Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/MrZMcefKxa65Qk3mlBht6sJGcKk.roa
File: MrZMcefKxa65Qk3mlBht6sJGcKk.roa (raw, json)
Hash identifier: sQYpgwLW23r9ld/6zuQVHXavhLzk3DTmFPIeKgcfF60=
Subject key identifier: 32:B6:4C:71:E7:CA:C5:AE:B9:42:4D:E6:94:18:6D:EA:C2:46:70:A9
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 018250DC2DE7A7B760D64E89938F790F1AAA
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/MrZMcefKxa65Qk3mlBht6sJGcKk.roa
Signing time: Sat 30 Jul 2022 20:46:23 +0000
ROA not before: Sat 30 Jul 2022 20:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:dc:2d:e7:a7:b7:60:d6:4e:89:93:8f:79:0f:1a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jul 30 20:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b64c71e7cac5aeb9424de694186deac24670a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:bc:9b:71:ca:bb:03:5f:20:2a:cc:02:5b:
c2:66:a2:26:78:55:0b:3f:a2:16:db:6c:e9:16:fe:
9c:a3:19:6a:af:12:c1:d3:41:a8:0d:8e:d3:22:96:
5f:bd:3f:a9:e1:8e:2c:a7:47:b7:31:f2:4c:1a:47:
26:70:14:0d:85:a3:18:25:70:20:6c:44:fc:44:62:
14:1e:5f:34:3f:db:a6:9a:95:1d:0f:26:80:d4:d7:
62:12:2b:64:94:82:94:11:af:38:c8:b9:68:d8:92:
1e:0b:f2:ae:0f:b6:e5:87:4e:17:2a:b0:0f:a3:f0:
a4:df:1c:e5:6a:52:c1:7f:fc:ed:46:d4:57:7d:b4:
eb:31:b1:a0:0f:05:f5:38:f2:0d:05:5a:d4:bb:c7:
af:bf:9d:17:a9:7a:74:df:45:db:54:34:4b:ef:6b:
e5:be:f6:a6:0e:55:d8:31:58:71:d7:4a:25:4b:5c:
a3:2f:75:dc:56:df:c6:67:1d:1e:db:0a:69:21:ad:
55:4d:4f:a7:5c:25:34:dd:8c:21:8e:98:0d:8b:1b:
3d:9f:5a:ff:45:25:44:e7:d5:fd:a4:c3:05:a7:1e:
b3:fa:fb:4f:16:d7:69:25:53:80:25:8b:9b:33:f3:
7a:a8:32:ff:32:fb:d6:88:ad:fb:6f:f7:99:ac:53:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:4C:71:E7:CA:C5:AE:B9:42:4D:E6:94:18:6D:EA:C2:46:70:A9
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/MrZMcefKxa65Qk3mlBht6sJGcKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
54:5d:46:69:47:39:36:b9:b4:c7:e0:a2:7e:5c:83:3c:ea:75:
22:00:5b:9c:d0:b8:c3:82:09:bd:0f:01:8d:60:75:1a:2e:33:
de:52:c4:e1:5a:02:d7:75:ae:c4:bd:73:64:39:d7:16:56:9b:
59:6c:04:4e:66:c1:26:f9:f0:4c:7d:57:0d:fb:a5:c9:11:d4:
1e:54:33:a7:e1:e9:b4:26:d7:b4:3d:6a:85:23:91:bd:28:b4:
96:7f:92:04:67:38:5d:60:f7:30:fe:df:69:20:f8:06:e5:a4:
ea:96:ac:28:01:ee:4f:78:47:8e:71:fa:77:21:ad:38:74:9d:
6f:42:50:e7:7a:22:e5:d5:60:c1:fb:af:d5:aa:75:c4:cc:c5:
99:80:ad:5c:94:66:f8:83:cc:a5:28:2e:30:d1:6c:32:46:08:
03:02:24:22:42:bf:d1:ed:da:f6:38:5f:d1:29:ac:1c:90:fb:
b0:49:79:00:57:37:ee:4d:93:1c:23:f3:a9:a5:26:60:60:c7:
4c:c3:b7:41:cd:5d:13:8e:b4:1b:a0:be:44:6f:36:9c:7a:86:
a2:cc:c6:4d:ed:c7:29:aa:cd:01:79:76:c6:56:08:79:f9:87:
30:e2:0d:38:6c:5f:96:27:53:2d:99:4e:04:05:89:14:2d:3c:
80:ae:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:35 2023 by rpki-client on console.sobornost.net