Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/paTQ-SRbqapyBmhLslFTxUt5jrE.roa
File: paTQ-SRbqapyBmhLslFTxUt5jrE.roa (raw, json)
Hash identifier: 9G9JOKF4myLTLUR9bzMD3xlYuLVeQPsAyZ5bEIBTpL8=
Subject key identifier: A5:A4:D0:F9:24:5B:A9:AA:72:06:68:4B:B2:51:53:C5:4B:79:8E:B1
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 0185715E6FF1B3711D3644F5786486C0504F
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/paTQ-SRbqapyBmhLslFTxUt5jrE.roa
Signing time: Mon 02 Jan 2023 07:24:52 +0000
ROA not before: Mon 02 Jan 2023 07:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8282
IP address blocks: 80.252.112.0/20 maxlen: 20
194.70.36.0/24 maxlen: 24
84.246.192.0/21 maxlen: 21
93.188.176.0/21 maxlen: 21
2a01:2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6f:f1:b3:71:1d:36:44:f5:78:64:86:c0:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: Jan 2 07:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a4d0f9245ba9aa7206684bb25153c54b798eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:9a:65:c9:0f:95:4c:fc:ed:23:64:43:28:
cc:aa:14:b6:8b:9b:a0:22:6a:7a:7f:c5:ea:70:e0:
a4:41:0d:85:af:d8:1e:f7:41:ee:4a:0b:ce:29:19:
71:25:0d:71:68:f7:99:a3:79:5a:76:d7:c2:0f:ea:
a5:cf:c2:f5:8d:a3:ae:ec:45:2f:57:b9:bf:6d:b6:
0e:e1:e9:7f:23:81:75:7b:5f:ce:a7:a6:7e:d5:48:
86:2c:7d:5f:26:e0:67:27:18:61:1a:9c:0c:2b:da:
8b:62:58:c8:a8:db:cd:21:2b:0f:00:8b:a2:a0:f7:
41:fd:d2:d1:fc:d7:e5:4a:92:f6:77:dc:b8:9a:0e:
d9:2e:79:cb:f9:e2:28:a6:cf:37:08:2e:87:6a:c9:
a5:ff:d2:9a:0c:1a:29:a8:27:7d:b9:a5:68:eb:eb:
5a:0e:7f:7a:f3:e8:f3:c5:d3:fe:2f:2a:3d:8d:31:
17:d1:73:58:ae:50:2f:81:cb:50:bf:b0:64:bf:f1:
75:e4:cc:65:a2:7f:f3:0d:72:ad:f7:40:19:37:93:
5b:f4:5f:46:b9:58:3a:77:b8:ef:2c:b1:4c:87:a1:
df:68:dd:9d:3a:f8:f2:a4:96:e9:88:c6:a0:0d:ba:
c0:14:55:39:70:06:1e:22:47:83:ca:e0:e2:85:19:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A4:D0:F9:24:5B:A9:AA:72:06:68:4B:B2:51:53:C5:4B:79:8E:B1
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/paTQ-SRbqapyBmhLslFTxUt5jrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.112.0/20
84.246.192.0/21
93.188.176.0/21
194.70.36.0/24
IPv6:
2a01:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:db:2c:56:2b:f0:3e:e1:9d:b4:f4:75:a1:0f:f5:97:af:f1:
08:14:a1:76:75:c1:1b:d7:a3:d0:c1:73:6f:94:ac:88:44:36:
bf:09:27:e0:16:44:ac:a9:c7:aa:e6:6f:55:ca:50:1c:f0:fa:
46:4a:68:cc:28:8c:44:f8:81:86:bc:8d:36:3a:d9:97:d0:33:
15:c1:d8:01:5b:93:8c:7b:7b:e7:92:fb:02:ba:03:12:f7:f6:
5d:20:1d:77:6a:c8:e9:ad:ce:33:d3:f3:9f:2f:b1:ed:34:9d:
4e:56:4c:6d:1d:64:99:12:5e:fd:87:f3:05:f0:80:5c:4d:f3:
c0:ae:eb:dd:85:68:6e:31:76:74:61:72:60:8b:78:d2:c3:c1:
19:77:9a:aa:45:2f:94:9e:a4:19:61:d6:67:cc:73:d7:35:82:
b6:a7:96:d5:a0:7c:89:4c:f9:20:f4:4d:03:c3:31:f4:42:6d:
2c:3b:6b:97:fc:fe:f7:bd:db:77:b3:23:8c:90:d6:47:c0:b8:
a8:73:eb:06:d6:43:bc:86:23:dd:02:f4:2c:0e:2e:28:fc:bd:
c1:34:62:91:b3:dc:81:f0:90:17:3c:6b:8a:98:83:ae:5a:b8:
5e:5a:7f:9c:2c:2f:fc:aa:c5:58:1d:78:6b:58:6b:ce:09:bd:
26:7a:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net