Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nSKDDSfn1H3sWis-edtlDgH6Cy4.roa
File: nSKDDSfn1H3sWis-edtlDgH6Cy4.roa (raw, json)
Hash identifier: QLKde9S0vuDPt/Mw0EX8wBWPaT7Q19aaMQ3qtNVtB+Q=
Subject key identifier: 9D:22:83:0D:27:E7:D4:7D:EC:5A:2B:3E:79:DB:65:0E:01:FA:0B:2E
Certificate issuer: /CN=179066c03fc32c846fc9be9aac25abce9a4c8515
Certificate serial: 018C334271D3CC4EDA61613D7F8F592295C0
Authority key identifier: 17:90:66:C0:3F:C3:2C:84:6F:C9:BE:9A:AC:25:AB:CE:9A:4C:85:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5BmwD_DLIRvyb6arCWrzppMhRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nSKDDSfn1H3sWis-edtlDgH6Cy4.roa
Signing time: Mon 04 Dec 2023 05:17:21 +0000
ROA not before: Mon 04 Dec 2023 05:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203187
IP address blocks: 185.238.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:42:71:d3:cc:4e:da:61:61:3d:7f:8f:59:22:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179066c03fc32c846fc9be9aac25abce9a4c8515
Validity
Not Before: Dec 4 05:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d22830d27e7d47dec5a2b3e79db650e01fa0b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:d3:de:d8:d9:be:c2:bb:97:10:09:7a:84:
f9:0c:8d:5b:8b:10:69:71:3f:c7:22:7a:90:f7:e3:
17:e8:4a:4e:a4:c8:3c:97:9e:26:7b:08:1f:d8:51:
a1:59:1b:9a:b0:cb:e3:27:49:bc:44:45:c0:fe:17:
ed:ef:0f:ef:a0:8f:81:ea:78:5f:46:65:8c:c0:e9:
97:cf:ce:97:2c:4d:f6:9e:3a:f7:82:f7:16:90:1a:
fa:5c:a8:fb:7a:5a:ab:4a:96:80:a8:a9:80:c0:7d:
56:11:d8:7b:9d:83:4b:a1:a1:21:22:3c:c0:dd:61:
24:12:52:84:3d:dc:b5:b6:62:42:bb:c0:59:97:c2:
bc:95:97:08:cd:5b:1a:ef:c0:f2:20:1c:c6:fd:b8:
db:60:7f:7a:8f:be:2a:56:27:d4:27:00:5c:c1:71:
f0:92:d8:0a:81:90:d7:4d:da:cd:84:4b:9c:73:15:
2c:98:e9:a7:92:d0:5e:f4:0e:c9:09:1b:f3:ea:20:
90:ab:e7:2f:62:55:9b:65:5b:18:97:3a:d2:44:bf:
c6:7e:08:db:2f:36:ec:1c:ce:33:e6:00:a2:40:66:
04:92:99:81:e3:f0:7e:b6:c0:d4:00:ed:6b:85:e9:
1d:4e:bd:98:1c:16:90:e8:03:14:cd:c3:ce:b3:22:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:83:0D:27:E7:D4:7D:EC:5A:2B:3E:79:DB:65:0E:01:FA:0B:2E
X509v3 Authority Key Identifier:
keyid:17:90:66:C0:3F:C3:2C:84:6F:C9:BE:9A:AC:25:AB:CE:9A:4C:85:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5BmwD_DLIRvyb6arCWrzppMhRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nSKDDSfn1H3sWis-edtlDgH6Cy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/F5BmwD_DLIRvyb6arCWrzppMhRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:ab:35:c1:da:0b:96:26:5b:76:4f:5b:5b:b7:4c:23:c7:8b:
1f:c1:3f:70:a4:b6:df:fc:50:3e:66:46:f4:d6:67:56:2e:cd:
fc:38:ef:16:d9:f6:c5:5d:bf:33:1f:6c:06:75:af:65:aa:ca:
ac:31:ec:29:40:95:bc:14:17:88:1e:1a:e3:26:e4:7a:50:b1:
b9:fd:b1:7c:d6:63:28:43:9f:cb:32:09:e6:3e:01:3f:d3:de:
fb:73:0f:13:6d:49:a5:eb:8e:02:47:58:4a:e7:10:f7:70:f4:
3f:80:f4:37:90:c8:51:63:6c:43:ff:bc:fe:b5:6d:17:65:89:
6c:8e:7f:6f:49:77:ed:82:db:87:19:9d:f5:be:18:41:1e:30:
c4:88:fa:a7:5a:95:b3:89:5b:ec:7d:06:3b:77:cf:94:84:18:
4b:50:60:79:d7:4a:b0:2e:06:18:6e:0a:92:02:03:7b:61:17:
af:b7:fb:09:da:59:a8:b0:97:c8:8c:d1:46:56:9f:87:7a:60:
33:ad:04:1c:cf:b8:8c:64:fe:19:ff:2a:69:a9:f5:5c:f8:0d:
64:10:1f:66:5f:07:98:ba:51:c4:7a:51:87:ad:d8:2e:55:6c:
88:cd:51:45:43:1f:89:16:c7:5b:73:4a:f8:97:21:fc:17:7f:
76:77:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net