Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/gH0Vo_gaY9FZBcCu7TddrgUZTZc.roa
File: gH0Vo_gaY9FZBcCu7TddrgUZTZc.roa (raw, json)
Hash identifier: BQFK/uBPqD7wcNBWq+++fo9jMpvBL3NlhrNREifwuh4=
Subject key identifier: 80:7D:15:A3:F8:1A:63:D1:59:05:C0:AE:ED:37:5D:AE:05:19:4D:97
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01856D7883E611935430061272733520BDA9
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/gH0Vo_gaY9FZBcCu7TddrgUZTZc.roa
Signing time: Sun 01 Jan 2023 13:14:52 +0000
ROA not before: Sun 01 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203950
IP address blocks: 185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:83:e6:11:93:54:30:06:12:72:73:35:20:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Jan 1 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807d15a3f81a63d15905c0aeed375dae05194d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:40:c9:a7:99:e2:c3:10:c7:38:1f:fc:66:
14:f7:d7:5a:9c:73:f6:5e:e8:18:ed:59:68:48:88:
69:2a:81:c2:ff:bf:c9:51:d2:37:a4:1c:e0:e0:a5:
5f:dc:fc:6e:20:4b:fc:40:9a:66:5d:71:96:10:80:
be:4d:59:aa:46:ac:d3:c6:c3:f7:24:dd:01:c9:a0:
6c:33:59:ab:ff:ff:0f:c4:95:fb:8b:eb:23:f7:3c:
a5:fc:eb:49:22:15:96:30:73:d5:ca:29:23:f6:06:
dd:13:eb:44:8c:ee:c9:8c:c3:78:d4:42:ca:48:12:
6b:03:04:59:9c:b9:06:36:08:40:37:a2:60:4e:6a:
ab:cf:73:0a:e5:23:4e:45:d6:dd:6c:0c:f2:57:51:
96:d8:3c:8e:27:ef:ca:6c:2b:0b:9a:07:98:49:d0:
9b:9c:4f:30:c3:13:4d:1b:f0:48:ad:03:9a:5c:9b:
d9:56:b1:10:52:b7:ad:72:1e:b7:fa:2c:e8:40:b9:
c7:68:10:98:61:d0:bf:cf:a0:f7:1b:8b:7f:ef:09:
6d:16:44:0f:f1:82:d6:2c:1b:58:aa:52:30:52:7d:
fa:aa:be:59:64:dc:cc:2a:b6:b1:9e:13:9c:1c:b2:
74:c5:65:13:7c:d7:36:38:27:10:f7:e1:e2:6c:28:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:15:A3:F8:1A:63:D1:59:05:C0:AE:ED:37:5D:AE:05:19:4D:97
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/gH0Vo_gaY9FZBcCu7TddrgUZTZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:63:f9:1b:fe:61:ee:4b:92:4d:08:f1:c6:84:bc:51:5c:7f:
94:f5:f1:b9:21:ee:ce:88:9c:92:6b:ad:29:95:43:f1:6b:dd:
0a:f0:a0:68:f9:48:a4:31:68:50:43:c3:8f:96:07:dc:f0:fc:
04:b5:ee:ac:02:c4:6a:2f:ab:54:40:5a:68:7f:2d:72:c6:dd:
97:cb:7e:bd:a4:6b:99:24:51:f8:0b:eb:e3:b1:66:5c:4d:24:
28:a2:98:20:79:3c:e0:23:b2:c5:ea:8b:ef:fc:46:89:fd:c4:
a0:95:29:18:63:74:3a:b2:49:a9:4f:85:b9:44:3f:c6:af:7e:
a5:26:7a:00:88:e6:0a:b4:9e:94:35:18:e8:cd:15:a5:6c:32:
b4:a0:a5:7e:9c:f6:c1:37:7f:ff:04:3a:f8:60:36:9f:60:a9:
59:cb:02:e0:1b:88:6f:23:3f:6a:7b:2a:9a:72:26:dd:93:ce:
c5:48:bb:a3:aa:5f:a5:d4:3f:d1:29:81:fb:2e:43:19:ea:cc:
66:27:1a:17:c0:69:30:01:e8:f7:94:75:94:1a:5e:3f:e7:7d:
6c:90:a2:57:65:cd:94:84:61:98:a1:1a:71:e8:54:93:1b:cd:
ef:13:4c:1e:85:51:79:29:09:4e:7b:b6:3d:ee:88:a8:a3:8b:
bd:67:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net