Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa
File: o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa (raw, json)
Hash identifier: GNxjwGQ5Nvm/UFG6pZgPnzbnbekUAO/mUcFmfE7f5bY=
Subject key identifier: A3:F3:C3:AB:1E:D0:20:47:11:D6:B0:BD:84:F9:1E:41:39:9C:C2:B6
Certificate issuer: /CN=39c8805853685c995f3e75e77f7fbb37341de15f
Certificate serial: 01856C411601906C01679D906767999950A5
Authority key identifier: 39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa
Signing time: Sun 01 Jan 2023 07:34:42 +0000
ROA not before: Sun 01 Jan 2023 07:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 146.19.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:16:01:90:6c:01:67:9d:90:67:67:99:99:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c8805853685c995f3e75e77f7fbb37341de15f
Validity
Not Before: Jan 1 07:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f3c3ab1ed0204711d6b0bd84f91e41399cc2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:65:ae:c5:09:a5:2a:87:c4:4d:39:a3:c3:
b5:f9:18:86:28:23:b7:0a:25:1d:f9:db:16:31:ea:
a8:77:f6:2a:13:73:59:33:77:5c:09:3a:42:bb:84:
a5:86:1a:c6:7b:48:1a:1b:44:a2:50:1c:35:a5:3f:
57:e3:d7:25:bd:d7:bb:f1:65:ab:ea:ad:54:45:c5:
b3:14:d5:57:36:fc:58:3a:be:9f:d6:d9:6f:47:81:
9c:47:d5:52:17:5f:52:d0:f4:79:20:1f:0e:c8:e2:
a6:b6:2d:0c:f1:d6:66:ea:33:72:90:3a:ee:76:7e:
a3:b2:23:16:26:11:5e:6a:1e:73:dc:1b:b5:fd:29:
42:01:99:c6:c2:95:32:28:94:0a:d7:af:7e:b2:08:
09:c8:4d:cb:98:5f:d5:fd:58:6b:0a:a6:e4:fc:17:
f0:ea:f5:52:9d:a5:39:2a:dd:94:d5:8b:7a:3c:1a:
fb:35:37:13:6d:8f:e7:55:72:b9:98:69:c5:49:e4:
24:16:57:5e:c5:b3:fe:45:54:6e:c7:de:f3:9b:0c:
ea:86:63:a7:a6:dd:0a:dc:04:a2:3c:ed:0b:67:7f:
8d:52:4b:c5:9b:52:fc:e3:a2:6b:21:3d:c8:12:11:
67:f5:e3:ed:8b:95:00:e8:52:c0:fa:d2:9d:28:e8:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F3:C3:AB:1E:D0:20:47:11:D6:B0:BD:84:F9:1E:41:39:9C:C2:B6
X509v3 Authority Key Identifier:
keyid:39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/o_PDqx7QIEcR1rC9hPkeQTmcwrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:40:d1:de:66:7a:57:52:68:6a:0f:3a:c5:ec:70:5d:88:30:
bd:2a:8b:45:12:ad:82:3e:24:34:2d:d3:fb:7f:db:d5:db:79:
28:7a:99:c4:32:7d:8a:67:35:e2:80:4f:44:f9:eb:0f:95:d7:
d7:a6:43:8e:1a:d2:95:4e:c8:f1:b4:7f:1b:b1:86:37:5e:f0:
19:35:b9:a9:6d:a3:ea:1f:a8:5f:1a:e1:d8:cd:38:93:7f:93:
da:87:54:a8:b8:54:c7:40:2e:0d:b3:85:27:3a:59:78:2f:5b:
9b:1d:5d:c8:7b:ba:ff:70:1d:e7:54:44:94:35:cd:52:32:2f:
27:a5:1c:be:79:14:ac:19:c2:bd:8d:80:24:24:75:7f:d2:7f:
a4:f5:0d:6b:d0:a5:9a:b5:47:a0:6b:37:9c:e8:21:af:91:84:
74:5e:cd:78:61:c6:b8:f8:83:b9:ba:ab:82:e2:5e:b5:a9:f3:
b0:00:e9:d9:06:12:38:55:b9:9d:eb:e6:fb:36:d6:47:6a:66:
3e:54:b9:ac:83:93:88:11:08:a6:7c:ab:bd:e0:bd:5a:ff:fe:
ed:eb:58:72:ec:ea:2c:e9:2d:ea:5c:05:70:e4:1f:87:f6:bf:
bf:01:88:10:c2:b1:8f:f2:78:38:f3:ef:3b:ab:11:82:dc:75:
d7:f5:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net