Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/pW9cYkAxFbAvvxz4qFnuvVovHFA.roa
File: pW9cYkAxFbAvvxz4qFnuvVovHFA.roa (raw, json)
Hash identifier: T9Uy8yafQu3qVVqMuc8y3kOaCLU4n0X4gtMiJ8ddcoY=
Subject key identifier: A5:6F:5C:62:40:31:15:B0:2F:BF:1C:F8:A8:59:EE:BD:5A:2F:1C:50
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 018CC2DB4647DAA25DC22A2C5FAEE82166E4
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/pW9cYkAxFbAvvxz4qFnuvVovHFA.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50563
IP address blocks: 185.102.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:46:47:da:a2:5d:c2:2a:2c:5f:ae:e8:21:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a56f5c62403115b02fbf1cf8a859eebd5a2f1c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:56:0d:05:77:98:5b:f6:03:f9:8f:49:3d:
cf:30:cd:f9:9f:20:ef:25:03:c1:a8:6c:57:5e:1c:
25:d6:96:71:d7:25:82:e9:02:83:4b:e1:2c:eb:06:
ff:c3:5b:45:fb:0a:0b:53:50:39:31:ad:17:ed:c8:
5e:27:e9:5c:07:e1:39:77:4c:58:06:98:d8:82:cf:
8c:0c:8a:9a:e3:93:00:1c:56:cb:bc:bd:2a:c7:ed:
c4:18:92:e2:95:49:ed:29:6d:5f:18:b2:f7:48:ef:
d7:4c:fb:b4:76:7f:cc:fd:08:4a:80:fc:cb:3f:a8:
00:1a:2d:b9:56:81:61:e3:4c:b7:e7:bc:64:0b:3d:
b5:da:91:5b:b3:78:cc:ef:77:a5:59:ce:85:18:33:
0c:4b:03:11:74:d7:94:78:be:52:10:4e:04:7c:56:
eb:a3:5e:53:39:61:fd:22:c2:81:2e:ac:19:98:ef:
c6:df:f4:93:e3:c2:90:29:b8:82:64:37:66:3b:c5:
ae:09:15:7f:01:b3:6f:3d:42:b7:97:09:4e:19:be:
39:a9:06:08:33:44:3d:66:4a:ad:33:dd:6e:6e:04:
46:a9:56:bb:22:18:f7:5a:9a:3e:7b:ad:68:83:e2:
58:1d:ff:ac:d9:f5:a9:5d:05:fc:65:6a:b8:a0:54:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:5C:62:40:31:15:B0:2F:BF:1C:F8:A8:59:EE:BD:5A:2F:1C:50
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/pW9cYkAxFbAvvxz4qFnuvVovHFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:35:5b:70:78:ab:ab:41:af:3d:94:82:1a:9b:44:54:72:a6:
8b:ae:9d:42:33:e1:b9:2d:c3:87:9d:1d:e9:7b:2f:29:7b:7d:
c9:ff:6c:64:3f:1e:68:a8:2f:68:74:87:6c:9b:b4:db:62:b9:
f8:9b:e2:94:88:d2:10:93:b2:f5:b9:d5:b7:98:9c:54:a8:8b:
ab:d0:4e:a8:f3:e2:10:5b:66:16:9e:b8:b8:83:72:6f:d5:41:
83:e8:a9:05:8e:64:c8:a9:9f:c4:61:90:c8:e8:88:59:3c:01:
01:f1:af:74:ed:b8:e3:f2:65:a0:de:78:f4:fa:d1:97:c8:ee:
e7:df:35:fb:88:72:11:07:70:c9:97:4e:be:72:1d:96:06:70:
6c:6d:c2:35:99:2e:0a:ef:7c:89:46:d1:4f:12:60:7f:3b:65:
11:67:9a:52:db:da:9c:55:fb:d6:62:b7:80:8f:d5:07:37:57:
76:00:65:94:26:55:d2:e6:ff:38:d5:e1:fd:b7:83:de:40:ad:
ca:3d:09:2a:f6:f6:31:b8:82:05:72:7b:82:89:6d:22:43:b3:
45:cd:a4:a5:6b:af:2a:71:90:73:4b:4e:72:ab:49:2b:10:e3:
ca:37:66:6b:93:35:64:ed:af:87:47:48:e6:2e:4f:31:39:93:
97:bb:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:07 2024 by rpki-client on console.sobornost.net