.65.98.0/23 maxlen: 23
128.65.96.0/24 maxlen: 24
128.65.96.0/21 maxlen: 21
91.103.184.0/21 maxlen: 24
185.91.20.0/22 maxlen: 24
128.65.100.0/22 maxlen: 22
2a03:7f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:db:16:e3:b2:82:0b:3d:1d:5f:e9:ef:c7:26:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Jan 2 12:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=defa6576571e742f01633411aec24d8f440b9698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:07:d1:8e:06:0e:3b:3f:8d:0e:62:a0:48:
b6:9a:e6:a3:45:e8:ea:75:9c:44:a0:89:99:db:71:
13:9f:4c:0c:82:34:0f:cc:cd:8c:21:53:07:c9:d5:
7f:5a:6d:c3:0f:e5:55:12:ac:a3:ef:1f:ae:31:db:
bd:ef:46:c1:a6:8a:f8:32:69:d7:3c:c1:04:c8:c5:
a5:bb:54:1c:d0:ac:22:66:da:0a:0c:49:a8:6e:c4:
4c:c1:9a:30:2c:25:8d:e2:b0:ee:64:a5:c3:f3:5e:
86:d7:6f:80:4b:42:fa:11:1a:97:11:90:62:23:90:
03:ea:5c:4c:ab:db:db:8e:c5:37:58:32:8c:0d:d4:
79:dc:a2:f7:ee:cb:0f:0d:22:0f:28:c7:a8:87:83:
7e:a8:07:1f:e1:28:d3:05:6d:79:ca:90:69:f9:a7:
e3:24:d7:a4:c8:ec:ab:bb:23:46:6a:11:0c:f8:5b:
de:b5:2e:4c:2e:05:ae:63:37:2d:c0:6d:80:dc:f7:
ab:f0:26:eb:99:a4:32:13:0a:2c:36:b4:45:b0:99:
a6:9a:00:03:3e:ea:38:0f:8c:ec:31:c3:13:44:74:
12:38:64:88:7d:a9:1d:42:cc:7c:ed:27:b2:c4:09:
da:0c:f5:ee:e6:b1:80:2a:b0:6a:92:83:2a:a9:20:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FA:65:76:57:1E:74:2F:01:63:34:11:AE:C2:4D:8F:44:0B:96:98
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/3vpldlcedC8BYzQRrsJNj0QLlpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.48.0/21
91.103.184.0/21
128.65.96.0/21
185.91.20.0/22
185.135.168.0/22
IPv6:
2a03:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:3a:e1:d6:72:73:3f:1e:9c:d0:b3:dc:26:3a:22:62:9c:7d:
53:f3:93:cf:82:7a:23:3f:90:d8:02:cd:3a:9b:97:fa:6d:fe:
e4:8d:28:ae:53:0c:28:8f:3c:e1:7d:a3:22:08:2a:b9:d3:91:
41:6c:d1:b7:ba:6e:7c:16:db:b0:86:44:8b:70:00:3a:bc:5d:
e9:dc:6f:e7:07:54:d7:e7:ab:e0:80:67:72:e5:c1:ee:de:e2:
d9:9f:c1:6f:07:fb:18:18:b6:b4:08:af:ae:66:a2:79:1e:10:
2a:f1:6a:6f:48:9c:27:39:d0:95:85:75:b2:69:e1:ab:c4:8c:
4d:9d:a6:fb:1c:12:c7:25:a9:b1:2a:e3:02:f6:38:36:89:2e:
32:d7:bf:53:21:b4:db:f6:e9:1d:0a:21:8c:69:2a:a9:db:6d:
dc:d0:81:75:43:66:77:e8:39:32:f7:1d:c4:72:7f:be:01:34:
bc:10:57:73:4e:a1:27:b4:a6:8c:ff:ba:63:21:60:44:03:40:
12:ad:65:e6:e3:83:d3:69:2a:b9:b8:26:98:17:ba:ee:e5:4c:
91:33:4b:4e:d6:ea:34:9e:90:0e:e3:80:42:ac:63:12:60:dd:
6a:f2:f2:05:9f:b2:d2:ca:d5:94:45:00:b3:77:94:28:ca:37:
87:4b:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:52 2024 by rpki-client on console.sobornost.net