Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/bJW0wzUyAcRZMF9CEnx8qH2YFcw.roa
File: bJW0wzUyAcRZMF9CEnx8qH2YFcw.roa (raw, json)
Hash identifier: LX53mjLsIP7hpQwcFdnsDOiJ7wKyOMxxclcdUgWzzhk=
Subject key identifier: 6C:95:B4:C3:35:32:01:C4:59:30:5F:42:12:7C:7C:A8:7D:98:15:CC
Certificate issuer: /CN=8b4b5b372cde388f6e9b2125f6de7035f812fb94
Certificate serial: 03CAEAB4
Authority key identifier: 8B:4B:5B:37:2C:DE:38:8F:6E:9B:21:25:F6:DE:70:35:F8:12:FB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0tbNyzeOI9umyEl9t5wNfgS-5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/bJW0wzUyAcRZMF9CEnx8qH2YFcw.roa
Signing time: Sat 01 Jan 2022 15:06:36 +0000
ROA not before: Sat 01 Jan 2022 15:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35251
IP address blocks: 194.36.170.0/24 maxlen: 24
194.36.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63630004 (0x3caeab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4b5b372cde388f6e9b2125f6de7035f812fb94
Validity
Not Before: Jan 1 15:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c95b4c3353201c459305f42127c7ca87d9815cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:74:59:b2:bc:dd:d3:cc:a8:ce:95:19:7a:
6b:b7:4b:76:dd:a3:76:62:3d:f6:68:7f:ec:26:c4:
1f:39:71:00:66:af:dc:37:f1:8e:54:5f:01:32:1a:
c3:b8:2a:9a:ad:02:70:ca:27:60:32:7d:13:27:32:
50:77:56:15:b6:9e:0d:c6:20:fb:6d:4e:90:51:ac:
62:a6:da:dc:8e:95:5f:ca:01:44:20:7b:83:db:1a:
b6:14:74:4b:0c:bc:99:6b:b3:eb:47:0e:3b:c7:7e:
38:54:15:37:55:54:31:ea:10:69:12:56:01:1e:70:
2c:13:88:f7:37:9b:ef:6e:43:0e:35:29:80:db:5b:
5c:f9:0e:90:e4:25:8f:6a:26:c7:a0:4c:6e:c0:a4:
98:46:62:8b:28:53:61:0b:47:04:c5:c5:c5:e0:66:
28:7a:61:11:27:1e:1c:b1:18:6b:b8:8c:82:f5:ef:
a4:04:cd:b4:72:87:48:99:e0:39:88:53:d6:56:b3:
ba:78:73:fa:21:04:bc:7a:2a:cf:83:90:02:b4:eb:
59:f1:f9:41:24:27:f9:fb:76:8b:96:37:6c:7d:35:
f1:6d:5a:d2:a9:b5:18:6f:0b:64:27:fe:34:33:e1:
b6:64:ec:37:af:73:94:3e:25:12:d7:d0:e3:d6:a1:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:B4:C3:35:32:01:C4:59:30:5F:42:12:7C:7C:A8:7D:98:15:CC
X509v3 Authority Key Identifier:
keyid:8B:4B:5B:37:2C:DE:38:8F:6E:9B:21:25:F6:DE:70:35:F8:12:FB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0tbNyzeOI9umyEl9t5wNfgS-5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/bJW0wzUyAcRZMF9CEnx8qH2YFcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/i0tbNyzeOI9umyEl9t5wNfgS-5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:50:d4:a4:e5:5a:e3:24:93:4f:c5:37:99:28:c2:89:5c:b3:
bd:40:01:f4:97:95:4d:ff:85:ba:2f:5e:d2:72:36:8b:a2:2c:
17:52:2f:70:ad:99:14:56:4f:5c:16:23:d6:76:8e:cd:e0:84:
62:f6:74:4b:be:46:86:d0:96:2d:ff:ee:57:39:8f:e2:49:7c:
89:8a:75:12:1d:a1:d9:e5:d7:12:4c:c7:ec:69:c4:ef:8b:0c:
b9:b1:0e:15:83:ad:97:da:e2:6f:7e:5a:40:9b:e8:cf:6f:4f:
3f:9a:3e:bb:f5:73:51:5e:e8:f2:79:4b:23:89:db:30:a1:16:
7d:9e:05:98:bb:a6:10:da:5c:57:db:32:b8:ca:77:f2:83:99:
1c:4a:19:99:53:d0:d1:b1:21:0c:88:27:61:3c:e3:8f:fe:c9:
0e:b4:51:7e:4a:a9:89:63:65:ee:f6:93:6e:c0:dc:ae:cb:4d:
36:37:6d:9b:97:71:ae:af:86:b3:1d:fd:ec:91:fe:fe:82:89:
f5:4b:28:54:fd:78:41:2c:d2:c0:20:be:bc:ed:98:14:e2:f1:
11:a8:16:f7:04:68:32:c3:d6:2f:c0:44:12:df:bc:db:0c:0c:
69:db:c0:01:3a:d1:59:56:ca:c9:4a:3d:bf:7d:9a:92:a6:c1:
5e:0d:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net