Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/_B2jkOoLOsnJnNG7LuxwyVdDeF8.roa
File: _B2jkOoLOsnJnNG7LuxwyVdDeF8.roa (raw, json)
Hash identifier: HYAXvudb/XsUN7Y1u3PS7Jz6dSH1pm+p4jREUTpGmcE=
Subject key identifier: FC:1D:A3:90:EA:0B:3A:C9:C9:9C:D1:BB:2E:EC:70:C9:57:43:78:5F
Certificate issuer: /CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Certificate serial: 01856F795AEFBCB57889C175C4704B3A07F4
Authority key identifier: 38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/_B2jkOoLOsnJnNG7LuxwyVdDeF8.roa
Signing time: Sun 01 Jan 2023 22:35:02 +0000
ROA not before: Sun 01 Jan 2023 22:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5a:ef:bc:b5:78:89:c1:75:c4:70:4b:3a:07:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Validity
Not Before: Jan 1 22:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc1da390ea0b3ac9c99cd1bb2eec70c95743785f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:20:25:ea:0d:41:50:59:78:17:7e:65:21:
56:e7:51:72:16:a9:c9:fd:f1:e9:96:74:29:f5:fa:
5a:78:ab:6d:b2:31:a8:a0:3f:c8:da:8c:96:47:00:
80:f6:8b:48:b2:b1:fe:5c:78:cf:40:c4:52:d2:96:
30:80:0c:26:1f:1e:37:6c:3f:65:2b:0d:40:c9:c2:
5c:1d:52:d5:2e:5c:00:a4:2b:1d:ad:f2:22:73:e2:
77:26:3f:d4:5a:65:24:23:d5:b1:d4:bc:12:84:b5:
21:0b:f9:8a:1d:7f:f0:37:d1:52:05:7e:8d:a2:df:
72:23:64:48:a8:ee:f1:8b:53:ce:3d:ce:2e:a7:cf:
5a:76:89:a2:d9:6e:dc:0d:23:83:dd:d8:92:45:42:
f9:ce:87:53:4f:69:34:1c:73:96:f7:c9:8d:df:ce:
fc:df:8b:c3:c3:3c:ed:37:8d:c8:54:7e:8e:47:db:
6c:63:0f:4c:17:13:79:db:b0:f5:1e:e5:88:36:df:
a4:22:b8:f5:04:2e:d6:ef:c2:ec:81:61:0b:3b:c8:
2e:1a:b3:77:fa:e8:0c:c9:d3:aa:bb:33:fa:2d:10:
4e:fd:c9:8c:c7:24:6f:3d:f1:d9:48:8d:e1:e2:b1:
db:69:27:29:ef:e4:36:f1:92:8b:39:54:09:06:ca:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:A3:90:EA:0B:3A:C9:C9:9C:D1:BB:2E:EC:70:C9:57:43:78:5F
X509v3 Authority Key Identifier:
keyid:38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/_B2jkOoLOsnJnNG7LuxwyVdDeF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4c:9d:f2:61:ac:ff:59:0f:d6:a9:e1:bc:1c:31:ca:ac:46:
78:a9:4f:94:4c:b1:ae:f9:61:7a:1e:9f:bf:3c:19:a0:7d:0f:
68:60:57:51:f4:88:56:4b:bd:55:94:a7:cc:4f:17:c2:00:ce:
8e:19:29:95:d3:df:0d:29:16:e3:62:9b:0f:30:1f:c3:f0:d6:
5f:ff:d1:f7:97:d3:38:bd:76:82:48:a4:7f:70:8d:2e:5a:30:
ca:4a:95:bd:b6:2f:0e:28:00:26:1f:d0:b5:cc:0f:17:96:a5:
ee:1a:c9:db:15:d3:0a:2f:c8:02:8a:17:3b:9b:f4:be:41:7a:
c0:11:f0:97:8b:74:60:cd:cc:62:5d:59:09:2b:2a:46:a4:64:
dc:67:5d:7f:7c:63:ab:db:e8:20:de:27:bb:b3:1d:12:1a:70:
83:af:94:ea:91:06:fe:8d:53:74:80:94:c9:8a:be:89:f7:44:
3d:a5:a8:3f:66:74:8b:c7:9d:6d:36:53:dd:93:ff:98:ae:3e:
52:c9:65:6a:80:69:29:71:66:61:a4:cc:cd:71:23:39:3e:2e:
94:02:d3:33:11:ad:ad:c5:ac:ca:e0:f3:2e:b1:ed:60:6e:c8:
83:74:26:15:56:2b:ab:8e:c2:5f:20:18:d0:55:ab:05:c3:fe:
db:93:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net