Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/gkh0rvLb5xZwPnhrfyDrDptZdb4.roa
File: gkh0rvLb5xZwPnhrfyDrDptZdb4.roa (raw, json)
Hash identifier: ziDybgET85OsMJy43GhJbLLC/1ChypFbkVCj7LOVRB8=
Subject key identifier: 82:48:74:AE:F2:DB:E7:16:70:3E:78:6B:7F:20:EB:0E:9B:59:75:BE
Certificate issuer: /CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Certificate serial: 018CC79334F3C796FC4D22F9D765AF31396F
Authority key identifier: 75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/gkh0rvLb5xZwPnhrfyDrDptZdb4.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202470
IP address blocks: 213.109.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:34:f3:c7:96:fc:4d:22:f9:d7:65:af:31:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=824874aef2dbe716703e786b7f20eb0e9b5975be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:6c:4c:2f:7b:02:89:80:c3:6d:1d:ab:74:
73:0d:8f:7b:e3:ed:14:6e:3c:76:ee:b6:f0:0d:a6:
bb:91:4a:71:b1:ec:48:67:58:9d:13:15:95:19:d6:
87:0b:da:a3:5e:c8:3e:aa:7b:da:4a:6e:9e:38:bf:
f5:a8:02:6a:31:95:fe:29:a1:5a:85:5d:02:da:0b:
3b:46:c6:58:54:8b:41:49:04:bf:bd:c2:08:ba:42:
ae:43:e1:7c:04:15:2c:c5:56:9f:54:30:29:55:24:
cd:07:73:1b:68:37:57:82:25:dc:ee:54:45:74:3e:
d3:9f:7f:be:62:c9:32:a5:f4:c9:da:10:f7:22:14:
18:3b:e5:7c:89:96:13:a7:38:1a:5f:06:2b:ba:64:
ec:d7:83:62:c1:ae:c8:4b:6c:ae:07:22:06:96:07:
b5:f6:e7:b5:b9:67:d4:f7:47:e1:14:f5:cc:4b:56:
03:0d:14:85:5e:12:38:78:ad:81:6d:49:bf:f1:71:
e3:bf:9d:f0:cd:d4:a7:cd:52:43:a1:97:75:58:25:
5e:c3:0e:df:f9:99:5b:d8:7f:95:8b:0f:d9:8c:c8:
dc:40:f8:dd:2a:d4:2a:9b:71:74:4c:de:9e:95:8b:
a7:d7:f2:d9:5f:14:e0:fa:aa:f3:11:76:47:7e:42:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:74:AE:F2:DB:E7:16:70:3E:78:6B:7F:20:EB:0E:9B:59:75:BE
X509v3 Authority Key Identifier:
keyid:75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/gkh0rvLb5xZwPnhrfyDrDptZdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3b:07:5e:06:b9:25:60:32:da:95:36:b6:25:14:7f:62:61:
34:71:18:00:7d:e7:ce:41:be:08:61:b0:de:e4:9f:94:ed:e4:
2d:d0:c5:6e:a0:2c:9f:17:65:7e:1e:ec:4c:2e:7b:d5:ef:09:
37:cf:44:be:78:08:74:f6:81:d8:64:3e:78:df:5b:e5:f2:e4:
de:5a:ca:15:c3:49:d2:1c:ae:80:c9:7c:df:4e:01:70:6d:68:
2b:58:e6:a8:89:8d:b3:0a:e5:a1:52:7a:33:a6:f0:97:4e:92:
7a:f0:2e:35:00:39:a8:b1:a1:95:5c:18:0b:60:76:e4:49:b6:
4c:73:29:fb:83:e8:d7:fe:94:63:38:34:11:63:29:39:7f:3d:
a4:27:5f:d7:a2:7e:6e:74:d7:84:52:64:f4:ac:e3:1e:6b:e6:
12:a5:24:b7:86:90:ce:ba:27:e2:5a:26:ad:33:c4:e5:84:65:
53:8a:9d:b4:92:49:80:e0:e7:6c:a0:87:c1:a8:0a:43:a7:2b:
bf:b6:19:b4:7e:6c:92:ea:cc:22:85:a9:8d:93:77:f0:5c:50:
fd:c8:32:39:b5:0c:96:80:dd:63:8a:ed:23:84:3c:b3:af:cc:
5e:aa:04:ff:3e:c9:34:77:cd:63:c0:5b:c6:51:d7:96:f4:ec:
3b:90:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:29 2024 by rpki-client on console.sobornost.net