Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/3WLrZWP6iIC5gIWzYNcOliQdOiA.roa
File: 3WLrZWP6iIC5gIWzYNcOliQdOiA.roa (raw, json)
Hash identifier: aA7hZ/LPg8YtPBy/QFuE6CNOzF8ND612FcMJqtSPqTs=
Subject key identifier: DD:62:EB:65:63:FA:88:80:B9:80:85:B3:60:D7:0E:96:24:1D:3A:20
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0190983E3EA2321DE9F25B9F61B39A66E8FA
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/3WLrZWP6iIC5gIWzYNcOliQdOiA.roa
Signing time: Tue 09 Jul 2024 16:05:34 +0000
ROA not before: Tue 09 Jul 2024 16:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199239
IP address blocks: 185.100.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:3e:3e:a2:32:1d:e9:f2:5b:9f:61:b3:9a:66:e8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 9 16:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd62eb6563fa8880b98085b360d70e96241d3a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:c9:fb:1e:6b:9a:9e:e7:fc:d5:1a:bf:30:
d6:2f:68:ae:67:e6:dd:cc:73:5c:e2:2b:70:6e:4f:
49:66:47:17:5f:b1:8e:1c:41:46:db:f3:09:80:1e:
6d:c3:a8:1b:90:00:8e:cb:76:d6:8b:d9:c1:27:f5:
49:dc:8c:e7:d4:c8:80:b7:27:d5:f5:df:31:6a:0b:
cb:09:dc:73:14:dc:a6:0a:0d:89:91:95:dd:6f:cc:
8c:a0:ea:ea:4b:1e:29:24:d5:2c:d4:ac:2f:63:d6:
f5:50:05:81:9d:73:24:b4:22:1d:d3:6c:dd:90:bd:
7b:97:9c:48:69:0b:c7:40:fc:43:b7:9f:87:bb:26:
1c:1d:93:8d:df:6d:df:b8:78:80:08:96:5d:f3:cd:
a7:86:fc:8f:0c:62:0c:74:03:f5:f5:f8:21:75:c7:
ad:fd:7c:5e:01:b8:82:eb:32:f0:8b:ae:7e:e3:6f:
09:15:be:89:94:19:73:90:29:7e:53:cd:a4:fd:47:
66:08:5f:ef:f9:e2:1b:80:a2:27:c2:76:c3:cf:4b:
42:1a:8e:35:e0:40:de:65:72:9f:2a:86:78:54:db:
67:62:b4:e4:e2:16:f6:60:36:f1:73:39:e7:d0:ae:
bc:96:db:b9:59:44:87:5e:de:35:a1:fc:3d:92:19:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:EB:65:63:FA:88:80:B9:80:85:B3:60:D7:0E:96:24:1D:3A:20
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/3WLrZWP6iIC5gIWzYNcOliQdOiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3f:92:77:3d:16:3a:94:3f:79:55:27:71:f4:1f:47:08:dc:
ec:bc:d1:90:1a:43:7a:fa:06:33:54:63:c3:5c:94:92:47:14:
ba:61:9a:5d:4a:33:bf:4e:76:ba:bf:67:b4:60:de:cf:eb:d4:
a2:81:fc:03:96:b9:49:3a:14:c7:7f:11:0d:5d:e6:16:86:81:
6f:7d:6d:45:f5:54:2e:5f:22:6d:43:48:41:96:80:9a:2b:6a:
0a:d2:ce:8b:ed:21:56:9f:fd:b4:00:8c:6e:46:dd:b5:0a:81:
98:15:54:20:fb:7c:03:39:95:79:cf:5e:ba:79:fa:dd:33:69:
64:60:7d:42:6c:91:e9:b3:ee:0b:41:76:53:79:7b:86:ca:63:
1b:88:07:8a:6b:c2:0d:6d:31:42:14:fe:19:dc:76:0d:9a:35:
2b:90:e6:18:2a:4e:70:7a:91:7c:47:e0:cf:16:67:27:af:fb:
ae:91:9f:3a:a4:a5:6b:59:92:26:36:ec:ce:68:ab:0d:68:d2:
5e:24:ba:81:1d:17:51:06:b0:f6:43:2d:fd:eb:b6:7b:dc:22:
d6:47:8b:be:bf:97:44:2c:04:cd:67:55:00:42:f7:f3:6e:ce:
2b:19:31:d4:cd:0c:9d:34:4e:d3:0e:2e:36:b2:8f:12:ab:61:
c4:61:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:04:30 2024 by rpki-client on console.sobornost.net