Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0ff256-be1b-4610-ab02-7b1f93c4138a/1/3ydydhwMhBMsnpyQM9W0E78AUPE.roa
File: 3ydydhwMhBMsnpyQM9W0E78AUPE.roa (raw, json)
Hash identifier: FVKRgEh4ctcSeB18mLDB1OzToIe+tCwjjIa2fwx5CwY=
Subject key identifier: DF:27:72:76:1C:0C:84:13:2C:9E:9C:90:33:D5:B4:13:BF:00:50:F1
Certificate issuer: /CN=a1b8a2bbf80848429e870e774feeea2ce25e46c5
Certificate serial: 0181EE99DD1A407B3B759F16A3AFC33DB8AB
Authority key identifier: A1:B8:A2:BB:F8:08:48:42:9E:87:0E:77:4F:EE:EA:2C:E2:5E:46:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obiiu_gISEKehw53T-7qLOJeRsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0ff256-be1b-4610-ab02-7b1f93c4138a/1/3ydydhwMhBMsnpyQM9W0E78AUPE.roa
Signing time: Mon 11 Jul 2022 18:51:09 +0000
ROA not before: Mon 11 Jul 2022 18:51:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 146.19.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:99:dd:1a:40:7b:3b:75:9f:16:a3:af:c3:3d:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b8a2bbf80848429e870e774feeea2ce25e46c5
Validity
Not Before: Jul 11 18:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df2772761c0c84132c9e9c9033d5b413bf0050f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:8d:49:5c:91:c7:bb:77:9c:43:87:b0:57:
3e:8d:da:10:be:35:28:38:5b:99:87:a6:cd:10:cf:
b7:8f:00:ad:14:e7:c0:02:c1:c9:99:aa:03:f5:72:
2c:31:e2:22:6d:f6:c3:6b:59:d2:46:31:a7:d5:ec:
0e:b6:a8:30:b2:0f:0d:e4:55:96:32:ed:03:62:77:
4e:5e:e7:20:7f:a5:69:fa:12:8f:90:eb:12:a0:48:
da:82:cd:84:54:64:73:85:ba:5c:63:3e:70:94:15:
62:fe:17:72:ff:94:5f:e6:86:ee:d3:7a:20:bc:60:
4b:39:a9:dc:98:94:de:1d:68:af:7f:de:ef:6a:c4:
76:5d:37:f4:e7:ef:de:3a:32:07:ed:ee:95:a5:64:
9f:7a:4d:bf:b3:09:7d:66:47:76:40:d4:79:6c:0d:
d0:91:8e:67:94:45:05:51:7a:82:64:21:c4:ec:a7:
9e:c6:ab:95:12:2b:6d:41:6f:94:ec:72:00:ea:3a:
6f:d6:83:e4:b8:1f:d3:c8:46:49:bf:8c:28:7a:e0:
c5:fc:56:7e:c6:24:fe:9e:ea:0f:63:f5:ed:16:4f:
bc:b7:88:ce:47:f7:4d:7f:b1:6a:6f:13:63:47:17:
c7:e7:05:46:42:dd:31:65:79:3f:a9:30:fe:3e:d9:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:72:76:1C:0C:84:13:2C:9E:9C:90:33:D5:B4:13:BF:00:50:F1
X509v3 Authority Key Identifier:
keyid:A1:B8:A2:BB:F8:08:48:42:9E:87:0E:77:4F:EE:EA:2C:E2:5E:46:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obiiu_gISEKehw53T-7qLOJeRsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0ff256-be1b-4610-ab02-7b1f93c4138a/1/3ydydhwMhBMsnpyQM9W0E78AUPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0ff256-be1b-4610-ab02-7b1f93c4138a/1/obiiu_gISEKehw53T-7qLOJeRsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.210.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:43:84:11:db:77:cc:9a:49:9a:44:9f:17:bd:c7:41:02:bf:
ef:f5:58:d2:85:d2:19:be:8e:e1:de:d8:a6:de:12:50:b7:86:
9c:2c:7c:95:40:0a:06:c9:e6:b9:03:71:0c:d1:56:d2:69:47:
ea:0f:66:02:36:85:11:c9:eb:25:5f:10:48:52:f5:19:8f:e5:
5b:51:5a:e0:d9:07:42:c6:66:db:4e:04:c4:eb:71:fb:c6:2f:
1e:cb:fd:a3:a8:a7:4e:6c:92:cc:24:8f:18:57:17:2e:f3:fc:
33:e1:99:dd:4d:08:15:bc:9c:1e:47:d1:ad:ad:7d:81:d5:36:
92:11:7e:24:88:42:dc:47:48:c9:62:8c:59:a5:47:08:43:70:
f4:55:a8:d8:3f:ff:b2:90:8e:31:94:71:fc:7d:83:91:3b:3a:
13:52:35:2c:bc:3f:e8:92:af:ed:98:f4:e3:9b:24:0d:7c:9b:
4c:e8:ac:ce:3a:f6:d2:b9:44:3c:bb:8e:0c:91:00:33:e2:1e:
d2:77:80:99:ef:f8:d1:89:73:41:22:cc:4e:e1:8c:84:3f:be:
57:90:65:2a:68:b3:af:5d:bb:54:63:36:67:a9:de:22:9b:f6:
53:a5:12:73:77:f3:d7:98:c9:cb:77:28:50:47:d4:cc:8c:31:
84:13:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net