Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/z8XIWGcypIeXdDqckkt32MZ4ZeM.roa
File: z8XIWGcypIeXdDqckkt32MZ4ZeM.roa (raw, json)
Hash identifier: 7VLG0ilhTHsSdC9y30A4g2xlQtpN2E7z0p4hPJmgIvc=
Subject key identifier: CF:C5:C8:58:67:32:A4:87:97:74:3A:9C:92:4B:77:D8:C6:78:65:E3
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018781451B809CFC01773310A3C517827F2B
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/z8XIWGcypIeXdDqckkt32MZ4ZeM.roa
Signing time: Fri 14 Apr 2023 19:36:42 +0000
ROA not before: Fri 14 Apr 2023 19:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52067
IP address blocks: 185.191.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:45:1b:80:9c:fc:01:77:33:10:a3:c5:17:82:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Apr 14 19:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc5c8586732a48797743a9c924b77d8c67865e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:a2:0a:0c:63:07:71:ff:7f:eb:91:f9:61:
a7:fb:af:81:89:3f:d0:63:1a:4e:18:d5:00:01:56:
90:67:d8:32:29:52:85:b2:f2:a9:d0:b1:44:a6:9b:
32:07:fe:eb:01:e9:32:b0:98:8f:9d:c3:a7:3b:55:
68:43:99:8a:c2:9a:6d:35:9c:47:23:e6:de:c3:ba:
c0:4e:56:63:55:df:6b:16:e7:45:e6:3c:28:93:ed:
a8:bb:4b:64:92:77:79:d2:76:b3:c3:9f:c9:5d:fc:
dc:e9:97:d3:2d:08:b1:ce:d7:ad:a6:08:7e:2f:04:
43:4f:a4:b2:01:d7:1e:5a:24:5c:b8:38:f6:9a:83:
37:a9:3f:81:4b:53:e2:f6:9c:3f:fa:f4:ae:ed:47:
39:da:db:65:58:74:ee:24:de:40:0c:be:6b:d4:45:
88:8f:7d:0e:c1:5a:91:02:a8:4d:b4:74:11:42:c7:
5d:8f:34:f9:c4:76:9e:7a:01:94:ed:6a:14:8a:26:
14:c5:0e:f6:67:84:3a:1b:70:95:d3:a5:91:c0:e7:
8b:52:c7:3b:32:23:75:e0:c6:8d:55:73:e2:49:39:
41:a5:6c:9f:7a:ce:df:e5:89:dd:92:61:95:fe:d0:
36:ee:b5:a8:e1:f8:fc:6f:12:3c:f0:36:ed:4c:98:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:C8:58:67:32:A4:87:97:74:3A:9C:92:4B:77:D8:C6:78:65:E3
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/z8XIWGcypIeXdDqckkt32MZ4ZeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.141.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e7:a5:fd:3c:77:fb:d8:4d:47:1b:f8:95:1f:1e:58:e7:75:
24:4e:e8:74:ab:02:68:f2:aa:48:1d:71:b8:d6:c8:c8:78:d5:
66:6a:18:39:37:82:99:5d:7c:90:da:e3:de:b3:81:a3:ab:1c:
2f:ed:7b:21:d1:28:e6:0b:0c:22:47:65:af:8c:8c:18:1b:4e:
f1:19:95:81:99:4d:a6:85:18:ce:0d:5b:01:8a:3a:42:3f:b7:
32:d2:c9:b8:42:18:81:0a:de:86:8c:0c:3c:d0:8f:12:83:cc:
5b:81:cb:7a:2c:69:fe:b1:bf:4e:27:49:6c:60:ab:64:46:89:
eb:69:ca:63:34:19:e2:ea:92:0b:66:db:d6:f7:74:c3:01:f5:
cf:c6:aa:47:92:74:2e:67:15:fd:90:8e:41:ff:b4:14:08:59:
0c:07:67:66:c5:d9:61:e7:74:13:ed:fa:fe:fe:49:89:39:14:
ec:e2:48:bd:80:18:4f:98:9d:8e:cc:6b:fc:f3:1f:bb:35:f7:
91:e5:24:19:fa:5e:fd:f2:dd:61:79:8c:0b:5a:9f:d5:95:36:
e9:f7:4d:70:42:79:3a:e7:c3:64:04:61:6a:ac:0e:61:4e:e8:
c4:34:52:43:97:53:0e:fa:11:80:b9:8e:4c:83:dd:ea:38:b1:
61:9c:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net