Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/AGWMksZRY_pG2KISV-bRyo59pWY.roa
File: AGWMksZRY_pG2KISV-bRyo59pWY.roa (raw, json)
Hash identifier: K4P+fhD/DhtbwB9Uf2BmDeAx8PEz4Hjf0d3rxN+7GdA=
Subject key identifier: 00:65:8C:92:C6:51:63:FA:46:D8:A2:12:57:E6:D1:CA:8E:7D:A5:66
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 018CC56E1A114ECE8BDFE95C77E07AEBE600
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/AGWMksZRY_pG2KISV-bRyo59pWY.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10393
IP address blocks: 185.39.237.0/24 maxlen: 24
185.39.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1a:11:4e:ce:8b:df:e9:5c:77:e0:7a:eb:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00658c92c65163fa46d8a21257e6d1ca8e7da566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:97:24:c6:e8:54:88:e4:7c:cc:8c:9d:cf:
39:51:cb:24:af:80:30:05:0c:ac:89:e9:9c:41:e2:
68:5d:48:16:f0:0d:e2:f0:52:6b:97:2c:e9:37:cb:
82:2c:de:03:b9:e2:30:14:02:a9:df:f5:6f:96:12:
d0:d4:05:c2:91:4b:bf:15:02:dc:ff:cf:59:21:19:
d9:01:e8:6f:8f:d7:4c:c4:37:0f:09:4b:7c:3f:a2:
76:b4:1a:0a:9d:a9:99:8b:7c:bb:c8:13:ad:d5:e6:
f0:8a:01:ec:d0:3a:83:86:58:54:42:0f:c4:c0:73:
e1:ed:55:0c:b1:35:13:c5:55:9c:b4:5e:e6:75:97:
6c:50:de:3f:93:b2:9d:8a:e1:63:b5:3b:e5:3f:52:
e2:9f:23:69:b4:27:7a:af:b5:d2:45:66:4e:98:78:
f7:b5:db:0c:56:15:b9:87:4d:4e:20:37:78:4e:cf:
a2:79:4f:e1:7f:ed:9d:57:f9:fb:c1:68:6c:82:36:
f9:85:ad:41:cd:35:70:00:f1:dd:95:15:01:1f:e8:
51:bc:12:95:04:a0:4b:48:aa:65:aa:58:3f:92:28:
b4:45:3f:73:63:c6:a0:73:64:fc:cf:dc:3f:8e:e9:
33:93:40:53:07:d7:b6:b9:39:82:c6:f1:af:b6:b9:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:8C:92:C6:51:63:FA:46:D8:A2:12:57:E6:D1:CA:8E:7D:A5:66
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/AGWMksZRY_pG2KISV-bRyo59pWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.236.0/23
Signature Algorithm: sha256WithRSAEncryption
47:a9:9e:8f:0a:f2:48:db:30:11:8c:ed:a3:97:ba:f7:27:c1:
86:74:ea:64:42:22:b6:6f:4e:98:cf:47:30:5c:79:42:76:43:
4b:43:c4:7d:40:8c:d6:1e:20:38:a1:89:0f:43:11:88:28:c2:
2d:c6:3b:39:06:60:0f:89:cd:07:83:cd:87:a5:06:0c:5a:52:
4f:15:47:49:ea:b3:41:e6:b9:e8:7e:69:06:37:e1:5b:8e:ec:
d8:21:49:da:e4:b5:f1:63:7d:23:ca:c0:9e:69:ed:e4:93:92:
e4:60:03:a0:78:55:cb:90:cf:6b:48:ff:00:b0:9c:cf:fa:00:
a9:6e:5e:b7:72:5b:fd:c6:48:97:58:85:5e:d9:9c:17:7e:08:
5f:e4:b6:fa:16:89:63:34:2b:0d:a1:44:59:f2:66:9f:38:03:
d9:f2:d0:f1:f9:47:e9:f1:0a:15:26:c4:ba:06:8d:0b:4d:70:
41:f5:84:a5:4e:d1:a5:e1:4f:53:03:7f:02:27:f9:80:1c:35:
bf:f2:50:be:93:55:06:de:4f:83:3c:e9:0c:9e:54:a4:eb:45:
db:3c:7e:d4:fd:a0:9b:0b:4c:7d:32:0c:77:97:2e:d9:ab:6a:
f7:38:4f:c2:df:0b:f3:c7:3a:cd:73:4d:ee:e3:89:90:ec:25:
1e:56:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:30 2024 by rpki-client on console.sobornost.net