Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/neHlLXdXjqGTeSNgSK-rsJpiVJc.roa
File: neHlLXdXjqGTeSNgSK-rsJpiVJc.roa (raw, json)
Hash identifier: IT72kpvlFAcdbQTraNPrjOxgpdlNwNWm3fEDSxLMbs4=
Subject key identifier: 9D:E1:E5:2D:77:57:8E:A1:93:79:23:60:48:AF:AB:B0:9A:62:54:97
Certificate issuer: /CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Certificate serial: 04A5E683
Authority key identifier: B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/neHlLXdXjqGTeSNgSK-rsJpiVJc.roa
Signing time: Sat 01 Jan 2022 00:56:04 +0000
ROA not before: Sat 01 Jan 2022 00:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60548
IP address blocks: 185.94.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77981315 (0x4a5e683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Validity
Not Before: Jan 1 00:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9de1e52d77578ea19379236048afabb09a625497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:be:8a:1a:a6:e0:ae:2d:7e:28:46:01:f5:
fc:8f:30:9c:3d:d8:48:5e:4b:fd:63:d0:8c:ce:66:
6f:2f:41:d0:35:48:d3:c6:e5:bf:c2:b6:f1:b4:7a:
46:f1:fc:97:65:ca:87:e9:cd:83:8a:53:72:5d:10:
fb:78:f3:02:9c:29:10:fa:25:f6:3d:f9:8d:5c:9b:
f5:59:24:44:64:37:8a:02:aa:29:40:1d:c7:95:b5:
f3:2e:fc:5a:44:2f:05:12:79:49:7e:73:44:79:8c:
c9:a2:53:d6:cd:bf:53:48:dc:59:4b:23:71:96:9a:
69:10:be:a5:7c:b3:0a:36:43:68:ed:d3:ac:87:84:
6d:a1:89:44:2c:2f:8b:58:73:e3:c9:22:2c:e8:b0:
5e:5e:d3:4f:36:a0:60:1b:f5:5c:f2:14:e2:f8:1a:
70:42:b9:84:65:8f:35:8b:60:0d:ae:55:0c:e4:64:
47:5b:35:fd:aa:cd:7a:53:f2:02:1b:17:1c:12:7b:
7e:6e:a6:ca:83:96:1b:88:3d:0c:17:8c:68:c0:5a:
5a:a1:84:35:7f:4c:61:0c:86:b5:0d:ac:4a:64:e8:
66:17:fb:78:d1:d3:f4:a1:49:11:97:c8:40:0e:86:
e0:8b:85:07:4f:95:2a:22:51:0f:b2:1a:80:d4:6f:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:E5:2D:77:57:8E:A1:93:79:23:60:48:AF:AB:B0:9A:62:54:97
X509v3 Authority Key Identifier:
keyid:B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/neHlLXdXjqGTeSNgSK-rsJpiVJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3f:c7:cb:f4:1d:56:6f:6e:9f:90:64:a3:60:98:b8:92:42:
fc:e4:78:57:71:12:9f:71:0a:e3:24:9d:94:11:78:3c:f0:ee:
48:f4:47:dd:2b:f1:5f:07:06:57:32:58:5b:8d:2d:39:2d:22:
ec:8e:14:f2:d8:2f:91:46:dd:14:18:b3:bb:92:1b:74:c1:09:
31:37:ef:01:3d:cd:42:90:b1:3a:67:95:68:ae:62:9e:89:44:
0b:62:7c:f4:16:2f:98:e0:a8:74:4b:a6:0a:f3:18:c3:f3:7a:
a1:e0:14:81:b8:72:2e:0d:55:c3:14:b8:ee:f7:4c:b9:ac:04:
65:c2:af:5f:3f:b4:a2:e2:f3:eb:62:10:53:4b:b2:af:91:5f:
e5:27:2b:33:a3:8e:cc:e5:e0:a5:0e:03:3a:6f:e6:aa:e5:b8:
be:44:0f:14:26:ad:69:02:6f:66:07:77:8a:3d:6d:02:5b:3e:
fc:c3:d2:f1:f8:a5:b3:9b:ec:fa:bb:32:a0:90:5a:8d:44:8b:
7f:91:23:7d:43:4e:e7:2c:d4:f7:d3:46:df:f7:a8:49:ad:67:
e0:23:03:51:e2:bc:e5:e8:ce:5c:f2:ad:f2:92:70:04:a5:0b:
be:75:cc:b8:f0:6c:e4:a8:0f:bc:be:2b:b8:0b:15:86:35:e2:
68:47:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:24 2023 by rpki-client on console.sobornost.net