Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/PTV0pAcBudFhKbOnXPmkwhxH2Bc.roa
File: PTV0pAcBudFhKbOnXPmkwhxH2Bc.roa (raw, json)
Hash identifier: SGuGaFkB+OQAjBx6IVnybRzlBF0VjySJh9La42FDoK0=
Subject key identifier: 3D:35:74:A4:07:01:B9:D1:61:29:B3:A7:5C:F9:A4:C2:1C:47:D8:17
Certificate issuer: /CN=a739db60f9fc71b1a444a9453c865b4642263a72
Certificate serial: 018B01062DAF8B2819EFBBE3779E915BB9BD
Authority key identifier: A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/PTV0pAcBudFhKbOnXPmkwhxH2Bc.roa
Signing time: Thu 05 Oct 2023 18:07:43 +0000
ROA not before: Thu 05 Oct 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 212.18.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:06:2d:af:8b:28:19:ef:bb:e3:77:9e:91:5b:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a739db60f9fc71b1a444a9453c865b4642263a72
Validity
Not Before: Oct 5 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d3574a40701b9d16129b3a75cf9a4c21c47d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:41:da:6f:d1:a2:26:1c:c9:a7:50:95:cb:
4a:1f:2e:59:70:8f:56:e8:ee:29:17:ce:3d:a7:2c:
08:b7:0c:28:10:2c:79:a6:78:6b:67:90:23:9e:f8:
55:b4:3f:3f:0e:ce:ea:36:46:cb:c0:85:0f:fc:af:
c8:9d:7b:c3:81:64:35:3a:30:5d:b3:60:c3:e0:13:
81:43:19:60:d7:97:5c:23:2f:39:2e:fb:c6:1a:f1:
2c:93:51:f8:7b:8c:df:51:7b:37:c0:b4:de:8c:d0:
4a:21:08:04:e4:e5:79:e9:a4:23:e8:26:23:e2:6a:
68:c3:93:a1:8b:6b:33:b9:a9:49:68:18:c2:30:26:
3f:e3:88:a1:72:e8:15:b9:88:11:d7:5d:8d:85:2d:
a8:3b:fb:f1:41:19:ff:46:c7:8f:af:f5:9a:5b:6c:
13:5c:9e:7f:0e:c5:c1:93:3b:2b:6d:dc:23:d3:b3:
63:1f:a1:c8:a7:0b:1e:2f:61:ac:3e:ce:78:fd:bc:
d8:03:63:f1:4d:b4:cb:d0:c2:41:38:48:8b:75:b4:
dc:ac:2c:9e:24:19:59:93:cb:75:67:2f:f2:fc:f7:
48:a3:db:8c:81:9a:ea:34:09:82:b7:58:36:03:98:
59:a2:47:cb:0b:b1:b7:0d:19:6a:d8:7d:ae:f5:96:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:35:74:A4:07:01:B9:D1:61:29:B3:A7:5C:F9:A4:C2:1C:47:D8:17
X509v3 Authority Key Identifier:
keyid:A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/PTV0pAcBudFhKbOnXPmkwhxH2Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.97.0/24
Signature Algorithm: sha256WithRSAEncryption
73:34:c1:ea:1e:a4:3e:2d:5a:d7:40:6c:a7:ff:45:fa:02:5b:
cf:dc:20:28:c2:fa:f1:2d:d2:07:02:ef:40:07:f0:b1:ae:4a:
8f:0e:8f:7e:0c:85:4c:b4:8d:2a:65:b6:8c:dd:87:3d:8c:73:
6a:8e:34:d4:9d:20:83:bd:2a:b3:02:40:5a:11:98:19:e1:ef:
e3:a5:d7:40:b1:f2:3c:6c:79:68:b2:50:4c:ef:2b:cc:2e:78:
75:fe:b1:24:5a:90:5c:39:dc:14:0b:fa:dd:31:a7:68:73:0d:
92:d0:e4:6a:90:f4:04:ce:e6:67:16:af:3d:45:b2:83:30:8c:
f9:24:37:54:a2:96:24:7b:05:25:55:67:e4:d5:d8:46:89:20:
70:98:a7:c4:97:e5:f3:f7:ca:6c:9f:42:7a:c9:4f:39:45:1b:
bf:54:56:b4:a1:46:ec:05:55:24:a0:52:68:02:dc:20:27:9e:
0d:60:30:dc:7b:48:61:9a:3f:2a:1c:c6:f3:8f:7c:70:38:b2:
e4:7b:bc:56:fa:7d:4b:a7:70:2e:8e:2b:b8:44:6d:04:20:3a:
73:81:c2:b5:6f:f6:20:99:7c:a1:9a:43:59:bc:0d:89:ed:71:
80:98:0a:f5:fc:c8:81:e3:35:9f:20:6b:7b:73:56:ec:52:ba:
f5:77:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net