Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/uF7IS02St7dCBq9-ywTK7Te2QQs.roa
File: uF7IS02St7dCBq9-ywTK7Te2QQs.roa (raw, json)
Hash identifier: zFlJOlzT1ngGN8QjfHjQ0COfCkmixHJomPNiuoKw6yM=
Subject key identifier: B8:5E:C8:4B:4D:92:B7:B7:42:06:AF:7E:CB:04:CA:ED:37:B6:41:0B
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 018CC8013E8B966975F1DBEF8907AAFA39F0
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/uF7IS02St7dCBq9-ywTK7Te2QQs.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51433
IP address blocks: 185.162.217.0/24 maxlen: 27
185.162.218.0/24 maxlen: 27
185.162.219.0/24 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3e:8b:96:69:75:f1:db:ef:89:07:aa:fa:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b85ec84b4d92b7b74206af7ecb04caed37b6410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:5c:98:17:06:5e:2e:d0:04:2a:0d:02:38:
d6:28:22:c8:7e:cb:8d:e3:80:53:f9:3f:a8:f2:b4:
71:8b:7f:3a:f4:bc:ba:51:52:86:77:61:ae:1c:4d:
a1:33:99:74:e3:e3:97:3c:d4:77:32:99:d7:b1:82:
fb:61:06:4b:34:e2:97:42:58:35:32:c6:84:ba:97:
9f:e8:d5:ff:02:6f:03:7f:83:58:3b:10:8c:ae:2b:
c5:99:51:48:61:67:47:3d:f0:72:1c:3c:37:f6:3c:
a9:6c:83:0a:4a:bd:f2:04:38:5f:a7:31:ba:0b:eb:
33:8c:5b:aa:00:c1:ad:be:54:69:6a:bb:69:dc:19:
68:0e:a8:79:e3:c2:f4:9d:cc:8a:92:57:cf:9b:5c:
fd:d4:7a:2d:e4:1e:7a:5a:9e:ea:87:b7:67:83:05:
16:2d:39:02:bc:1e:32:25:38:95:f7:cd:c9:0d:fa:
ed:92:bc:92:ce:66:7d:cc:62:62:ec:30:c3:50:bc:
f1:04:39:36:0a:29:f9:23:b3:57:52:c1:7a:20:b8:
a8:48:fc:66:db:0c:32:e3:00:f3:54:6e:8c:46:e0:
ac:a4:39:b6:67:b2:5f:cd:e0:19:a0:d5:0e:68:2b:
57:51:f4:28:af:eb:c0:68:bb:85:45:5e:cb:b9:67:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:C8:4B:4D:92:B7:B7:42:06:AF:7E:CB:04:CA:ED:37:B6:41:0B
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/uF7IS02St7dCBq9-ywTK7Te2QQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.217.0-185.162.219.255
Signature Algorithm: sha256WithRSAEncryption
b9:26:75:e6:51:a3:67:bd:be:d8:12:41:83:8b:ee:ad:25:db:
40:ab:75:a3:f9:43:7c:d9:31:1f:2b:43:46:c9:f1:f5:4e:b4:
7c:95:35:43:40:38:1b:33:3d:92:01:a3:8b:fa:5e:6e:81:60:
0e:12:46:e8:6b:2f:80:fe:2e:49:6d:aa:bb:42:64:29:d4:89:
19:34:a6:88:3f:71:6c:67:97:ca:2b:93:a4:b3:b4:85:f7:0e:
0e:8b:f7:82:97:85:81:04:2e:5f:9f:9c:07:11:33:04:60:97:
97:17:cc:b7:b4:1a:e8:8d:7e:fe:c0:3e:98:78:5e:c5:7c:b9:
2a:d4:80:e0:bb:e1:cc:05:d6:8b:3e:fa:34:ce:90:9a:e9:f2:
51:89:e2:4c:c3:fe:ee:6c:5d:b0:2f:fa:c6:6e:6e:fc:de:0c:
61:cc:d7:83:0b:3b:4c:e7:97:08:7c:d5:04:29:e2:32:07:5b:
35:41:68:67:39:1a:0f:52:41:b1:d9:4f:61:7d:fa:d8:17:ca:
3b:57:74:6e:fb:6e:fa:40:0b:87:02:ef:3f:25:8e:d9:af:64:
86:a7:6d:9e:1e:f2:53:d5:71:b7:cc:2e:ef:9d:c8:d5:f7:69:
cf:46:50:95:86:2f:5c:35:3d:47:77:93:78:50:ba:29:43:2b:
75:15:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:16:52 2024 by rpki-client on console.sobornost.net