Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa
File: 9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa (raw, json)
Hash identifier: ELt9vQq9Ycxanle38U7dMS2hHma5E0/Ph+xIOI1YG00=
Subject key identifier: F5:B6:B0:08:C6:DF:C4:9D:68:00:4A:F8:79:4B:23:3E:63:7B:2C:72
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0185709501BE6B2B7F9962FD02DC2EC191ED
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa
Signing time: Mon 02 Jan 2023 03:44:51 +0000
ROA not before: Mon 02 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.72.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 25
212.69.135.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:01:be:6b:2b:7f:99:62:fd:02:dc:2e:c1:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5b6b008c6dfc49d68004af8794b233e637b2c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:d1:61:20:42:79:df:b6:69:5e:bc:85:ba:
ba:38:a9:ca:60:99:cd:d2:d0:d1:6c:78:49:19:1c:
98:8c:a7:e1:e8:5f:49:0c:01:3b:5c:93:99:89:2a:
21:ad:72:68:85:13:ec:52:de:46:55:f5:53:9a:44:
d3:01:0a:1e:9b:6f:48:43:7a:74:f0:f0:0d:85:d2:
bb:99:7b:7f:37:a3:ed:cb:c4:09:c2:bf:dd:d8:2b:
99:76:34:00:f2:53:59:4f:7a:6e:60:8b:52:a6:b7:
d5:e3:d7:2e:ad:9c:5a:54:f0:16:ec:fd:2b:cb:11:
cf:45:6a:9d:1d:29:67:12:53:b0:c8:17:64:54:a7:
a8:28:a5:66:08:48:34:db:5d:00:5f:97:ef:3d:e8:
49:f6:6b:2b:7b:e5:9b:6d:24:51:2b:74:27:8b:c9:
eb:89:4f:e3:b3:40:75:34:98:4f:af:c3:f1:1d:4c:
ab:c7:ed:80:e0:6f:c7:cf:ec:b2:17:d7:48:93:d0:
fd:4b:93:5b:2e:d9:09:04:ab:7c:14:dd:49:fd:97:
db:8d:e3:e2:35:47:b5:6e:be:39:f3:20:44:13:a9:
68:da:da:b0:e9:d5:cf:27:71:e4:c9:81:74:59:87:
bd:25:c6:90:41:86:08:e5:6b:3b:e6:c9:9a:16:ee:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:B0:08:C6:DF:C4:9D:68:00:4A:F8:79:4B:23:3E:63:7B:2C:72
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/9bawCMbfxJ1oAEr4eUsjPmN7LHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
193.160.72.0/24
193.228.48.0/22
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dd:f4:f1:17:50:c4:7e:e9:44:7c:12:26:a7:cf:49:3e:7c:
38:12:44:68:07:c1:c8:24:32:bc:a0:39:56:ff:de:eb:be:03:
7a:f8:6f:cb:92:14:1b:29:66:6a:cb:81:c3:fb:d1:d9:7f:ee:
81:84:1c:8a:2a:e5:84:86:5c:7b:d3:37:58:5e:21:1a:c8:6c:
a7:51:ad:5a:40:2c:30:36:35:bb:e9:da:a7:de:77:53:73:18:
f0:f2:8b:f1:f6:d2:6c:2d:1f:55:a9:83:ac:83:30:39:ad:73:
0d:59:ad:82:c3:c1:5b:e0:92:ca:b5:b6:50:75:3c:e7:1d:a2:
a1:c2:fb:02:2c:17:1f:79:1c:1f:9e:ef:5d:c8:dc:5b:0f:98:
37:11:fc:67:6d:e8:fc:06:ec:17:f3:ad:e7:42:d8:79:38:d2:
ad:67:67:df:07:e7:82:b1:2a:00:85:fb:2d:99:ee:ce:47:bf:
02:74:9d:af:f0:7a:a1:e6:22:80:89:53:17:b5:c5:30:a6:dc:
c2:b9:73:45:7d:1e:bf:8a:58:3b:02:c7:01:40:d5:ca:30:54:
9b:b4:86:91:e3:d2:b7:a8:32:63:88:d7:75:f1:cd:f6:12:ae:
80:f8:dc:0e:b2:d1:37:14:3e:d6:a4:94:73:1a:c7:8d:77:20:
6c:1f:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net