Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s7ZR1XwliJ_800ynLzamHCc7j9E.roa
File: s7ZR1XwliJ_800ynLzamHCc7j9E.roa (raw, json)
Hash identifier: o2275A4pLxM+Mz6Uft1SpCb0w4g/QO2bdryZNiS96ds=
Subject key identifier: B3:B6:51:D5:7C:25:88:9F:FC:D3:4C:A7:2F:36:A6:1C:27:3B:8F:D1
Certificate issuer: /CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
Certificate serial: 01889EF58B507F647FE74660821678039D7D
Authority key identifier: B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s7ZR1XwliJ_800ynLzamHCc7j9E.roa
Signing time: Fri 09 Jun 2023 07:01:12 +0000
ROA not before: Fri 09 Jun 2023 07:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39615
IP address blocks: 185.227.181.0/24 maxlen: 24
185.227.180.0/24 maxlen: 24
185.227.183.0/24 maxlen: 24
185.227.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:f5:8b:50:7f:64:7f:e7:46:60:82:16:78:03:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
Validity
Not Before: Jun 9 07:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3b651d57c25889ffcd34ca72f36a61c273b8fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:f3:e6:e4:64:4b:fe:90:92:8d:e1:4a:de:
aa:12:0b:a1:a4:b8:2b:43:7b:87:03:8b:66:9d:2e:
1f:43:cb:3a:ec:21:6c:2a:3e:87:3d:ce:dd:d7:4f:
79:44:50:31:0f:38:4d:40:f9:d9:81:20:3a:14:05:
01:e0:b9:2f:89:ac:61:60:76:5c:fd:1f:0d:60:eb:
01:6f:a9:fc:7f:20:8c:ef:46:80:20:3e:ad:6a:03:
4e:b6:a1:3d:0b:2b:28:50:dc:01:bc:45:6e:69:45:
34:eb:79:0e:d1:80:2c:ed:f9:ad:5f:d5:53:b1:24:
63:9c:63:88:a7:4a:ab:fb:bb:74:fa:df:d0:15:97:
d3:22:e7:a1:bc:e1:12:2a:59:16:f9:62:f2:e5:3c:
6a:d8:10:c9:71:7c:36:72:c3:57:88:21:89:f1:0a:
16:d0:eb:d9:62:fc:3b:40:02:ff:cf:70:1f:49:45:
41:06:84:1b:39:90:ee:9f:85:c5:01:17:a7:f8:1d:
c4:72:dc:57:77:da:9d:a0:56:f2:32:ca:3b:85:26:
98:05:43:36:25:60:7e:55:99:52:11:4e:db:91:01:
76:c4:67:d8:75:7a:39:e0:e4:05:75:06:88:6f:20:
b1:65:37:2e:28:6a:74:a4:6f:76:2d:0c:86:22:6a:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:51:D5:7C:25:88:9F:FC:D3:4C:A7:2F:36:A6:1C:27:3B:8F:D1
X509v3 Authority Key Identifier:
keyid:B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s7ZR1XwliJ_800ynLzamHCc7j9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a2:9f:c8:f2:35:45:fe:6a:81:43:0c:f2:1b:04:1b:fa:25:
1e:b1:13:f2:7c:bf:13:24:56:28:0a:fa:a2:f9:fe:50:f2:03:
1e:df:a6:85:c3:01:ce:8f:b2:a6:ef:64:50:88:0e:45:97:bb:
ac:b3:cc:98:e4:6a:96:1f:d0:8c:f1:e8:85:f2:f4:a9:3f:a5:
1c:a6:18:40:78:fc:77:68:e0:ac:40:18:b5:f4:70:e1:46:c2:
29:58:22:eb:2c:be:76:e8:f2:0c:cb:6d:c5:cd:ed:e8:44:45:
c2:50:40:07:c8:6f:33:0c:a6:f3:74:05:33:d1:fc:53:27:b9:
cd:18:00:c7:dc:e3:fb:49:f4:8f:cc:d0:be:cd:04:6f:3c:60:
3d:51:59:0e:e8:c5:45:91:03:43:23:8d:8a:4e:c6:75:bc:45:
fa:6d:e7:99:42:62:d2:65:48:d7:76:0f:83:bf:19:e8:41:af:
60:24:68:f1:99:17:9d:e8:81:ed:71:69:a0:de:08:34:19:f6:
d5:b8:14:c6:98:33:01:13:3d:4c:85:09:d7:55:2c:73:29:d8:
53:b0:6d:09:8e:99:e1:ed:5e:ef:a2:f9:d0:c6:51:b9:61:9e:
49:8e:7b:24:95:c3:8c:fb:3c:33:3c:2b:e2:76:35:6e:e3:97:
83:e3:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net