Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/lO0JL69A3mHFgsc5P7IoKIgTZ8A.roa
File: lO0JL69A3mHFgsc5P7IoKIgTZ8A.roa (raw, json)
Hash identifier: /qxUIdOJGfBmIjz7pI1rgdawHGMQR4im3qn/55w0jIk=
Subject key identifier: 94:ED:09:2F:AF:40:DE:61:C5:82:C7:39:3F:B2:28:28:88:13:67:C0
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 01856E2F86E7CB89A27C0AA1C1BC418356F3
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/lO0JL69A3mHFgsc5P7IoKIgTZ8A.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:86:e7:cb:89:a2:7c:0a:a1:c1:bc:41:83:56:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ed092faf40de61c582c7393fb22828881367c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:56:cb:c7:2d:4f:0c:a0:3c:5c:f1:1d:ee:
77:9e:bb:2a:2d:a0:2f:b7:ff:85:14:73:1b:95:49:
73:0b:46:6b:01:63:70:20:c1:ad:05:e4:65:7d:69:
0d:27:19:c5:cd:38:47:4f:bb:e9:8b:41:a9:ed:c7:
4b:94:26:95:9d:a8:9f:4d:7c:b6:5c:57:27:0d:b6:
24:4c:36:05:fa:cc:4e:18:70:41:dc:5d:c1:20:62:
20:cd:64:07:27:33:43:7f:58:ca:1c:e9:6e:05:32:
27:69:fe:52:25:a3:92:dc:9f:6a:54:35:7f:74:19:
aa:84:a2:7e:fb:63:63:b9:0d:25:b7:59:ec:e3:5d:
7a:98:22:83:a4:67:ee:63:80:b4:b1:92:94:0b:80:
19:6a:de:a3:6d:c5:a8:28:a5:7c:b4:52:4a:25:ea:
76:f7:20:bd:fb:ec:f7:4a:c1:a8:2a:89:da:39:ce:
0f:7e:d7:2d:95:59:f7:28:f2:f5:54:c9:0f:da:56:
b0:1b:3e:29:45:40:79:2b:b6:e3:ff:dc:70:77:a4:
e3:45:3b:89:a4:cb:cf:81:66:2c:8e:ab:39:ce:dc:
fb:5e:77:ee:1f:5e:8c:87:46:41:10:ab:bd:c0:20:
a1:e8:f4:aa:c5:38:c1:8a:5a:5c:1d:b1:14:47:3b:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:09:2F:AF:40:DE:61:C5:82:C7:39:3F:B2:28:28:88:13:67:C0
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/lO0JL69A3mHFgsc5P7IoKIgTZ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a2:cf:ba:05:71:e0:d0:a8:01:77:5b:cc:b1:e3:cd:eb:7f:
35:a0:2a:2d:12:f7:86:40:87:b9:7a:61:0e:12:b0:2d:4b:8a:
80:0d:fa:28:8e:6e:6f:af:6c:37:2b:65:65:29:07:7b:27:05:
bd:0b:2e:c9:e4:a5:b3:48:26:14:99:bd:f0:e1:b8:40:bd:df:
b2:cc:b9:75:68:e7:9b:2f:09:ac:dc:9d:e3:61:78:83:7b:8d:
d8:c8:cd:47:f5:13:e8:3c:7a:27:1b:7f:b8:b5:f7:b1:f5:fd:
fd:1a:3b:14:ec:f3:2a:fc:43:19:57:fb:11:78:18:fb:24:51:
d6:5f:3d:22:a2:2a:88:3e:b3:db:83:3e:86:6b:2a:88:60:27:
a7:7c:ed:f7:d0:e4:e2:43:ed:91:e1:c6:f2:29:d5:07:93:8f:
23:06:da:fc:2d:82:dd:2c:36:ca:76:94:36:70:2b:5a:a5:7d:
1b:16:98:b7:e8:8a:ac:9c:08:81:62:02:9a:31:18:ad:87:8f:
26:15:90:89:22:a2:8b:f2:2e:b6:c3:ad:08:6a:8b:32:56:aa:
dc:b7:8d:0d:f5:fd:cc:72:13:95:1b:4b:e0:9e:0f:83:f2:53:
e1:cb:03:64:64:90:d4:93:c2:c9:24:49:58:42:7e:eb:f1:39:
9a:3b:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net