Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/haxEif2ycI_M5SjDW6QSuoo6LD8.roa
File: haxEif2ycI_M5SjDW6QSuoo6LD8.roa (raw, json)
Hash identifier: /CHG+/U2Wpcg5GFvmTt6YIz2Xw7qN5z9/hTKCyj+jV4=
Subject key identifier: 85:AC:44:89:FD:B2:70:8F:CC:E5:28:C3:5B:A4:12:BA:8A:3A:2C:3F
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01905A2FC564932FA08B13AAB7CE8279BFFE
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/haxEif2ycI_M5SjDW6QSuoo6LD8.roa
Signing time: Thu 27 Jun 2024 14:53:18 +0000
ROA not before: Thu 27 Jun 2024 14:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.36.0/24 maxlen: 24
185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:2f:c5:64:93:2f:a0:8b:13:aa:b7:ce:82:79:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jun 27 14:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ac4489fdb2708fcce528c35ba412ba8a3a2c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:e1:c3:0f:fa:f2:3e:6a:a4:94:ae:0f:bd:
12:7d:fe:7e:ef:70:28:fb:31:e1:00:7d:73:0e:72:
06:92:f7:ab:ff:ce:56:20:64:68:23:79:a3:56:8a:
0c:03:90:84:91:f2:5a:57:63:12:ed:99:47:2a:1a:
61:17:3b:ba:6f:87:8d:f9:92:9e:7e:19:51:23:ab:
51:68:f9:8f:36:47:62:4d:cb:33:de:bb:00:45:29:
17:9e:52:ef:db:d5:dd:ab:9b:3f:5e:cf:68:42:aa:
d9:eb:96:9e:eb:4d:b4:2c:de:37:b1:d5:82:f7:de:
da:f0:85:35:85:ee:85:2a:5e:be:e4:f1:de:3a:a8:
e3:eb:66:f0:41:ac:bb:5d:57:09:72:d3:0a:ec:0a:
10:ae:83:a0:fd:a3:fa:55:f6:d5:a8:91:30:f6:e2:
a3:3b:e1:8a:cf:37:f9:fb:be:bc:af:ab:42:58:08:
34:b7:84:59:75:24:dd:8f:ed:50:75:ff:38:1f:c5:
c1:65:e3:ed:6a:0c:21:a8:d8:ac:d3:a0:e0:9f:76:
cb:f3:26:2a:b8:57:12:ca:f3:ed:42:68:ee:bd:89:
8a:51:95:20:4f:9e:ea:b9:d0:37:ec:a8:78:db:a1:
b8:44:94:e9:20:39:7b:f4:ee:a2:77:1a:61:8f:6d:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:44:89:FD:B2:70:8F:CC:E5:28:C3:5B:A4:12:BA:8A:3A:2C:3F
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/haxEif2ycI_M5SjDW6QSuoo6LD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0-185.120.38.255
Signature Algorithm: sha256WithRSAEncryption
08:8b:d2:f6:b8:72:d9:23:9c:48:a1:c2:39:f2:b6:1c:7f:58:
8f:1e:57:e5:cb:81:be:fe:f2:76:00:33:c0:ce:8a:fa:63:ba:
b3:8e:38:82:2f:08:8b:5a:5a:b8:c5:72:f1:70:7b:9d:b1:ae:
21:31:29:ef:24:e6:33:c4:5c:28:37:0a:67:73:54:0e:e1:1d:
1d:4f:1c:96:bf:07:bc:6d:73:30:23:f7:e3:80:05:f9:a8:a0:
32:f5:16:a0:00:2e:0f:c5:20:81:cf:2f:68:b5:fb:a0:11:5c:
1a:42:b0:01:d9:77:51:1a:fc:78:00:40:46:31:56:c9:9c:6d:
f6:f2:fb:5d:d8:d5:20:fe:74:a3:f4:6c:4f:24:91:a1:34:c3:
94:e0:5d:69:ca:18:86:4d:f3:a6:cf:93:52:df:86:37:7e:0b:
0e:cf:5d:12:3c:5a:79:3a:8b:1e:eb:87:8e:ea:65:6d:a2:89:
a0:73:0c:ae:47:a2:63:8c:2e:ee:97:f1:ef:56:81:22:a5:b3:
25:2f:67:c1:a8:31:42:8b:2e:7f:2c:c0:88:ac:5b:55:5c:80:
33:be:ca:3b:6d:89:8e:22:76:3c:51:21:82:bd:e3:6a:74:57:
9a:2d:fd:dd:40:87:be:40:6d:09:20:24:51:97:74:d2:bf:f1:
21:7e:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 00:18:38 2024 by rpki-client on console.sobornost.net