Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/kTJz2hodW690klR_mrMwjbGBJug.roa
File: kTJz2hodW690klR_mrMwjbGBJug.roa (raw, json)
Hash identifier: Hy7oXBzY7kccU9y4gBAMSY558bPrgqkmsuov8R8/bwY=
Subject key identifier: 91:32:73:DA:1A:1D:5B:AF:74:92:54:7F:9A:B3:30:8D:B1:81:26:E8
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 018CC726EBED7DA2DF40B94E2912E822EDB4
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/kTJz2hodW690klR_mrMwjbGBJug.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210927
IP address blocks: 185.178.228.0/24 maxlen: 24
185.178.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:eb:ed:7d:a2:df:40:b9:4e:29:12:e8:22:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=913273da1a1d5baf7492547f9ab3308db18126e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:58:59:76:d6:dd:ec:5d:06:b9:f0:34:28:
54:24:3e:c2:53:73:88:a6:67:76:7b:4d:02:7f:0e:
18:cc:57:08:4f:1d:26:24:8b:fc:e5:ec:66:30:0b:
cc:2e:f0:a2:b1:29:8b:86:a5:19:14:db:f4:ad:5d:
47:e2:4b:9f:9d:e7:a9:90:67:e7:56:b3:c1:59:0b:
6d:f7:1d:1e:32:cc:05:a5:f2:66:ad:8f:49:b2:f2:
5c:fd:9d:9a:c8:6a:d3:d3:4a:07:59:73:74:d8:bd:
2e:ce:58:c8:32:eb:87:58:40:e4:f4:52:08:e8:ac:
5c:be:74:bd:f5:c0:e3:8c:e6:34:61:c8:58:62:30:
4a:0f:c1:c5:09:76:1f:36:03:f7:75:fe:ef:31:e3:
5b:34:95:bd:30:e8:90:58:cc:fd:02:94:4e:8a:a7:
b5:60:3c:fb:f4:ad:79:91:e9:05:c9:d8:b1:41:48:
8d:5b:c1:cb:07:16:56:e6:1e:c9:7e:7d:5e:9f:cb:
a9:68:0e:5b:f0:68:90:29:06:22:fa:86:df:39:3c:
7d:d8:8e:c3:14:9e:99:9e:5a:ee:1d:20:be:23:85:
d1:41:b0:4f:24:9f:48:bc:9f:2a:3f:cb:c1:9c:3e:
cc:0d:c8:39:9e:4c:4b:5d:bf:0f:ce:50:8d:e3:2b:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:73:DA:1A:1D:5B:AF:74:92:54:7F:9A:B3:30:8D:B1:81:26:E8
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/kTJz2hodW690klR_mrMwjbGBJug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.228.0/23
Signature Algorithm: sha256WithRSAEncryption
67:40:b1:6a:b4:87:c7:5c:65:41:04:a4:51:5b:8d:b6:6b:5f:
f3:cb:94:42:72:10:e9:61:6a:e4:51:76:21:65:5a:5a:83:78:
b4:60:da:03:7a:55:df:21:f7:23:89:39:27:e9:e3:c6:f3:13:
bd:f2:31:41:4e:85:5f:0d:65:2e:70:aa:11:2b:12:fe:8b:ed:
99:0f:0a:1a:60:5b:7a:22:da:2b:24:a0:db:90:ae:d3:46:b3:
b8:e7:13:d4:98:bd:85:fb:9c:a8:a4:04:6a:c9:cc:00:4c:a9:
36:1d:bc:ec:71:2f:a5:11:da:f0:5d:ca:5c:3b:17:60:bf:62:
b1:9d:b1:1e:13:c0:db:12:e3:28:87:04:42:48:64:ce:ba:8c:
02:39:84:24:67:46:d7:88:cb:88:ab:e6:e7:b1:98:08:56:1a:
db:3a:54:47:ed:85:ce:86:6e:21:83:90:7d:9d:3c:e2:e5:b6:
6f:f3:a6:48:61:b0:d8:03:67:70:a8:5a:e2:77:b1:7a:57:26:
4a:22:58:23:92:c5:55:3c:13:aa:d6:38:64:46:2e:02:41:85:
de:e8:46:18:65:f7:17:3e:e0:ea:d1:28:5d:7e:7e:be:0b:55:
7d:a7:e7:ea:4a:40:94:6f:93:c5:22:92:18:1e:ee:5f:3f:6f:
88:8c:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:14 2024 by rpki-client on console.sobornost.net