Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa
File: aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa (raw, json)
Hash identifier: ILXpytPzIOYmWtiJelcT/tWJHPjdDzBj2+wErGlE+lQ=
Subject key identifier: 68:13:C3:4B:FD:CB:C6:30:07:65:B3:43:41:78:93:D6:80:40:69:6F
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0185709502D091EE61CD22E87CD6D6DC9F92
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa
Signing time: Mon 02 Jan 2023 03:44:51 +0000
ROA not before: Mon 02 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207795
IP address blocks: 194.28.156.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:02:d0:91:ee:61:cd:22:e8:7c:d6:d6:dc:9f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6813c34bfdcbc6300765b343417893d68040696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:93:a8:18:2a:1c:90:85:9c:a6:a6:2f:7d:
d3:ea:85:c7:fc:77:f2:7a:8d:b1:f1:68:30:5b:e1:
76:e2:89:02:2b:56:f0:52:9c:2c:e1:e8:aa:35:55:
4e:e8:01:8a:8a:95:70:da:83:19:ec:a2:d1:63:48:
26:ea:b7:1d:2a:76:d6:48:4b:54:86:4d:79:96:81:
a5:22:c2:7f:74:5e:a9:44:c9:e8:c8:1d:43:6a:0c:
9f:ed:fa:db:c7:c0:06:42:55:05:19:c2:5f:58:1c:
71:f6:43:56:22:9d:0c:9b:5f:29:4c:6a:03:bd:2f:
1b:71:1e:59:c3:93:d1:92:20:ce:5e:ee:12:4b:05:
64:8e:69:b4:7b:8f:1e:dc:50:38:e9:54:44:aa:67:
3c:13:0e:c1:ef:f5:13:a6:7e:40:1c:04:bc:9f:b3:
9a:91:ce:35:2c:d6:3c:95:7c:b1:d9:6c:3e:c1:8f:
e5:08:b8:be:f2:db:3f:6a:f6:d0:c4:05:4c:21:49:
79:ed:1c:1a:64:d1:a6:53:d5:82:66:dd:a8:fd:c1:
5c:e7:62:7f:6e:a3:06:32:92:99:e1:98:c9:38:64:
cc:e7:0a:ab:d5:26:4c:55:61:92:f0:e2:c5:e0:56:
1d:97:8e:c5:7e:4e:28:04:35:51:36:42:cd:64:37:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:C3:4B:FD:CB:C6:30:07:65:B3:43:41:78:93:D6:80:40:69:6F
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/aBPDS_3LxjAHZbNDQXiT1oBAaW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
80:25:9e:8f:82:3a:a3:10:50:4b:2e:c9:fc:36:72:eb:df:5d:
72:3d:6a:bd:3e:41:4d:3b:92:2f:26:c2:fb:8d:55:4c:de:b5:
81:50:1c:76:9f:e3:0b:85:d3:54:82:82:c8:fb:d5:9d:bd:64:
87:8d:5c:6a:71:24:ff:5e:62:7c:39:3f:9f:c6:7e:1d:02:47:
92:c7:82:20:3e:28:79:b1:2d:86:14:6d:bc:43:08:1a:72:f7:
e5:8d:2d:5d:96:2a:c0:bb:58:84:a2:b4:5e:69:0f:ca:36:a4:
4b:04:0a:f6:e5:d7:7d:0b:f4:23:0d:ef:53:4d:e3:21:a1:13:
2e:96:18:03:70:e6:4c:2f:78:51:44:df:3b:b5:00:e6:a9:78:
86:ee:0e:6f:40:4a:30:fc:10:cf:7e:3d:42:62:8b:22:82:5b:
6c:b0:f8:75:c7:d1:19:05:aa:a5:03:8e:15:20:ed:da:80:4d:
69:5c:0c:71:83:96:4e:ae:0d:fb:3b:84:3b:45:ae:53:9a:56:
bc:2b:10:fc:69:7a:9d:3c:41:2c:75:5d:0f:43:f5:47:df:1e:
7a:03:91:e3:85:f3:9e:2d:9a:fd:2e:15:14:b2:d4:90:74:1f:
fa:d1:7e:da:b8:89:8e:dd:55:8e:95:bc:1d:bd:93:08:b3:14:
3f:8d:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net