Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/j3j2ZPJYDFmf2khx0OuB6T1QDRA.roa
File: j3j2ZPJYDFmf2khx0OuB6T1QDRA.roa (raw, json)
Hash identifier: 8W7lDHSg0UmHdTLR0+QXoxIqIjgepOiyqGak2c1RJ0w=
Subject key identifier: 8F:78:F6:64:F2:58:0C:59:9F:DA:48:71:D0:EB:81:E9:3D:50:0D:10
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 018CC8DE5C6DFD209D43BE86C68F90871834
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/j3j2ZPJYDFmf2khx0OuB6T1QDRA.roa
Signing time: Tue 02 Jan 2024 06:31:04 +0000
ROA not before: Tue 02 Jan 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201241
IP address blocks: 185.81.34.0/24 maxlen: 24
185.81.35.0/24 maxlen: 24
185.81.32.0/24 maxlen: 24
185.81.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5c:6d:fd:20:9d:43:be:86:c6:8f:90:87:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Jan 2 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f78f664f2580c599fda4871d0eb81e93d500d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:39:d0:5c:a3:29:38:0b:82:75:cd:10:f3:
d6:97:9f:15:f4:f2:be:0f:83:5d:34:31:c0:ac:ee:
20:97:75:39:c0:df:00:28:6e:e0:46:51:b8:cd:1a:
7c:8e:bc:0d:a2:f9:dd:0c:d8:92:33:1e:f3:72:83:
9d:b3:4d:97:b1:80:3f:84:f3:f4:3f:5e:38:a7:4d:
48:3f:98:a6:38:3b:68:62:2d:38:ea:15:58:19:7f:
50:a4:8f:ed:b4:37:46:9e:b8:b1:2f:e3:70:f8:d5:
50:fc:1a:76:3d:1f:b7:99:37:12:aa:ef:8c:b7:7a:
8d:6f:00:e6:d2:db:28:bf:98:4f:59:4e:38:69:24:
70:a9:93:6f:f5:97:fc:5e:73:fe:99:df:fa:dd:6d:
2b:cc:c3:b7:e3:2a:5f:7e:25:89:f8:93:65:5e:d5:
57:d7:4a:52:18:ee:1b:11:b8:4b:e1:40:5f:f0:24:
ec:84:e8:5b:94:a5:b9:1f:a5:d3:5f:1c:9d:d9:6f:
59:e8:27:7f:2c:7f:19:fc:d9:ed:cc:5f:c6:2a:b9:
5b:6e:79:7a:db:95:45:14:3b:03:1e:be:d1:90:10:
b9:49:02:bf:7f:56:d6:43:b6:82:6c:59:e1:36:3d:
57:49:8a:14:7a:5b:09:ea:88:20:51:a7:ce:9c:27:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:F6:64:F2:58:0C:59:9F:DA:48:71:D0:EB:81:E9:3D:50:0D:10
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/j3j2ZPJYDFmf2khx0OuB6T1QDRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.32.0/22
Signature Algorithm: sha256WithRSAEncryption
43:32:51:1d:28:96:19:9b:58:2c:a1:35:8b:00:05:62:69:85:
c5:98:6d:7c:de:82:7f:ca:b8:d3:b1:64:b4:c9:20:9e:b2:4a:
7c:14:1d:3a:dd:b0:2c:85:e0:c1:3d:46:91:ff:24:bf:6d:4d:
8b:0f:4f:21:c5:42:22:b1:9f:32:b7:4d:29:8f:9b:52:55:d7:
46:46:18:4b:5b:08:e2:9f:ea:70:7a:b1:a9:fc:4c:2e:af:a7:
c9:b5:38:c1:28:1c:34:4f:7f:2a:43:b8:3e:b5:21:0e:0b:7d:
9b:97:04:96:93:89:c8:4f:4e:81:2a:de:8f:2e:56:93:dc:a9:
81:92:14:12:46:d2:30:5a:75:6d:54:ba:17:6d:7d:56:ef:fa:
ce:5a:ed:dd:04:16:f5:ad:02:b6:5c:6d:fd:8b:d9:57:e7:ee:
24:38:27:41:f0:ab:9f:9e:71:5b:03:15:25:27:ea:26:e7:8e:
9f:64:9c:ea:e2:f6:df:28:1b:0f:bb:c5:fc:63:af:22:8a:a9:
5d:22:9d:2c:ac:a7:7a:80:6f:c7:f2:2b:5d:81:7c:41:20:64:
62:05:41:88:ff:1a:84:c3:9f:51:2e:56:dd:be:01:98:da:65:
23:31:a4:5b:21:a9:b4:b3:9e:79:f2:7f:de:6e:6d:24:9a:2f:
df:8f:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:16:32 2024 by rpki-client on console.sobornost.net