Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Kylj4ojaxnyTHK4LnTwDJkOk2pw.roa
File: Kylj4ojaxnyTHK4LnTwDJkOk2pw.roa (raw, json)
Hash identifier: DhnSMOcaRfssibMCLsrYRILP11NlD/esmW0a2ZeTdvs=
Subject key identifier: 2B:29:63:E2:88:DA:C6:7C:93:1C:AE:0B:9D:3C:03:26:43:A4:DA:9C
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0192052ADFDB8BD23547E13F3B76BADC44EB
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Kylj4ojaxnyTHK4LnTwDJkOk2pw.roa
Signing time: Wed 18 Sep 2024 12:45:48 +0000
ROA not before: Wed 18 Sep 2024 12:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 85.203.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:2a:df:db:8b:d2:35:47:e1:3f:3b:76:ba:dc:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Sep 18 12:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b2963e288dac67c931cae0b9d3c032643a4da9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:b3:85:31:58:be:02:91:26:d9:c3:19:a3:
4b:fb:81:3c:be:23:3f:ac:66:90:1f:e0:af:66:95:
4e:b4:66:05:54:07:ed:ab:78:f0:e9:1f:94:a6:76:
7d:1e:9f:32:f6:55:77:25:b4:79:da:f5:62:2f:62:
c3:5f:f8:85:fc:45:0b:66:b1:c5:0c:d3:a7:b2:ab:
7c:56:e7:f4:ba:bd:c5:a8:60:97:cc:75:da:84:64:
e3:cb:0c:62:a7:21:b1:74:47:95:5f:58:36:10:5c:
b2:94:f1:da:0b:bf:c4:a5:da:9d:a6:06:53:84:6d:
75:ed:22:28:f9:20:b4:08:3f:5c:50:87:72:e6:e7:
84:75:b4:ac:fd:1a:63:50:08:e1:f2:37:e3:21:9a:
4b:eb:3d:43:d5:4c:60:7e:2c:db:66:48:05:4e:3c:
c2:b8:ce:d2:29:63:83:b3:43:1f:16:8d:be:1d:ef:
fa:22:c9:4f:b7:a1:34:93:52:88:a0:0e:e7:96:63:
8b:b6:28:eb:8f:27:4a:db:56:2d:a0:27:8c:78:70:
82:f7:ce:d1:4a:31:e0:46:30:3f:d3:1b:43:76:a5:
ef:88:c8:1b:76:7a:86:72:07:fa:ce:fe:df:d3:20:
ca:15:37:1a:4d:8a:97:b8:be:0e:86:f3:17:fc:ca:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:63:E2:88:DA:C6:7C:93:1C:AE:0B:9D:3C:03:26:43:A4:DA:9C
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Kylj4ojaxnyTHK4LnTwDJkOk2pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:44:18:68:9e:2d:4c:68:70:3a:d7:a6:70:5a:f3:dd:e3:16:
03:26:75:09:90:32:c9:20:e2:d5:a4:88:f5:81:ef:f7:19:6f:
be:19:47:57:90:69:05:0a:f9:ff:14:70:46:95:54:b6:3b:6f:
72:f4:cc:fe:9c:52:51:79:ab:c4:84:18:81:48:27:36:7a:be:
f3:b1:7d:d3:4c:e1:24:bc:f9:8a:cb:02:6c:56:76:7c:32:dd:
6a:16:18:54:ee:19:45:f3:10:6d:9c:c2:f7:f4:51:f3:f7:65:
a2:a3:de:0d:04:f4:2c:91:8b:8c:7a:a4:62:c4:9c:f9:18:78:
d8:b5:73:95:10:6b:73:00:0f:d0:60:8b:e1:31:4f:cc:8d:1d:
f4:75:70:36:27:91:53:61:80:b1:f0:06:df:dd:96:0d:5f:eb:
3e:0c:0b:1d:4d:38:42:48:33:5b:16:40:b5:8f:5c:2c:76:22:
b0:8b:14:96:d5:82:00:34:11:d8:0a:ca:6d:96:bc:5b:57:fb:
ec:38:b0:da:c1:fd:1d:27:3d:ac:79:d3:93:b9:e9:a6:f9:3c:
cb:d4:3c:34:ea:99:6e:fb:e0:1a:70:62:cb:44:0c:ba:6b:d2:
d1:ca:18:00:68:8f:88:6f:a4:67:aa:30:1f:6e:32:34:0b:ad:
47:5a:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:22 2024 by rpki-client on console.sobornost.net