Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa
File: w-n989jjTlDf5MUgKsjewMtXUDI.roa (raw, json)
Hash identifier: wPJ7KbnJR8p2ekXqpvAYMlqfMd5+w+edbJ261qR43f4=
Subject key identifier: C3:E9:FD:F3:D8:E3:4E:50:DF:E4:C5:20:2A:C8:DE:C0:CB:57:50:32
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01856D788308F72AA17CFBD54AEC5F1F69D9
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa
Signing time: Sun 01 Jan 2023 13:14:52 +0000
ROA not before: Sun 01 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:83:08:f7:2a:a1:7c:fb:d5:4a:ec:5f:1f:69:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Jan 1 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e9fdf3d8e34e50dfe4c5202ac8dec0cb575032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:00:81:c6:f4:2a:34:67:26:05:67:d5:c2:
32:88:ac:2b:fc:f9:03:d6:40:d8:c1:94:e6:2d:2b:
0f:12:80:7a:7b:b3:3c:bb:b7:4e:8d:86:e7:9d:db:
be:43:f9:1d:6d:ec:f1:2c:e0:1a:1b:d6:69:d0:05:
57:48:52:0d:2b:d5:da:58:23:e8:ff:9c:52:6e:63:
21:fa:55:74:56:cd:b4:f6:a1:44:a1:ab:ee:95:82:
72:76:e8:fb:e7:19:60:ff:a3:d0:6a:5d:61:0b:17:
0e:c8:f2:e3:9c:67:8b:c5:89:58:b8:da:1e:90:a7:
91:9e:47:5a:bc:1e:3c:99:82:f2:9f:13:f0:92:83:
b4:64:34:6f:49:96:8d:77:f4:6a:49:15:40:69:88:
a1:18:20:f8:c9:c4:1b:bb:5b:b7:16:37:1a:e4:d2:
a2:57:c3:25:32:f0:fd:e7:4f:25:c5:7d:4b:ec:12:
29:79:c4:ba:96:a0:42:b8:4b:02:b9:d4:6e:0a:ca:
a4:c1:eb:8b:83:c8:5e:3e:ac:d0:fc:03:07:2b:67:
9c:4a:d6:ac:34:b8:3f:17:1d:03:10:d3:bb:47:d6:
96:21:4a:26:e8:5f:19:ea:18:1c:d7:54:8c:50:42:
ea:b5:62:b9:8c:57:17:3c:cb:3b:3c:f8:ca:aa:72:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:FD:F3:D8:E3:4E:50:DF:E4:C5:20:2A:C8:DE:C0:CB:57:50:32
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fa:9c:c3:92:dd:06:1e:cb:b4:ca:3b:33:83:ba:ce:7e:a0:
f7:ba:7d:82:17:e6:68:ad:06:78:41:3d:ae:3b:b4:23:d0:cc:
21:ad:d1:2a:cd:60:26:65:a1:3a:a0:30:5f:6c:9c:0d:cd:c8:
c4:0f:ef:d0:00:92:ba:e1:47:90:7d:83:7b:d9:e9:d1:79:b0:
00:c6:03:f9:f9:64:0c:c0:11:14:ae:df:36:8c:d1:ea:c0:a0:
14:10:8f:a8:65:3d:54:e2:fb:0d:a1:78:62:52:7c:20:b2:14:
f7:37:cb:d0:8f:58:cd:01:97:a8:f4:f4:59:71:30:61:35:87:
c5:48:c3:94:fa:87:a0:de:23:0d:37:92:29:84:57:86:4c:28:
2b:59:3b:59:f6:d2:a2:37:7a:08:87:e6:0f:1b:4f:99:87:56:
c1:e5:e8:0c:52:c3:dc:04:a5:78:61:0d:a5:85:8f:c9:f3:7d:
4d:ca:31:d5:14:3d:96:ae:65:10:a9:d1:79:08:c9:55:ad:3a:
25:bd:fe:12:3c:9d:28:fe:50:44:60:70:28:60:11:af:ae:b5:
ff:cc:1f:d6:6b:48:da:06:cb:a7:89:09:ec:13:53:4d:8b:e7:
02:4b:56:cb:9c:e2:30:00:65:e7:31:87:42:f3:72:4a:f7:29:
77:b4:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net