Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/eDy-J9PNFCmse8NSgg-edW23nzo.roa
File: eDy-J9PNFCmse8NSgg-edW23nzo.roa (raw, json)
Hash identifier: HzcMDz2jXAGumSBErWQhHPLBHCreKfE8qulwIvNvVJI=
Subject key identifier: 78:3C:BE:27:D3:CD:14:29:AC:7B:C3:52:82:0F:9E:75:6D:B7:9F:3A
Certificate issuer: /CN=7687ff72d85b73c3f5001e50d41ef334f1bdab38
Certificate serial: 01884E90E80FE5F9BB365ADC131F4FAF9A1A
Authority key identifier: 76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dof_cthbc8P1AB5Q1B7zNPG9qzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/eDy-J9PNFCmse8NSgg-edW23nzo.roa
Signing time: Wed 24 May 2023 16:21:39 +0000
ROA not before: Wed 24 May 2023 16:21:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 185.225.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:90:e8:0f:e5:f9:bb:36:5a:dc:13:1f:4f:af:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7687ff72d85b73c3f5001e50d41ef334f1bdab38
Validity
Not Before: May 24 16:21:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783cbe27d3cd1429ac7bc352820f9e756db79f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:e8:7a:39:2e:82:ee:00:87:9a:44:43:a3:
9c:90:12:a0:ad:b5:e9:8c:f4:9e:94:02:7e:bd:d6:
81:5e:87:ce:73:16:96:8d:db:58:28:5f:c4:58:e0:
58:00:fb:ee:8d:0b:7b:8e:dd:07:f5:5d:d4:34:45:
a4:01:79:e7:ae:59:5b:f4:e4:10:d6:48:ed:ab:ae:
c7:ea:c0:da:9c:92:b2:c4:02:a9:fb:d2:c3:0f:80:
01:ad:8c:c5:7b:46:46:e5:5f:9f:10:6d:da:05:6e:
23:4e:d0:49:0d:96:ad:58:bf:17:a1:08:65:21:a6:
b7:7d:ef:8b:e8:c5:e4:0d:f5:33:6f:54:2f:40:a3:
78:54:d6:90:a9:54:42:96:3d:25:7e:02:6f:ab:e5:
0c:31:5a:da:54:9a:6b:0a:c5:2f:65:8f:0c:d2:bc:
e4:a1:5d:f3:fd:35:e1:3e:bc:ce:0d:5b:46:81:a9:
c8:19:c1:3c:f1:50:e2:19:1c:bf:37:93:b2:70:70:
ac:3e:2f:ac:f1:51:9b:d5:f6:f4:2c:5c:08:f0:e5:
62:8e:ad:8d:5c:60:30:06:f0:8d:58:21:a4:79:a3:
e7:ef:85:51:d4:0d:07:b6:b1:90:8a:07:04:9d:14:
f7:6a:b4:ce:6d:b7:a6:0e:a8:9c:5c:06:e9:a7:9c:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3C:BE:27:D3:CD:14:29:AC:7B:C3:52:82:0F:9E:75:6D:B7:9F:3A
X509v3 Authority Key Identifier:
keyid:76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dof_cthbc8P1AB5Q1B7zNPG9qzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/eDy-J9PNFCmse8NSgg-edW23nzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.8.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1e:5e:c9:75:ac:45:b3:47:19:1e:b3:38:07:d0:b3:94:6c:
25:af:dc:cf:cb:c3:66:91:df:26:0d:a7:60:f8:e7:49:35:2e:
91:8a:3b:d3:eb:eb:48:21:62:68:c6:dc:50:1b:42:a3:90:dc:
06:0c:c0:85:80:f3:ab:77:5a:40:47:8d:49:2a:f2:a4:84:6e:
73:76:cc:a5:14:c8:35:dc:da:e6:b4:13:0a:d4:de:b8:cc:e3:
4f:dd:4a:f2:a0:93:c8:37:90:31:6c:bf:27:32:f9:16:36:e4:
77:0f:6a:66:82:52:74:38:b3:48:49:b9:02:b1:8f:c9:1b:61:
77:af:b6:56:f1:9b:4c:e3:05:71:51:3f:54:2f:21:0e:b8:58:
f4:b8:66:fe:a2:cc:db:f4:df:9e:b6:aa:01:49:c3:aa:79:3a:
a8:ca:e9:22:60:c9:ee:8b:c8:80:f5:60:87:dd:4c:0a:b1:71:
b2:0f:5e:fa:e8:0d:0c:0e:b2:0a:cd:f0:19:3c:56:80:3e:8b:
d8:e2:20:5f:7a:aa:de:bf:2f:16:eb:31:5b:5f:f7:76:96:e0:
e2:7d:47:55:30:be:16:04:3a:31:e1:d7:e2:cb:d6:30:d5:f4:
b6:cd:a0:bd:cb:bf:21:ac:bd:9d:57:c0:b9:09:14:bc:da:b6:
26:a8:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net