Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa
File: faUrWBXvHIpn74RBIrLyu8diW84.roa (raw, json)
Hash identifier: 5IhkfJ4tatxxwUvroWVCqKeJ/pOgzXuXjBX2Wy7Fecw=
Subject key identifier: 7D:A5:2B:58:15:EF:1C:8A:67:EF:84:41:22:B2:F2:BB:C7:62:5B:CE
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0181F72D50D57DD56BEE57002CF772E7D80C
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa
Signing time: Wed 13 Jul 2022 10:49:10 +0000
ROA not before: Wed 13 Jul 2022 10:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 194.28.156.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:2d:50:d5:7d:d5:6b:ee:57:00:2c:f7:72:e7:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jul 13 10:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7da52b5815ef1c8a67ef844122b2f2bbc7625bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:9c:c8:17:27:56:51:89:3c:2f:16:70:45:
b0:cc:c7:cb:d0:59:ad:ef:78:f8:2c:59:73:03:bf:
2b:f9:3a:36:d9:19:13:04:7f:33:3e:e7:d0:06:d8:
04:bf:fa:d7:c1:98:e2:f9:98:68:ec:ef:c4:e5:50:
e7:85:da:e2:27:65:b8:f9:24:6c:9a:39:e2:15:d7:
d0:90:5e:11:bd:8f:a2:ab:f6:a0:b2:53:09:a6:9f:
15:e2:72:9d:20:4b:36:d2:4d:9b:1c:be:24:f3:13:
1e:2e:ee:88:1c:58:a9:b2:d5:53:9a:bd:f8:bf:90:
3c:f8:fc:a3:dc:75:85:02:38:88:d8:4a:e4:cf:80:
ed:52:14:8f:c1:3e:de:bd:18:fa:fc:6f:1c:91:8f:
7f:25:f3:cb:09:a2:93:fd:39:89:e9:34:23:e7:a2:
c9:b6:92:94:96:cc:56:ed:95:81:e6:a7:c1:de:5f:
ea:56:5d:69:14:ff:31:5e:de:ae:e8:a9:15:f3:9d:
ea:2b:4b:05:f5:1c:9b:fd:76:b8:8e:82:cc:09:ff:
f8:8f:23:ad:4d:75:57:dd:d4:65:14:83:92:4b:6c:
56:bd:43:e0:d3:d1:e1:7b:a6:dd:ee:2f:2c:18:d5:
a4:6e:47:3e:b9:2f:9b:00:41:9b:e6:fb:c7:5e:5a:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:2B:58:15:EF:1C:8A:67:EF:84:41:22:B2:F2:BB:C7:62:5B:CE
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/faUrWBXvHIpn74RBIrLyu8diW84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
27:1a:81:36:c6:b8:97:db:e6:d0:c2:c7:06:a2:6f:1f:69:67:
c0:44:f8:cd:05:fc:5f:1c:53:8c:17:2e:12:08:4f:fe:06:df:
b3:33:c8:e5:28:d4:70:73:ca:16:90:dd:98:d9:b7:77:2e:5f:
f5:a4:d0:33:be:65:97:1a:5b:1e:bb:ae:d5:75:ae:c0:9d:b0:
00:e7:0a:28:2c:31:13:f4:0d:50:39:53:aa:69:35:45:c6:3d:
47:4d:87:0a:2a:ba:ac:14:3d:25:b6:82:6e:aa:16:f3:a4:11:
ea:da:2e:a2:6d:da:a5:85:5d:0a:c8:a0:95:05:8a:c8:a0:dd:
c1:23:69:a9:1e:35:be:04:35:61:a3:60:0d:7a:33:8c:8e:f9:
9d:39:03:57:f0:5e:dc:d9:c0:63:4f:f8:3a:e4:56:e2:94:10:
37:1a:1c:52:ec:5f:7c:db:70:66:23:6a:a1:9f:15:28:46:3e:
c3:80:4d:0e:ac:7c:74:23:56:53:d3:36:2d:81:3d:09:4b:2b:
3d:da:84:84:e0:35:19:9c:ac:ea:6f:be:1e:93:04:31:cf:76:
51:08:b3:5b:c8:89:cc:f1:1e:89:39:bd:5a:f3:b3:8c:d2:4b:
31:ea:43:fe:69:9a:ea:f4:0e:0b:95:9f:25:ad:71:88:a1:cf:
75:f1:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net