Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/9oZJKrkRZ8Nj7HnUwQ1BelPlcgg.roa
File: 9oZJKrkRZ8Nj7HnUwQ1BelPlcgg.roa (raw, json)
Hash identifier: HKUSNadvG25/Y+WREx8XqgtFy/JnJmjOBwuYcNvkAYw=
Subject key identifier: F6:86:49:2A:B9:11:67:C3:63:EC:79:D4:C1:0D:41:7A:53:E5:72:08
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 018CC8DF8A6441BB3DEC0AB3083BCE1CF954
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/9oZJKrkRZ8Nj7HnUwQ1BelPlcgg.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212282
IP address blocks: 185.220.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8a:64:41:bb:3d:ec:0a:b3:08:3b:ce:1c:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f686492ab91167c363ec79d4c10d417a53e57208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:bb:e8:c4:f9:93:47:7b:d7:1c:e0:69:6f:
ff:6b:e7:1a:cc:b5:61:32:a1:db:18:f0:68:da:f6:
b1:71:f4:ce:e0:bf:42:ba:e0:4b:98:0a:88:da:22:
a5:c7:6c:39:d3:4c:98:ed:f2:68:f2:87:e7:66:c2:
1b:ff:30:11:bb:73:52:7b:d6:5a:3d:ce:4b:93:8e:
49:5f:4e:38:e1:d5:31:cc:81:6e:0a:79:a4:c6:dd:
99:21:c9:18:86:8e:c5:db:0e:26:72:93:fa:cd:7c:
e5:13:77:7c:bd:86:39:0c:f9:13:3b:b9:da:2f:b7:
a5:3f:cf:da:e1:8b:40:d9:5c:d9:80:57:38:d3:00:
0c:f9:c3:5c:27:ec:84:57:86:d2:3d:5a:2f:6f:3b:
c7:be:34:14:ea:f6:39:61:1d:1d:b2:be:dc:fc:01:
b5:b7:ff:5d:68:ff:f3:d7:01:64:d9:df:f2:0b:ca:
a1:a1:ac:e3:6d:66:7d:00:c0:31:67:3c:ed:3f:d6:
2a:e5:51:d0:04:62:8c:ba:66:2a:e3:09:16:1c:f0:
97:78:5d:e1:34:4b:69:b0:97:d9:e5:0e:48:5e:9b:
fc:f3:c4:68:ac:97:79:01:17:d6:dc:61:13:5c:55:
c4:2e:51:cd:54:91:72:f4:31:43:91:97:cb:aa:e7:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:49:2A:B9:11:67:C3:63:EC:79:D4:C1:0D:41:7A:53:E5:72:08
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/9oZJKrkRZ8Nj7HnUwQ1BelPlcgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:9f:02:08:a7:e7:df:b8:63:41:25:7b:4a:18:85:5f:cb:92:
08:b6:17:b7:be:08:46:88:cb:69:0b:46:71:6a:b4:7c:e3:61:
c5:aa:31:6f:3c:7c:e8:f4:b8:9d:b5:00:9b:f4:f5:a7:b3:70:
fd:1d:70:46:2d:a4:27:68:52:76:30:49:81:63:c7:7a:c0:6d:
9c:79:5d:ee:0a:ad:91:18:54:a7:90:3a:c2:72:3c:46:19:53:
2d:4e:b5:95:e6:00:af:b6:ac:fb:3c:88:fc:26:47:ef:db:5e:
b1:16:77:25:a1:19:b4:5d:33:49:a4:f5:2c:36:4e:95:d2:62:
12:5c:3e:17:08:9a:34:2c:b9:8b:6e:39:95:e7:6b:3f:73:47:
37:33:10:60:8b:46:21:06:78:e9:3a:72:ec:4d:04:96:77:71:
27:f8:9f:44:46:3e:40:32:71:12:c3:cb:64:e9:f8:65:b5:f5:
6b:da:c4:02:09:7c:ce:e4:48:ea:c2:bf:b4:ff:40:64:89:c4:
fc:6e:de:1d:a6:cd:41:61:6a:63:9b:3f:8d:37:2a:a3:03:42:
08:b0:68:3a:d0:46:84:01:57:6c:99:8f:03:9d:9e:75:f3:4b:
df:7e:91:64:bc:27:a6:6d:cd:2c:07:5c:dd:a3:d5:04:75:2d:
d5:f4:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:17 2024 by rpki-client on console.sobornost.net