Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9g9GNlYvDMeiVzRMzoAB3g5hy_k.roa
File: 9g9GNlYvDMeiVzRMzoAB3g5hy_k.roa (raw, json)
Hash identifier: pPzVhuJR2voVjrcs6FGTrkZMfo5nrciCcQCQWd50uDs=
Subject key identifier: F6:0F:46:36:56:2F:0C:C7:A2:57:34:4C:CE:80:01:DE:0E:61:CB:F9
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01880B5A073DBCFD9C88AE31C44C802B919A
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9g9GNlYvDMeiVzRMzoAB3g5hy_k.roa
Signing time: Thu 11 May 2023 15:07:09 +0000
ROA not before: Thu 11 May 2023 15:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50391
IP address blocks: 213.5.132.0/24 maxlen: 24
2a11:29c0::/44 maxlen: 48
2a11:29c0:10::/48 maxlen: 48
2a11:29c0:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:5a:07:3d:bc:fd:9c:88:ae:31:c4:4c:80:2b:91:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: May 11 15:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f60f4636562f0cc7a257344cce8001de0e61cbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:45:eb:11:97:3e:8f:a9:b4:2f:ec:26:40:
2e:27:69:c8:34:34:55:45:64:5e:57:81:4a:89:f5:
3e:b9:c4:83:d3:bf:c3:fe:ea:69:cf:36:25:f0:b6:
f0:cd:3a:40:f9:d1:fb:f7:16:3b:30:9d:48:da:5e:
a8:f6:35:92:44:71:5f:17:51:0b:fb:36:92:8d:fd:
f6:79:1b:6d:68:08:c5:06:ca:23:7a:2f:7d:3a:f0:
3d:f3:48:2e:43:a9:4f:e3:c4:df:25:a3:8c:5a:f8:
1a:0a:5b:63:9f:bd:6e:26:2b:2d:1e:54:08:37:08:
19:e1:bd:fd:9d:8a:ea:fc:3a:a3:09:b0:75:14:b3:
02:4b:ed:d3:a8:ad:4d:94:dc:88:53:ce:b1:e2:0d:
62:8b:43:f4:2a:9e:2e:78:00:f8:f3:cc:da:e6:25:
c5:78:51:ab:f5:cd:e3:a1:60:0e:4a:1f:7b:ad:91:
75:99:85:64:0f:4a:36:94:69:08:1b:a1:38:49:2a:
3e:22:23:84:77:db:25:4c:bf:18:d0:e9:50:17:82:
e2:ad:d3:cb:38:8c:60:15:60:9c:b8:0c:e4:b3:b5:
17:b0:08:d8:e3:7f:20:63:af:62:18:ef:a4:f8:0c:
c1:59:a4:26:3b:b3:1d:05:90:fa:19:b0:a7:23:bd:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0F:46:36:56:2F:0C:C7:A2:57:34:4C:CE:80:01:DE:0E:61:CB:F9
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/9g9GNlYvDMeiVzRMzoAB3g5hy_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.132.0/24
IPv6:
2a11:29c0::-2a11:29c0:11:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:46:ce:da:39:8f:18:1a:81:18:92:67:68:4c:b5:77:99:07:
86:00:19:d6:1b:3a:4f:5e:6b:1f:f4:37:2e:c9:df:bd:b9:aa:
b1:b8:fe:dd:48:55:e9:45:c7:b8:a8:8d:7c:c4:8d:fc:2e:e6:
77:5c:13:a2:26:40:1b:46:bb:73:f8:d6:3d:65:ac:bf:da:af:
c7:62:89:1c:db:4d:91:6b:89:f1:bd:c6:b0:01:0c:6d:37:95:
9c:1c:a2:74:45:d1:b8:55:4e:83:aa:c9:15:d0:6e:5b:45:e5:
26:48:24:2a:c5:24:b1:2d:be:18:9e:93:e6:33:12:fa:93:7d:
aa:95:6f:61:c5:c4:ed:41:3a:9c:c6:d7:e8:9f:53:3a:f0:4f:
24:a7:cc:66:e4:2a:01:49:a9:0f:7e:c2:4e:bd:c6:20:13:21:
6b:58:78:68:d7:58:68:82:5d:83:7b:36:7a:a7:fe:fb:ec:f7:
99:5e:62:14:61:9c:73:5b:a3:64:a1:19:25:b3:52:38:cd:b7:
c0:f2:cc:5a:d3:95:f2:9f:48:c4:c9:64:e9:84:24:5d:5b:3e:
d3:a3:dd:e3:2c:53:93:03:c0:ac:54:89:93:5d:91:be:74:5d:
ca:79:7d:fb:77:93:4d:a3:a1:02:60:84:e9:4c:6a:a4:05:09:
c6:e5:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net