Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/26PRcIwqnMQiukr18tU0-vg7nTw.roa
File: 26PRcIwqnMQiukr18tU0-vg7nTw.roa (raw, json)
Hash identifier: EB5oxYCpWUr3ID0ED6vvZGTwkk+2P71uObnz3q25s3U=
Subject key identifier: DB:A3:D1:70:8C:2A:9C:C4:22:BA:4A:F5:F2:D5:34:FA:F8:3B:9D:3C
Certificate issuer: /CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Certificate serial: 096070BC
Authority key identifier: C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/26PRcIwqnMQiukr18tU0-vg7nTw.roa
Signing time: Sat 01 Jan 2022 09:53:33 +0000
ROA not before: Sat 01 Jan 2022 09:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
185.152.72.0/22 maxlen: 22
185.206.192.0/22 maxlen: 22
94.247.48.0/21 maxlen: 21
37.46.16.0/21 maxlen: 21
2a0b:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157315260 (0x96070bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Validity
Not Before: Jan 1 09:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dba3d1708c2a9cc422ba4af5f2d534faf83b9d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:90:3f:97:66:72:c4:8c:c8:34:05:c2:05:
88:89:fa:67:d0:6e:68:bf:17:46:52:45:93:4c:4b:
73:63:41:65:a4:46:bd:ac:65:9e:e9:0b:1e:d8:0e:
e8:5c:95:5d:68:74:04:6e:7f:a5:eb:6d:16:2c:33:
df:08:03:b7:cd:2f:21:96:db:23:a3:b1:12:59:50:
06:91:9b:42:d6:be:f7:c6:6f:31:01:2f:40:89:f8:
89:87:48:3f:89:6c:8b:24:35:ea:8d:8b:78:05:60:
16:0d:1e:23:e2:dd:c9:8a:03:23:36:64:8b:16:48:
b3:b0:20:4a:5d:a2:52:a3:9a:cb:ab:4a:e2:a2:5f:
f2:d1:5e:e0:a7:a5:bf:cb:a7:56:9a:10:90:6f:32:
47:99:e4:46:35:86:bc:e2:ea:b7:df:26:dd:47:f0:
8d:62:60:ab:ef:8b:3d:4b:9a:de:f8:51:03:0d:a0:
c0:ff:05:fb:2e:60:99:05:31:f4:84:0f:e9:d3:ff:
72:87:e8:91:63:53:6f:ac:18:8d:c4:89:c2:39:39:
b3:41:c0:38:e1:8b:96:10:a7:d3:67:71:bf:5f:de:
c1:7c:2c:b4:ef:7f:87:1d:cd:e6:66:4a:a2:74:d6:
11:be:39:d0:fd:02:20:7f:32:e3:9f:5c:7f:1e:ed:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:D1:70:8C:2A:9C:C4:22:BA:4A:F5:F2:D5:34:FA:F8:3B:9D:3C
X509v3 Authority Key Identifier:
keyid:C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/26PRcIwqnMQiukr18tU0-vg7nTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/x3l4GbJFsWvgtHlY9-ar2Og9CZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
93.92.8.0/21
94.247.48.0/21
185.152.72.0/22
185.206.192.0/22
IPv6:
2a0b:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:12:c9:35:37:e2:27:36:bd:50:30:6d:08:36:55:67:00:f6:
60:44:20:5c:9b:e6:a9:72:18:72:7d:05:64:27:b3:f4:9f:3d:
f5:f9:2c:1e:2e:a3:00:b8:d2:dc:6e:af:b3:ae:6a:4d:f1:5c:
f0:04:97:f6:46:a7:06:a9:4e:45:aa:ec:31:77:97:44:b9:60:
48:90:02:91:56:87:98:ea:57:fb:b8:21:ae:3e:93:4a:88:87:
ae:10:b8:dd:32:72:01:c2:0e:fd:16:47:71:86:16:32:9e:1c:
a4:ba:78:09:ae:ba:b6:f5:e6:2c:d5:a2:9e:8c:6d:ab:1f:23:
66:2c:d8:20:c5:bc:46:b8:2f:4d:ae:bb:8e:82:d7:ec:16:5c:
0d:7d:c7:c2:5b:55:6c:6b:5c:bc:d2:36:47:1a:17:73:9b:79:
9b:ea:b0:6a:3c:1d:b0:50:92:05:c0:41:14:76:6f:5c:ff:eb:
3f:d2:4a:21:51:04:9a:75:e7:36:1d:bd:49:8d:8f:da:77:9e:
53:c3:4f:9d:e8:be:a6:73:0f:da:b1:a9:a0:4e:02:66:66:24:
54:af:f6:5e:87:a1:12:78:fd:d5:63:6a:5c:c3:6d:16:b0:f6:
55:22:4b:5d:d6:48:73:5b:c7:84:c9:f3:04:4e:01:6d:59:3b:
c2:b8:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:06 2023 by rpki-client on console.sobornost.net