Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x7hA2_yrc_2GH9HD5tDnDECm4rI.roa
File: x7hA2_yrc_2GH9HD5tDnDECm4rI.roa (raw, json)
Hash identifier: cdb2fwHL5hgFD2DxtpyQFoVWUHq81IsIMVDlYyIQIQY=
Subject key identifier: C7:B8:40:DB:FC:AB:73:FD:86:1F:D1:C3:E6:D0:E7:0C:40:A6:E2:B2
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01863598BF3D682EB8ED939BA8FECDCCDD88
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x7hA2_yrc_2GH9HD5tDnDECm4rI.roa
Signing time: Thu 09 Feb 2023 09:54:08 +0000
ROA not before: Thu 09 Feb 2023 09:54:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
185.2.163.0/24 maxlen: 24
185.2.160.0/24 maxlen: 24
185.2.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:98:bf:3d:68:2e:b8:ed:93:9b:a8:fe:cd:cc:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Feb 9 09:54:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b840dbfcab73fd861fd1c3e6d0e70c40a6e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:05:b7:ef:39:b3:36:d3:07:e3:73:8b:4e:
77:05:f8:8b:24:07:f8:46:04:b1:8e:d5:52:d3:a9:
73:23:75:ed:03:47:4f:0d:82:cd:ec:f5:f2:6b:85:
29:c8:53:39:ba:88:aa:85:ac:65:64:0d:68:e6:77:
1a:83:09:17:6c:74:50:2b:e8:79:4d:58:f1:29:2b:
f0:19:eb:72:11:dc:79:1c:13:b7:df:3e:51:d0:2a:
fb:02:3c:17:dd:ef:a9:19:eb:64:5c:21:22:4d:c7:
bf:d5:73:9f:45:73:15:b4:d9:df:8c:03:84:14:63:
1a:c9:2d:f3:af:25:09:95:f1:43:14:49:d1:fc:72:
cd:1b:5c:01:1a:d5:68:64:85:4b:17:0f:38:8c:39:
f3:cf:f8:38:ae:7e:55:09:9b:85:44:ce:a9:00:8b:
fa:38:aa:a0:7b:4e:63:58:f7:20:54:56:8f:cd:6f:
10:cb:ca:e3:78:2e:66:c1:35:ec:09:fb:3c:04:c9:
a0:a5:e7:ea:78:c8:94:43:92:09:6d:ea:14:66:a1:
db:69:57:96:59:88:45:81:d5:cb:ba:12:3d:5b:ac:
80:7d:24:70:c5:8d:3b:c5:93:e2:a5:78:09:db:20:
7f:f3:32:07:a5:6c:7d:a4:42:b5:cd:46:8b:cb:c0:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:40:DB:FC:AB:73:FD:86:1F:D1:C3:E6:D0:E7:0C:40:A6:E2:B2
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x7hA2_yrc_2GH9HD5tDnDECm4rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/24
185.2.162.0/23
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:41:01:2f:29:f1:15:0b:56:7a:f6:a0:c2:fa:76:6a:c7:74:
d7:46:e9:85:54:bf:41:66:7f:c4:98:f9:6f:53:ba:a3:37:66:
7c:a5:fa:90:55:9f:a4:df:3a:41:aa:36:85:00:80:8f:3b:a0:
5b:15:90:b5:f0:d2:10:0b:e3:f6:2e:23:50:ba:7e:30:42:b8:
c7:75:96:79:e9:a1:61:b8:0e:61:37:eb:c3:c7:d6:75:d9:e5:
80:d7:b2:a2:a0:1b:c1:3b:ce:3b:a0:a2:12:8c:20:9d:9d:8c:
6e:48:53:7e:b2:42:7f:db:6b:1e:88:7d:ba:bc:c9:12:b0:b9:
20:66:24:82:6f:ac:26:a6:b8:1a:a3:df:28:f2:b5:2a:20:b7:
91:1a:e7:5c:85:7c:f6:c3:3e:e3:64:d1:9a:d1:9d:d1:e8:63:
58:8b:c1:5d:a5:53:0d:00:61:19:60:c1:e7:7c:58:72:20:a8:
48:53:95:3c:c3:19:ab:80:60:84:98:75:87:54:38:e0:2f:f6:
30:38:bf:1a:86:0f:7c:22:fd:a2:d3:ea:86:a1:31:93:fa:0c:
06:3d:f1:ce:90:df:72:11:59:56:94:a5:8a:d7:60:a0:4e:77:
38:ec:41:8c:13:92:5f:d4:af:40:c2:0e:19:b2:da:63:47:71:
03:18:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:35 2023 by rpki-client on console.sobornost.net