Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/x-sO_KsPlblIJRVIsOl_FQB7IBk.roa
File: x-sO_KsPlblIJRVIsOl_FQB7IBk.roa (raw, json)
Hash identifier: ABnsH+nSrS73yR6y+dftJ8ATaKnafk9JGoxpSuj3DTc=
Subject key identifier: C7:EB:0E:FC:AB:0F:95:B9:48:25:15:48:B0:E9:7F:15:00:7B:20:19
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 018D4B8174ED1B703E3C7587B16AEC367E92
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/x-sO_KsPlblIJRVIsOl_FQB7IBk.roa
Signing time: Sat 27 Jan 2024 15:19:51 +0000
ROA not before: Sat 27 Jan 2024 15:19:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215640
IP address blocks: 185.204.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:81:74:ed:1b:70:3e:3c:75:87:b1:6a:ec:36:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Jan 27 15:19:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7eb0efcab0f95b948251548b0e97f15007b2019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:21:0b:7f:5c:c6:22:d9:46:90:50:7e:0e:
1f:fa:50:c5:36:4a:52:9a:19:36:46:2e:09:59:6b:
41:3a:bf:9f:a9:76:65:c7:99:7f:86:2c:01:07:47:
91:5e:c5:76:a4:dc:93:12:46:d3:2f:53:a3:db:22:
ec:37:f4:2f:c7:43:91:bc:31:82:54:b7:0e:26:02:
98:8a:14:61:36:55:80:ec:75:d9:b6:ca:51:b1:d1:
52:79:01:33:3f:27:fc:ab:88:a4:51:f5:14:fc:be:
0f:f8:dd:61:15:b1:d9:80:e4:b3:53:35:e8:46:f4:
b2:7b:1e:92:50:43:ea:10:f2:7c:6b:4f:41:76:2d:
13:87:0c:d9:32:ce:7c:1f:25:fb:93:d5:68:20:7a:
e5:02:58:a4:be:c8:eb:9b:a9:33:09:b4:d6:71:c1:
07:30:9c:16:0b:40:e5:83:05:09:25:8f:f0:ef:0e:
07:3c:6c:c5:7f:6b:8c:c0:de:6b:2f:81:0c:6f:bf:
63:16:d0:d5:48:21:fe:8b:3e:fe:13:a2:6c:73:fc:
07:6a:17:db:3a:c5:c8:f9:a8:a0:2d:67:28:24:77:
1c:5c:68:33:76:a3:7a:6d:a8:93:d3:66:8c:74:ff:
9a:69:dd:42:c6:9d:ef:4e:dc:ef:0a:b7:c8:b1:dd:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EB:0E:FC:AB:0F:95:B9:48:25:15:48:B0:E9:7F:15:00:7B:20:19
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/x-sO_KsPlblIJRVIsOl_FQB7IBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.196.0/24
Signature Algorithm: sha256WithRSAEncryption
17:52:9f:9c:6a:bc:1f:fa:98:4b:ad:bc:03:cb:ad:52:f2:df:
b5:a5:9f:01:f8:2a:0d:09:49:ee:cf:d9:02:76:45:b7:ae:1e:
fb:75:69:76:a3:e9:a3:8c:60:37:18:94:44:e1:de:b9:25:60:
ed:e0:61:ce:69:47:84:01:35:c4:5a:83:92:92:3e:3c:4b:2a:
80:4a:c6:2c:33:ea:8d:95:6c:38:8a:42:62:24:0d:b8:c4:95:
14:0b:01:8e:75:42:e2:bd:71:84:97:a6:33:94:c2:20:09:c9:
8d:96:b4:46:7c:50:63:b5:47:83:4e:0d:2f:bd:30:60:bb:e5:
dd:e0:ab:7e:73:8e:a4:a1:dc:50:59:10:64:5e:32:f6:9d:51:
4d:a6:a5:19:a6:b7:6f:e9:e3:b3:79:0d:76:2a:84:ca:e2:ba:
7b:16:1e:f9:aa:3a:7c:4d:3b:81:2a:ba:54:69:bf:2a:c4:08:
8f:c6:45:f4:e7:98:97:3f:af:51:0d:a0:f5:87:f0:6c:3e:5b:
e6:e9:52:9d:c1:d9:05:db:a9:9f:72:0f:b3:a0:10:53:c7:93:
ae:77:9e:eb:90:61:0d:ef:45:6f:8d:61:63:e9:58:e1:f6:f9:
1d:30:f2:35:7f:71:08:37:29:f2:cc:df:f7:e1:d6:86:cd:15:
e5:93:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net