Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/sdOUPEBWpvoNMduV6syHt2k7GGw.roa
File: sdOUPEBWpvoNMduV6syHt2k7GGw.roa (raw, json)
Hash identifier: o3OkXnRv9mwGioWb6gYeCg50H4+ZEHsGRDEYI0TovxU=
Subject key identifier: B1:D3:94:3C:40:56:A6:FA:0D:31:DB:95:EA:CC:87:B7:69:3B:18:6C
Certificate issuer: /CN=827d76d044270471fedfa5211857f78d1854e868
Certificate serial: 018571A7A750240DB7ED58DDAAF2A14EEC6C
Authority key identifier: 82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/sdOUPEBWpvoNMduV6syHt2k7GGw.roa
Signing time: Mon 02 Jan 2023 08:44:50 +0000
ROA not before: Mon 02 Jan 2023 08:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 188.94.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a7:50:24:0d:b7:ed:58:dd:aa:f2:a1:4e:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827d76d044270471fedfa5211857f78d1854e868
Validity
Not Before: Jan 2 08:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1d3943c4056a6fa0d31db95eacc87b7693b186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:74:b2:85:f9:aa:30:c7:4b:ae:4f:b3:90:
8c:f6:8d:15:29:01:f8:77:d6:b1:59:0b:2a:fa:83:
e0:7c:c9:96:2a:1b:7b:36:bd:58:86:96:83:46:35:
ad:c4:e5:ee:40:96:e2:3f:53:6f:bd:fc:d9:6a:fc:
dc:16:fd:32:f5:56:f1:dd:38:fc:ee:ad:84:96:45:
f9:45:82:19:0a:f3:22:78:7c:22:7d:d1:85:d4:6a:
78:84:3b:c4:2b:e5:c5:64:9d:3e:6c:32:eb:16:6e:
59:2f:13:c7:e8:a3:f9:44:66:7a:49:e8:cd:33:e5:
69:d0:56:c7:8f:23:15:36:2f:ae:77:33:90:2d:ca:
f2:7c:cb:46:cd:e0:ab:6c:de:27:63:4e:f2:76:9d:
5d:f7:37:d7:2c:ef:df:ae:da:52:8c:e3:10:6a:9a:
61:f9:30:89:c1:f9:a2:ab:57:a5:b8:0c:fa:8a:19:
43:38:40:90:76:7a:62:af:49:a6:a1:75:58:b0:4a:
a6:45:f0:32:39:93:64:e3:dc:b5:57:51:7c:9c:e7:
b0:01:a5:18:7e:6e:4f:12:fb:53:0b:b0:a9:01:5b:
4f:42:f8:32:81:84:93:a4:ab:e9:e8:99:72:98:bb:
a1:70:67:0f:a6:47:b4:56:1e:e4:f1:03:2e:13:34:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:94:3C:40:56:A6:FA:0D:31:DB:95:EA:CC:87:B7:69:3B:18:6C
X509v3 Authority Key Identifier:
keyid:82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/sdOUPEBWpvoNMduV6syHt2k7GGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.218.0/24
Signature Algorithm: sha256WithRSAEncryption
64:04:48:9a:9e:14:be:23:60:3d:08:c5:48:6d:36:6a:5f:80:
f1:51:4a:0f:fb:67:35:69:07:05:8e:2d:0a:d5:69:e7:4b:c8:
bf:f7:1f:63:91:da:81:c5:57:d0:2e:5d:57:6d:47:0f:e5:cf:
c8:c1:fe:d7:fc:dc:aa:fa:5a:21:ab:a9:f5:1e:4e:a9:ff:59:
49:54:96:75:fb:06:3e:25:f9:87:2e:f8:04:a8:48:e6:4d:78:
bc:3f:8e:81:5d:cb:f6:30:d8:5e:60:98:61:de:76:98:ac:e2:
17:f1:66:f8:f3:17:31:97:6e:61:7f:43:d9:ef:cb:21:03:d6:
33:f4:24:39:1d:71:c3:b0:ad:9a:03:1e:98:cb:0f:1e:0b:70:
07:cc:65:97:61:02:69:d3:b6:15:2c:12:cd:6a:09:12:ca:43:
c8:45:00:76:ac:d5:01:d5:94:63:d6:2f:98:7f:b3:4a:6d:82:
d3:3b:d7:4f:6f:b9:56:9e:ae:5d:75:60:c6:80:7e:ea:68:2f:
54:66:ea:ee:1f:e9:2e:aa:b1:59:93:81:98:eb:fd:04:db:73:
91:c9:2d:08:b0:26:52:05:65:8c:97:d5:d7:2c:d5:fb:cb:22:
5d:0f:35:be:fe:00:37:af:73:06:8d:6a:e6:a7:63:4b:7e:af:
c0:08:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net