Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa
File: OX-2SxVWqZwLidRe4WuuvkYXhE8.roa (raw, json)
Hash identifier: KB9Uy5tMFBSc68qLwhyC7z4QvjlpwLC5AVgshjTT+9k=
Subject key identifier: 39:7F:B6:4B:15:56:A9:9C:0B:89:D4:5E:E1:6B:AE:BE:46:17:84:4F
Certificate issuer: /CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
Certificate serial: 01D420C6
Authority key identifier: BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa
Signing time: Thu 10 Mar 2022 11:19:13 +0000
ROA not before: Thu 10 Mar 2022 11:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 87.236.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30679238 (0x1d420c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
Validity
Not Before: Mar 10 11:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=397fb64b1556a99c0b89d45ee16baebe4617844f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:c6:2d:a3:c0:8b:ed:e9:5f:3e:35:32:67:
a3:1c:53:f8:c4:f1:e8:63:1d:1e:57:0d:11:cc:83:
e0:dd:41:cf:e1:3f:b4:30:46:44:20:8b:38:90:f3:
e1:dd:71:c0:06:7f:09:06:3c:78:d5:32:8c:ae:55:
9f:6d:4c:c4:24:a0:93:e2:26:d0:fa:e4:ae:bc:12:
5a:9e:1b:df:35:aa:53:e3:b3:ec:7d:2d:62:67:b3:
2a:d5:f4:89:cc:ea:9b:79:6d:39:3a:08:c1:81:6f:
0c:f3:0d:8e:d5:14:47:5c:89:90:0c:bf:8b:3c:c4:
b8:8a:7a:dc:38:18:fc:1c:74:7f:04:88:7a:f9:34:
86:d6:38:31:bf:20:12:83:91:e4:1d:c3:b5:57:5d:
e4:cb:3c:b6:d7:12:db:e5:29:a4:64:6c:ac:8e:1b:
07:b1:2c:ac:2b:7a:b9:36:3f:e1:ac:cc:c0:49:8c:
36:05:0b:64:4e:47:6a:d5:53:e5:f8:27:42:7b:90:
56:e0:ba:04:57:c6:8f:97:29:93:79:e2:7e:bd:20:
ec:4f:1e:20:d0:15:90:13:2d:e1:e8:23:4f:bc:8a:
da:38:00:f0:8a:c8:c1:3d:d8:d9:43:c1:31:bc:ea:
10:5b:bf:09:14:5f:e7:52:b2:ab:bd:42:9d:6b:f3:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:B6:4B:15:56:A9:9C:0B:89:D4:5E:E1:6B:AE:BE:46:17:84:4F
X509v3 Authority Key Identifier:
keyid:BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/ugUbVAGI90q6GakKt7XcxCnUepg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.166.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6e:72:43:68:43:d6:60:7f:d4:b9:b3:c7:da:b7:0d:81:52:
6c:23:b7:99:0c:2b:b1:63:5a:ff:ad:35:c6:4d:53:3a:3e:22:
aa:af:8d:df:d2:c5:c0:af:18:f8:31:49:a3:ae:61:10:a9:74:
51:1c:ae:55:1c:6d:6b:0d:47:ef:73:f4:23:a5:40:d9:ed:24:
4d:8b:1c:1c:c6:bf:5a:e4:72:2d:34:27:75:b0:a1:5b:7b:c5:
f0:e5:a7:9a:b0:ba:28:f3:ad:57:ff:e8:51:14:70:c2:fb:2f:
86:f9:1a:bd:ca:7a:5e:b4:ea:f0:4d:24:c9:31:ef:6b:de:2a:
ae:ac:aa:49:55:28:96:fa:54:91:c2:96:79:b3:20:36:aa:36:
29:87:b2:77:8e:22:c3:8c:77:9f:9e:68:a9:3f:e1:36:7a:1e:
da:25:52:f9:c3:de:28:ce:30:48:e6:6f:b2:3e:12:21:c2:1f:
f4:23:f0:86:4e:2f:f3:83:55:fa:e4:93:dc:94:38:a2:20:07:
e4:99:b5:bb:81:d2:78:80:80:3a:5e:9b:0c:7b:4f:69:8e:11:
5d:5d:86:15:50:3a:66:7d:d2:1c:2f:04:65:a1:c2:70:44:bf:
19:f0:e2:fd:f6:5c:e3:9b:59:3b:0c:46:6f:62:97:d1:06:9b:
a5:e4:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net