Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/yyFb6ZRsaE-IIoeqPtrtYsVtbJs.roa
File: yyFb6ZRsaE-IIoeqPtrtYsVtbJs.roa (raw, json)
Hash identifier: E4v0t/sprPJ9YA9THVAeRj+kkFKlq54Ko0GGxrd2QOQ=
Subject key identifier: CB:21:5B:E9:94:6C:68:4F:88:22:87:AA:3E:DA:ED:62:C5:6D:6C:9B
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 018CC50125ED503970CD8FA29E168690C12C
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/yyFb6ZRsaE-IIoeqPtrtYsVtbJs.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35525
IP address blocks: 185.164.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:ed:50:39:70:cd:8f:a2:9e:16:86:90:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb215be9946c684f882287aa3edaed62c56d6c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:a6:4e:44:3c:28:46:75:0e:3c:22:b3:06:
a4:4d:14:98:87:df:82:38:b9:ea:d7:d8:f3:45:56:
88:ed:48:35:7e:fa:56:f2:f7:ab:c6:34:97:cb:9a:
72:19:47:3a:b0:5e:fe:72:b5:9a:43:6a:c6:ec:3c:
8e:89:29:29:72:de:a4:12:f9:32:25:a5:77:0e:cb:
7c:0c:e1:74:97:7c:40:48:0f:36:14:77:9c:a7:5b:
19:41:3a:69:8a:87:ae:2e:a2:47:f4:d1:76:8b:c0:
f4:49:fa:40:f6:43:af:68:e3:2b:65:b9:68:95:85:
27:30:65:df:70:4a:de:ad:3a:25:08:83:ca:5c:36:
d4:f1:72:04:9f:47:03:e9:d1:10:3d:75:b5:c1:44:
7d:8c:b9:20:89:66:32:0d:97:e5:d1:d6:64:6a:91:
b4:d6:e9:88:dc:64:e3:af:d8:3c:5b:ee:ce:14:da:
f6:96:a9:89:98:e7:87:12:0f:9a:d7:cc:bc:50:c9:
f2:34:b1:7b:76:35:a8:3d:0a:bd:59:24:eb:9c:be:
1d:db:79:33:7f:02:3e:1d:d0:6c:11:a7:d5:9e:f6:
e7:35:5d:58:d1:6d:6c:1b:6d:8c:53:40:ae:67:37:
83:b7:2a:5b:32:dd:05:02:b1:7e:02:42:41:2a:1d:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:5B:E9:94:6C:68:4F:88:22:87:AA:3E:DA:ED:62:C5:6D:6C:9B
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/yyFb6ZRsaE-IIoeqPtrtYsVtbJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.0.0/22
Signature Algorithm: sha256WithRSAEncryption
07:44:c9:33:a3:31:06:3e:f4:41:8f:91:bf:d7:97:a1:2c:32:
65:44:a7:da:37:3a:80:8c:11:a3:e8:7e:32:0d:c1:25:71:d0:
b6:ab:0e:95:5d:15:91:11:9c:0f:30:e1:8e:9f:51:51:64:18:
73:6e:61:ae:55:09:6e:85:b1:bd:08:dd:af:57:9c:1c:f6:fc:
d8:44:93:7a:43:31:1e:a0:91:1c:c2:bb:d3:a6:12:aa:2c:c9:
d5:b7:e9:7c:a1:47:17:da:71:67:5d:1d:2b:ce:b3:73:c9:77:
52:76:05:65:91:48:f1:ae:0e:e7:d0:b4:15:63:06:26:e8:55:
0f:16:15:fc:62:01:d8:6c:01:ca:42:72:10:04:d6:e4:d0:c6:
01:c4:08:40:32:3b:3e:14:23:5b:5d:9d:01:c2:e1:ce:37:c0:
2d:c5:4c:a5:a7:2b:a9:8f:37:fa:9a:28:02:8f:bc:10:8b:95:
58:2a:37:60:a0:46:49:b9:35:f4:77:01:73:4f:6f:b0:8b:4b:
d2:3d:21:b6:4b:b7:df:7d:e3:2c:22:ed:a0:9f:5e:59:50:0b:
79:fb:71:32:43:09:5b:2e:66:32:7e:91:64:1c:91:55:27:2c:
76:0d:6d:66:c4:5a:8a:b4:27:7c:e4:f6:84:4f:da:06:3d:e5:
1c:3e:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net