Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ndVORbcJUSgCYLxbAPd5N7C75zI.roa
File: ndVORbcJUSgCYLxbAPd5N7C75zI.roa (raw, json)
Hash identifier: F3uX8uFg0NPNsVIfVmTXrry47QfhnYOg2Csh4Dw73fg=
Subject key identifier: 9D:D5:4E:45:B7:09:51:28:02:60:BC:5B:00:F7:79:37:B0:BB:E7:32
Certificate issuer: /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial: 01856C0112E183312622C8595E2F2673BE21
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ndVORbcJUSgCYLxbAPd5N7C75zI.roa
Signing time: Sun 01 Jan 2023 06:24:47 +0000
ROA not before: Sun 01 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:12:e1:83:31:26:22:c8:59:5e:2f:26:73:be:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
Validity
Not Before: Jan 1 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd54e45b70951280260bc5b00f77937b0bbe732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:90:45:29:59:b6:cd:78:b3:ad:b2:86:95:
80:97:2b:50:65:df:99:ee:76:cb:a1:7c:40:0f:c4:
3c:4f:35:83:b4:29:8a:50:23:9d:b4:cd:b6:63:11:
7b:b5:32:eb:4c:be:03:03:2b:d2:37:74:d0:ce:4c:
31:e4:7e:11:74:9f:f9:bb:d0:40:d8:50:be:c2:da:
03:33:97:cf:20:36:29:da:8e:ef:93:7a:6a:15:56:
41:b2:32:74:24:b5:64:1f:93:8a:21:02:71:0d:ce:
38:00:3c:ca:3f:50:bd:a7:9f:24:34:86:76:08:70:
3d:ad:eb:7f:f1:04:d9:bd:fe:25:77:b3:46:8f:e3:
5e:c7:5c:c8:72:a1:cf:70:f1:a4:a0:f6:64:7e:29:
16:ac:09:06:e2:2e:9b:50:14:f4:69:c9:e5:4d:e4:
2c:e3:5e:88:9b:11:31:17:ba:5c:7f:fa:38:bc:77:
ab:1e:d2:e9:81:bf:50:e6:d1:e6:13:04:71:28:7d:
9a:27:69:c9:4f:0c:a4:06:c0:eb:ae:9d:87:c4:59:
4a:1f:45:a1:ea:fe:50:f9:e3:ff:86:d7:3b:64:8e:
58:ea:66:ae:72:54:8a:a9:34:8e:75:14:e7:a9:f0:
83:bd:8a:9a:04:b3:f4:64:84:97:07:f7:e5:33:3c:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:4E:45:B7:09:51:28:02:60:BC:5B:00:F7:79:37:B0:BB:E7:32
X509v3 Authority Key Identifier:
keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ndVORbcJUSgCYLxbAPd5N7C75zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
71:14:10:9c:b5:91:23:97:17:bd:e0:c5:21:34:e1:86:74:cc:
ff:16:e9:87:3a:71:30:73:df:b2:aa:73:97:fa:57:99:4e:1c:
58:0f:83:20:aa:f5:14:7d:81:2b:44:41:9d:25:48:a9:2b:a1:
57:90:6c:9a:b4:34:5d:e4:64:a1:24:e6:b1:d2:cc:a2:a3:c2:
c9:cd:43:13:08:9b:09:89:a2:8a:dd:05:35:5b:5a:6f:f3:dd:
0a:fc:e9:8a:0b:f2:64:d4:18:bd:dc:68:af:6a:6d:b3:49:87:
86:79:3b:dd:39:b5:82:a3:1f:44:4e:f8:3d:58:5f:2b:d6:2b:
50:04:e0:f6:21:ea:ab:50:33:2d:83:c3:e9:55:44:22:16:cb:
c2:f9:83:3c:63:30:ed:93:4d:dd:79:51:ad:4c:8f:99:14:30:
e5:fc:45:cc:5f:a4:3a:2b:fa:41:a6:6c:29:33:ec:42:6a:af:
b0:c3:8d:16:d3:bc:0a:4c:c3:49:ea:e2:1d:6f:31:f5:1a:b5:
ea:57:e8:7f:c3:83:10:e7:3e:17:6d:61:1d:ca:08:0a:70:34:
52:dd:91:fd:e6:4c:20:fe:8d:4c:dd:36:e5:1d:ba:08:ed:eb:
42:47:63:56:d0:48:ae:d8:f6:4f:ae:e7:c3:04:8e:11:33:d6:
7f:b1:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net