Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/OSvtCLOUXZHW0Rx4r-CdsIC_u88.roa
File: OSvtCLOUXZHW0Rx4r-CdsIC_u88.roa (raw, json)
Hash identifier: lJ+8de7HA+jQ4Ha5+6NlGKJ+qBZ0i8LheBkuA+hQZ+8=
Subject key identifier: 39:2B:ED:08:B3:94:5D:91:D6:D1:1C:78:AF:E0:9D:B0:80:BF:BB:CF
Certificate issuer: /CN=d9a96d76e9b45abb245788a9da2b82c5758b3e10
Certificate serial: 01840E509250A854BAD9F01BE0983EC135A0
Authority key identifier: D9:A9:6D:76:E9:B4:5A:BB:24:57:88:A9:DA:2B:82:C5:75:8B:3E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2altdum0WrskV4ip2iuCxXWLPhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/OSvtCLOUXZHW0Rx4r-CdsIC_u88.roa
Signing time: Tue 25 Oct 2022 08:44:32 +0000
ROA not before: Tue 25 Oct 2022 08:44:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207821
IP address blocks: 2.59.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:50:92:50:a8:54:ba:d9:f0:1b:e0:98:3e:c1:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a96d76e9b45abb245788a9da2b82c5758b3e10
Validity
Not Before: Oct 25 08:44:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=392bed08b3945d91d6d11c78afe09db080bfbbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:9b:83:4c:62:25:c6:aa:5f:8b:61:b2:69:
e6:cc:cc:bb:f9:af:b5:c4:6b:c1:07:41:40:21:cb:
2a:d3:9b:bb:0a:58:fa:9f:7d:25:f2:6e:3f:f3:f6:
03:ed:8d:f3:bf:23:54:6e:18:d4:5b:89:86:4c:53:
6d:bd:79:88:f6:0b:79:f6:41:91:fe:99:83:8c:ac:
b5:c1:d4:e5:ca:17:0a:14:62:ae:ab:71:03:4b:a5:
ea:da:f7:c3:cb:2d:9c:c2:fc:35:a9:d4:e1:ef:c3:
67:14:be:47:04:55:9a:e0:33:17:8b:26:69:30:56:
24:cb:24:cb:be:46:74:0c:12:54:20:21:c2:07:c7:
8c:55:a0:ff:ca:4c:10:26:54:ce:a8:0f:e7:9e:6a:
f2:07:7b:7a:f7:95:8a:32:0e:7f:b6:c9:36:d6:ac:
91:e9:87:28:b6:6f:46:e5:a6:18:27:09:46:0f:eb:
01:cf:a9:2f:84:5f:0e:12:e9:bd:43:e2:56:75:cf:
c5:86:86:38:c7:54:23:60:c1:68:ce:fb:07:ac:7a:
bd:a1:33:79:50:63:e6:04:db:9f:1b:05:0d:f5:ab:
45:4a:b5:4a:83:0b:bb:e3:84:3c:fc:7c:88:2a:c7:
f0:ef:7f:a1:e9:cd:16:15:69:58:cc:1c:04:9f:7d:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:ED:08:B3:94:5D:91:D6:D1:1C:78:AF:E0:9D:B0:80:BF:BB:CF
X509v3 Authority Key Identifier:
keyid:D9:A9:6D:76:E9:B4:5A:BB:24:57:88:A9:DA:2B:82:C5:75:8B:3E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2altdum0WrskV4ip2iuCxXWLPhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/OSvtCLOUXZHW0Rx4r-CdsIC_u88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/2altdum0WrskV4ip2iuCxXWLPhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d6:4a:40:78:c6:ac:71:b4:46:07:0f:e9:b8:2a:6f:69:a9:
f7:5a:29:d0:ca:f2:e9:5e:d4:c1:33:5d:1f:47:9e:3b:5a:9a:
9a:de:6d:06:ef:31:88:33:3a:c8:9f:90:c2:6e:f5:19:e1:b5:
ad:47:5e:77:9e:56:4d:d2:e0:cf:1f:86:a0:e3:37:9b:58:88:
f0:c0:f2:fc:fb:30:37:f5:25:25:ab:2d:b5:ba:8e:89:ee:80:
ed:9c:83:bb:ba:bd:a4:1e:e0:12:26:43:30:6e:b0:41:7e:87:
82:23:f2:88:62:3d:e9:0e:4d:dd:cc:4a:68:8c:b4:e8:8b:00:
ed:35:65:6b:02:21:ea:98:e7:ab:e6:3b:31:ef:03:23:4d:a4:
44:b4:d2:b3:97:8e:ea:53:42:00:8b:64:b5:ac:66:2f:5f:bb:
d3:f0:b0:2b:b6:5d:52:97:a0:58:2e:59:bf:8f:f3:d9:99:b6:
d0:6d:c1:64:78:9d:80:3d:1b:56:07:29:83:c0:9a:d8:68:d9:
f5:1a:e7:4f:8e:cb:a9:39:bf:e8:e0:89:2b:9d:55:1f:4c:6a:
f0:b1:37:e2:84:e2:22:a5:8a:ab:f8:7b:56:3c:9d:92:ff:83:
4e:01:c1:20:0d:74:f0:9f:27:0d:b9:50:f2:f9:c4:1d:15:f3:
dd:d6:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net