Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/eIXWiXdudBQ_cyAVzjwA4av1ffg.roa
File: eIXWiXdudBQ_cyAVzjwA4av1ffg.roa (raw, json)
Hash identifier: WgF00Ym1WBkSQ00USGA33Jq/RyP2gmGSAHot2q3kKkY=
Subject key identifier: 78:85:D6:89:77:6E:74:14:3F:73:20:15:CE:3C:00:E1:AB:F5:7D:F8
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 018CC9BC8EFE381855A2AB406D470CBEB737
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/eIXWiXdudBQ_cyAVzjwA4av1ffg.roa
Signing time: Tue 02 Jan 2024 10:33:46 +0000
ROA not before: Tue 02 Jan 2024 10:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 85.146.192.0/18 maxlen: 18
83.137.136.0/21 maxlen: 21
93.117.192.0/18 maxlen: 18
80.112.192.0/18 maxlen: 18
85.88.96.0/19 maxlen: 19
213.34.128.0/19 maxlen: 19
212.78.192.0/19 maxlen: 19
37.235.8.0/21 maxlen: 21
83.167.192.0/19 maxlen: 19
2a00:18c8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8e:fe:38:18:55:a2:ab:40:6d:47:0c:be:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7885d689776e74143f732015ce3c00e1abf57df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:5a:1d:88:12:84:e3:30:ca:af:0b:10:4a:
47:91:ca:13:52:0c:bd:0c:61:21:47:7b:8a:fa:f8:
75:f6:1e:31:05:b3:29:8b:a4:72:1b:b5:d0:56:42:
f3:9c:34:ad:e5:7e:75:45:8b:7b:a9:0e:e2:2b:a0:
62:4f:36:a5:fe:be:a0:ef:e9:75:5d:55:5a:90:b6:
3a:0d:22:c6:1d:9d:68:3a:8a:59:e4:a6:f7:a8:ab:
83:6f:3b:c8:67:df:11:4a:9e:d4:0f:2b:09:37:2b:
25:5e:21:45:fa:5f:41:d9:2b:73:b8:36:99:af:5f:
9f:cb:44:7b:ed:98:c1:69:95:7b:bd:09:71:04:92:
67:ff:3d:44:d6:71:b6:ba:98:77:51:17:1a:44:7d:
f1:8d:9c:b6:5f:d5:7d:03:c2:90:58:51:77:14:21:
20:69:88:04:8b:7d:b4:5c:96:b2:6f:db:8c:c8:9a:
30:3c:c9:fd:c1:9b:c3:f5:f2:5e:0a:bb:0e:9c:0e:
f3:1b:a6:2e:bc:5a:45:90:2c:ff:f4:05:a3:d1:5b:
df:b7:f5:67:b5:18:65:5e:ae:a4:7a:a5:c6:cb:5e:
a0:d5:5e:d6:b6:e3:4e:d4:81:5c:3f:cd:5a:9b:8b:
f0:2f:04:a8:f9:64:65:e4:59:b2:47:d0:51:38:6b:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:D6:89:77:6E:74:14:3F:73:20:15:CE:3C:00:E1:AB:F5:7D:F8
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/eIXWiXdudBQ_cyAVzjwA4av1ffg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.8.0/21
80.112.192.0/18
83.137.136.0/21
83.167.192.0/19
85.88.96.0/19
85.146.192.0/18
93.117.192.0/18
212.78.192.0/19
213.34.128.0/19
IPv6:
2a00:18c8::/29
Signature Algorithm: sha256WithRSAEncryption
4d:dd:b6:e8:db:bc:c3:29:e9:d3:15:17:9e:7f:b8:75:6f:62:
01:49:72:d3:24:dd:4d:bd:7d:28:3f:62:16:a9:97:21:57:30:
9d:ec:b2:91:17:c2:f7:37:de:8f:c3:71:ac:05:a4:6f:64:2b:
8d:de:7a:33:f7:9a:13:00:91:03:e0:e8:d0:2c:b9:c1:6d:20:
81:2a:bf:1e:b0:4d:28:50:51:7e:f7:8f:f0:10:d1:b4:b3:3e:
01:60:0e:33:e2:d1:be:96:90:d1:89:cb:84:cd:3e:c0:a2:38:
48:a7:5d:cd:60:11:64:5a:30:f9:c8:9c:d7:e5:9a:d2:96:94:
ca:02:3f:eb:37:ff:2b:79:94:59:14:12:cd:10:22:e5:8c:fe:
c9:be:d7:d0:af:0a:8b:b1:5c:93:2d:c1:e7:4a:74:f2:ca:06:
6c:07:21:7f:76:cf:12:e7:f8:37:47:7c:1f:ce:2f:ab:de:46:
31:84:d8:ac:92:74:48:e3:97:76:1a:43:11:52:02:89:18:91:
42:4f:c3:e0:70:f8:8e:e2:e3:a9:ab:eb:42:7c:ef:37:0d:6b:
b2:7f:4c:ab:47:ec:7f:34:d3:86:69:74:36:e3:fb:e7:6a:91:
b3:88:77:f7:59:65:91:8f:77:08:ac:ce:d7:dd:f9:47:4d:c8:
16:a2:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 03:57:56 2024 by rpki-client on console.sobornost.net