Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/pVl-NOGGTVsG8N4xw1owaaFfdLU.roa
File: pVl-NOGGTVsG8N4xw1owaaFfdLU.roa (raw, json)
Hash identifier: /Pfhax8VyzY/QE5sn+muTQior77AG2mbOdP0QE7+e0Y=
Subject key identifier: A5:59:7E:34:E1:86:4D:5B:06:F0:DE:31:C3:5A:30:69:A1:5F:74:B5
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 018CC86F77CEDEF1B4ECDE7044C42014BDD0
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/pVl-NOGGTVsG8N4xw1owaaFfdLU.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204309
IP address blocks: 185.253.203.0/24 maxlen: 24
185.253.202.0/24 maxlen: 24
185.253.200.0/22 maxlen: 22
185.253.201.0/24 maxlen: 24
185.253.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:77:ce:de:f1:b4:ec:de:70:44:c4:20:14:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5597e34e1864d5b06f0de31c35a3069a15f74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:58:54:48:ac:67:97:36:fd:8f:5a:dc:a4:
34:40:ef:4a:b1:75:d4:6b:f5:45:c5:01:bc:d3:ce:
10:cf:7f:9a:78:15:53:07:98:a8:57:be:6f:4c:70:
5d:7a:74:ca:f8:11:7d:ac:c6:d8:c1:29:2d:ba:e0:
30:50:36:3b:09:22:7b:b5:ae:56:df:b0:24:d2:d9:
ed:63:1d:5d:6b:52:66:e5:d7:2e:ca:ec:2f:fa:11:
0b:0e:7b:56:c1:06:2a:5f:4d:c4:b4:fc:a2:da:5f:
4a:15:8a:d6:dd:59:84:b2:1b:c8:3e:77:53:b5:ef:
6e:01:1c:f5:e2:36:70:4e:d0:b7:98:97:ba:6b:21:
9c:0a:d5:2e:53:f6:a8:f1:c1:8c:88:97:f7:55:72:
e3:60:f5:18:82:f7:c7:e1:8c:63:3e:2c:b5:e8:02:
6a:74:39:1b:ef:2b:d8:76:9d:82:c7:0a:67:fe:da:
b7:b2:4f:49:fe:90:e4:25:9f:2f:70:02:28:0b:20:
ee:c9:5e:b1:ac:a2:9f:e9:69:b4:c2:c8:2f:d9:ed:
b3:fc:79:8f:19:c0:ee:c5:47:2f:23:28:da:eb:96:
b0:95:5e:c9:ff:2a:70:38:0c:7e:44:29:d5:83:e4:
7e:f2:b7:1e:ca:20:86:7d:be:56:8b:b6:3a:f8:af:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:7E:34:E1:86:4D:5B:06:F0:DE:31:C3:5A:30:69:A1:5F:74:B5
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/pVl-NOGGTVsG8N4xw1owaaFfdLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:79:7a:f7:e2:4e:e5:d3:8e:20:24:38:02:d0:1c:27:6c:17:
3e:d0:aa:23:c2:3b:dd:f6:42:36:7d:1e:af:64:1e:5b:2b:fd:
1d:1c:c6:44:e3:c4:14:c6:b6:20:a8:d0:15:c0:51:ce:82:28:
c8:77:bc:1e:5d:2d:0f:3e:9d:33:31:fd:2a:5d:ee:c9:94:4f:
a5:3a:5c:c9:9c:67:b8:7c:06:e4:ce:40:fd:d1:32:14:87:53:
ae:6a:8e:1c:41:04:e6:0a:89:84:65:42:fa:d3:06:15:cf:84:
d2:28:e3:44:91:f6:73:b8:9e:58:3b:b7:a5:68:f4:87:30:b8:
cc:b3:08:64:66:62:f9:c4:46:96:59:bc:73:73:2b:aa:92:f1:
bc:bc:03:38:6c:29:33:ca:aa:32:1e:b6:4b:45:5d:9c:37:2e:
a8:d5:02:53:c8:73:05:9d:8e:61:f4:82:8d:a8:a9:de:44:3a:
90:50:b3:c4:ef:7c:45:7f:e1:9d:20:35:6e:e6:9f:ec:66:56:
f0:9f:ad:48:35:34:13:25:f3:fd:f2:2d:0c:23:e7:ff:4c:df:
09:5b:58:03:e0:68:8e:27:1f:a2:9f:d9:0f:5a:65:42:7e:d0:
04:b2:5b:6f:9c:b7:fb:b3:41:34:38:a0:15:9c:0c:2b:5f:b3:
f8:76:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:19 2024 by rpki-client on console.sobornost.net