Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfd9cb-c222-43a1-a05b-144a763e25d7/1/n0VxVTqMQ4RkcwmN-GhRL0qH9nQ.roa
File: n0VxVTqMQ4RkcwmN-GhRL0qH9nQ.roa (raw, json)
Hash identifier: ux0n1VPcVmhwiQqnDL2LoEZ3+HnLSUWjVZCA059ghHc=
Subject key identifier: 9F:45:71:55:3A:8C:43:84:64:73:09:8D:F8:68:51:2F:4A:87:F6:74
Certificate issuer: /CN=6dfa081c5ebd1749917d74876763152340609d68
Certificate serial: 01856F393D32E666C93485A020D38CA489BE
Authority key identifier: 6D:FA:08:1C:5E:BD:17:49:91:7D:74:87:67:63:15:23:40:60:9D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfoIHF69F0mRfXSHZ2MVI0BgnWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfd9cb-c222-43a1-a05b-144a763e25d7/1/n0VxVTqMQ4RkcwmN-GhRL0qH9nQ.roa
Signing time: Sun 01 Jan 2023 21:25:00 +0000
ROA not before: Sun 01 Jan 2023 21:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 109.205.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3d:32:e6:66:c9:34:85:a0:20:d3:8c:a4:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa081c5ebd1749917d74876763152340609d68
Validity
Not Before: Jan 1 21:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f4571553a8c43846473098df868512f4a87f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:30:d5:80:56:ba:d7:23:27:ea:40:f5:53:
12:b0:1f:a1:26:3f:bf:fe:53:68:70:1a:db:da:81:
0d:17:7e:17:ae:53:a9:69:cf:fe:0a:b8:17:22:8a:
4a:c5:0a:12:d7:d3:cf:18:43:9f:8f:c8:5f:fd:4c:
b5:a2:55:25:6d:82:7c:68:18:8a:1f:99:5e:e7:f3:
2b:3d:4a:14:ec:56:1a:34:ee:f7:3e:7d:3e:a4:b8:
14:5c:46:0c:8f:a6:b2:cd:86:33:b8:07:80:f8:9f:
23:8d:66:36:ef:bc:13:0a:b1:48:02:a5:b3:db:09:
a3:c2:63:c7:26:57:fd:b3:41:3d:ff:65:98:3c:d0:
15:92:8e:6e:69:d2:39:59:ac:75:e4:ab:d0:2c:81:
48:a5:7c:a4:36:35:98:e1:8a:cc:6d:b3:87:e9:12:
e3:86:df:ea:ea:f7:13:72:44:e3:e1:37:71:f6:01:
41:31:d1:e8:9c:60:0f:98:50:3c:80:81:ea:e2:a5:
00:91:7d:50:a1:d8:73:bf:89:92:2e:51:77:6b:a6:
24:7a:45:42:db:c6:c1:a9:48:b5:55:9c:5d:96:ab:
48:2b:c3:c4:84:25:ea:00:7b:d0:5f:7d:9a:5b:c5:
d5:4d:8b:b8:97:9d:66:c8:13:d9:8e:5d:1c:7a:94:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:71:55:3A:8C:43:84:64:73:09:8D:F8:68:51:2F:4A:87:F6:74
X509v3 Authority Key Identifier:
keyid:6D:FA:08:1C:5E:BD:17:49:91:7D:74:87:67:63:15:23:40:60:9D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfoIHF69F0mRfXSHZ2MVI0BgnWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfd9cb-c222-43a1-a05b-144a763e25d7/1/n0VxVTqMQ4RkcwmN-GhRL0qH9nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfd9cb-c222-43a1-a05b-144a763e25d7/1/bfoIHF69F0mRfXSHZ2MVI0BgnWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.187.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d2:98:cb:fe:6a:76:d8:79:00:c0:fc:00:5c:92:90:98:8c:
4d:2b:0e:27:08:d5:ec:e8:02:fa:07:af:c0:25:08:12:aa:17:
60:ee:14:17:02:04:ab:05:c9:5c:55:1f:5c:5f:be:4e:c7:cd:
14:47:b9:77:b4:eb:e9:50:7c:2b:3f:ce:ea:74:ce:d9:c6:cf:
7e:e0:31:43:8f:f1:2a:72:10:8d:5a:01:2a:c9:90:dc:4b:be:
8d:ec:60:ac:0a:5a:3c:00:9f:23:80:6b:b1:97:57:96:b4:ec:
43:0f:82:f2:26:3b:63:5a:f7:82:ea:83:5c:d1:bb:47:ee:55:
96:ef:f2:1c:9f:81:98:70:01:52:95:97:4d:ba:c4:67:70:df:
98:3d:12:6a:37:f8:dc:3a:c9:c4:c0:f8:cb:da:06:98:66:93:
64:ba:21:f8:45:9f:c1:73:bb:41:36:c5:f5:5b:bb:20:88:48:
d6:fb:20:eb:4e:d2:7d:84:17:48:fd:9e:98:64:09:48:c7:8d:
de:9d:ca:5a:f8:2c:a3:5e:c1:2a:96:44:62:70:80:1a:4b:fd:
2c:32:bf:f2:d0:65:55:e6:74:39:7f:ce:4c:0e:e2:c0:a0:d6:
ed:7b:a2:b7:f6:9b:6b:b1:49:68:6a:d3:36:c0:6e:4c:38:6c:
9e:0d:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net