Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/kSa452CcUBJH4n8ljJyZGRlHRMQ.roa
File: kSa452CcUBJH4n8ljJyZGRlHRMQ.roa (raw, json)
Hash identifier: Fci85UeUTsjut7cPtdgUobaeTb0dlZbFuOrEiT/Cfkc=
Subject key identifier: 91:26:B8:E7:60:9C:50:12:47:E2:7F:25:8C:9C:99:19:19:47:44:C4
Certificate issuer: /CN=dc432b427a84b541164a2fcb6c34b54fba79ec9a
Certificate serial: 0BB9C890
Authority key identifier: DC:43:2B:42:7A:84:B5:41:16:4A:2F:CB:6C:34:B5:4F:BA:79:EC:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EMrQnqEtUEWSi_LbDS1T7p57Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/kSa452CcUBJH4n8ljJyZGRlHRMQ.roa
Signing time: Tue 17 May 2022 11:36:29 +0000
ROA not before: Tue 17 May 2022 11:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202914
IP address blocks: 185.172.220.0/22 maxlen: 22
185.172.221.0/24 maxlen: 24
185.138.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196724880 (0xbb9c890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc432b427a84b541164a2fcb6c34b54fba79ec9a
Validity
Not Before: May 17 11:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9126b8e7609c501247e27f258c9c9919194744c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:17:5f:ab:bf:b6:f2:10:8a:39:56:53:d4:
61:f5:9d:bc:0c:b9:78:a2:78:db:99:67:ba:6a:40:
69:9c:5b:08:58:dd:2b:b6:49:9e:ee:81:06:46:78:
2a:01:7c:dc:a3:cc:7a:5b:77:9d:89:ec:4c:a6:bc:
92:38:5a:01:28:b2:e0:e2:49:7b:7f:87:be:25:f4:
5c:a4:12:21:04:fe:39:e1:a9:20:17:1a:b8:2d:2f:
23:c9:e0:44:be:ff:0f:83:33:8f:b4:1a:4b:2e:c4:
96:64:5b:01:b2:1d:27:8e:1b:66:df:e4:28:fe:1e:
c4:d4:4a:01:cc:ed:46:f5:2a:46:e1:22:f8:24:3f:
28:e1:0a:2f:31:8a:55:36:9a:40:bd:b4:1a:dd:b9:
49:26:d4:f0:be:d8:84:21:e0:b6:ab:5d:6e:a1:5d:
d9:0a:0d:6f:13:4a:17:8b:c7:dd:2d:4e:8b:5d:f1:
56:2a:aa:7b:39:d0:44:30:c8:ce:08:bc:3c:be:41:
4d:f9:6b:93:aa:89:71:89:97:03:cb:2e:b3:59:43:
b5:e6:4a:bf:d0:cc:f8:8f:93:93:ea:44:bf:3d:78:
5f:10:a1:d3:cb:67:db:69:c0:6e:04:9d:4f:84:54:
d1:53:4b:d7:cd:5c:ec:4a:34:42:0e:e8:45:8d:32:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:B8:E7:60:9C:50:12:47:E2:7F:25:8C:9C:99:19:19:47:44:C4
X509v3 Authority Key Identifier:
keyid:DC:43:2B:42:7A:84:B5:41:16:4A:2F:CB:6C:34:B5:4F:BA:79:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EMrQnqEtUEWSi_LbDS1T7p57Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/kSa452CcUBJH4n8ljJyZGRlHRMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b43b8-5cfa-4407-8b63-baa0a30e371f/1/3EMrQnqEtUEWSi_LbDS1T7p57Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.248.0/22
185.172.220.0/22
Signature Algorithm: sha256WithRSAEncryption
35:0b:5a:21:1f:19:8b:92:f7:fe:0b:d7:d2:e5:b0:30:f8:8d:
a7:8e:f3:63:e6:dc:c2:61:3e:a7:60:92:55:42:9d:8c:f2:b8:
48:1f:9c:50:90:b8:1b:26:70:0a:cd:ce:f5:00:00:ab:59:af:
dd:e2:c7:82:80:12:81:7c:ce:f3:c4:c1:da:b3:d9:84:3f:b6:
da:56:f0:e5:c7:23:ad:41:59:64:99:64:f8:50:d3:5b:15:24:
f9:15:c1:3e:ee:86:04:be:2f:ab:60:fa:7e:e3:3e:89:5c:dc:
b4:9a:00:e1:54:9e:1c:f0:43:6c:cb:7a:cf:fa:f1:04:fe:8b:
3a:8d:48:e0:91:fb:57:86:46:c3:10:be:ae:1d:e6:82:f8:e7:
78:4b:1a:cb:3a:83:3c:59:d4:3d:4f:67:95:87:fa:cf:a6:5c:
50:a8:06:94:be:bf:3b:04:ce:64:0c:ee:67:c8:8a:75:6f:d8:
2d:8b:1c:65:ae:47:67:82:69:40:a9:bc:d1:ce:e6:72:81:69:
08:67:bb:7f:ae:5d:3c:4f:d9:da:3e:e3:77:38:c4:0b:f5:2d:
1f:32:06:1c:8a:37:60:95:51:62:6a:4b:f3:d4:e1:85:7f:83:
e7:d2:27:e0:ca:c1:d7:61:c6:79:34:ba:03:65:3c:45:ac:9f:
a0:f5:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net