Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03ff40-b196-4b88-92da-82f6e2ffe43c/1/G4bngNIVEJjIJivdj1Kw9_13QhY.roa
File: G4bngNIVEJjIJivdj1Kw9_13QhY.roa (raw, json)
Hash identifier: pR+FtfHv22nEQWaQTjjWCfKRJTLrhAAxBmZkkqKbcko=
Subject key identifier: 1B:86:E7:80:D2:15:10:98:C8:26:2B:DD:8F:52:B0:F7:FD:77:42:16
Certificate issuer: /CN=271c9f260d0b29f1b1fea116731ae615068c46ba
Certificate serial: 05805EED
Authority key identifier: 27:1C:9F:26:0D:0B:29:F1:B1:FE:A1:16:73:1A:E6:15:06:8C:46:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxyfJg0LKfGx_qEWcxrmFQaMRro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03ff40-b196-4b88-92da-82f6e2ffe43c/1/G4bngNIVEJjIJivdj1Kw9_13QhY.roa
Signing time: Sat 01 Jan 2022 04:59:03 +0000
ROA not before: Sat 01 Jan 2022 04:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61047
IP address blocks: 185.43.44.0/22 maxlen: 22
185.189.188.0/22 maxlen: 22
185.71.224.0/22 maxlen: 22
185.83.96.0/22 maxlen: 22
91.220.197.0/24 maxlen: 24
185.124.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92298989 (0x5805eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271c9f260d0b29f1b1fea116731ae615068c46ba
Validity
Not Before: Jan 1 04:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b86e780d2151098c8262bdd8f52b0f7fd774216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:49:d8:f1:11:35:7c:60:63:d7:16:e0:7e:
dc:b7:0d:13:8c:eb:26:16:24:3d:9a:59:7f:f7:9e:
a4:5c:6e:e2:cc:06:33:37:9d:b9:60:81:22:37:75:
43:82:6c:ae:11:54:42:60:08:ae:e7:4b:0d:4b:35:
b9:82:2d:ee:9f:51:54:67:4e:a2:71:95:40:29:89:
17:06:81:bd:25:1b:5f:f4:25:d7:a5:61:fe:93:d1:
e0:8a:ab:9a:8c:1d:29:00:84:c9:4f:54:6c:77:11:
a3:f0:44:80:71:a2:42:2d:77:c8:62:43:db:32:a2:
43:66:5c:9f:91:ea:fd:49:64:6d:53:ab:65:5e:e4:
ec:57:09:7a:dd:47:4c:4a:86:ea:1d:31:52:58:68:
ef:ab:b0:de:5f:05:c9:1e:4f:f4:ff:e5:cb:df:85:
a3:83:c9:a5:b9:17:55:98:89:d7:0a:c4:00:0e:91:
95:3f:c7:93:64:f5:a9:f2:65:de:e6:9c:b2:27:95:
0e:4c:93:62:68:63:c9:72:64:5f:3f:98:65:ac:f0:
81:45:01:fb:b6:72:fa:8c:4a:a3:8f:6d:17:77:d7:
97:aa:f3:61:4e:37:26:ec:29:85:ce:3d:9c:4f:38:
60:6f:0d:6b:fa:ca:96:c7:cd:d8:1f:a3:dd:8e:0f:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:86:E7:80:D2:15:10:98:C8:26:2B:DD:8F:52:B0:F7:FD:77:42:16
X509v3 Authority Key Identifier:
keyid:27:1C:9F:26:0D:0B:29:F1:B1:FE:A1:16:73:1A:E6:15:06:8C:46:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyfJg0LKfGx_qEWcxrmFQaMRro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03ff40-b196-4b88-92da-82f6e2ffe43c/1/G4bngNIVEJjIJivdj1Kw9_13QhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03ff40-b196-4b88-92da-82f6e2ffe43c/1/JxyfJg0LKfGx_qEWcxrmFQaMRro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.197.0/24
185.43.44.0/22
185.71.224.0/22
185.83.96.0/22
185.124.200.0/22
185.189.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:8e:66:9f:96:a3:44:d9:67:af:b8:6f:ac:9d:3c:f3:1a:4a:
62:25:b1:31:20:4c:f9:25:c0:f8:fc:ef:1b:83:b5:d5:61:b0:
04:a9:35:ed:2e:a8:1a:0d:7e:85:a0:6e:0a:53:a2:7e:b5:f4:
be:b4:3a:1a:48:be:ab:2a:a8:75:d7:62:6f:8d:75:42:b9:92:
11:e7:53:a3:d8:f8:ee:c8:7c:09:b0:fe:54:5a:4e:8e:6f:7e:
f8:c4:e6:6d:1f:97:a2:bf:c8:40:a9:70:3c:79:28:95:00:09:
65:7c:bf:9f:79:45:d2:45:7f:e3:89:35:11:ed:b3:41:d1:73:
1b:bb:da:db:9f:a0:53:59:c5:ef:f2:76:a7:f7:c2:c5:b2:a2:
7a:11:41:77:19:c5:a3:37:f5:7f:b7:3a:f3:cd:b5:f3:fe:8f:
a4:6f:7b:9a:ea:6b:56:70:3f:2d:1b:06:1f:07:47:a6:4c:bd:
7c:ff:e6:e2:3c:df:1c:c6:27:45:98:20:85:81:3e:b4:9f:b8:
7b:f1:95:96:6c:b7:d5:d4:8c:4b:c0:24:1f:9f:24:5a:ae:46:
6b:b2:e5:4f:2b:c6:1b:dd:82:21:97:7d:44:3f:5d:a7:d6:05:
d4:82:d0:f5:18:de:4f:f9:7d:a9:ab:94:8a:a8:05:1d:53:89:
ff:b5:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:31 2023 by rpki-client on console.sobornost.net