Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/1WTa6GZDbG9wNPOpc3gc46KRBWA.roa
File: 1WTa6GZDbG9wNPOpc3gc46KRBWA.roa (raw, json)
Hash identifier: LWfX+cjBCasq0DdnYYIokAp/94/n4xTPG6wIoCv96C4=
Subject key identifier: D5:64:DA:E8:66:43:6C:6F:70:34:F3:A9:73:78:1C:E3:A2:91:05:60
Certificate issuer: /CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Certificate serial: 01889E9AE7A138EFE11A21C9F00B0846A8D3
Authority key identifier: 3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/1WTa6GZDbG9wNPOpc3gc46KRBWA.roa
Signing time: Fri 09 Jun 2023 05:22:11 +0000
ROA not before: Fri 09 Jun 2023 05:22:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.236.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:9a:e7:a1:38:ef:e1:1a:21:c9:f0:0b:08:46:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Validity
Not Before: Jun 9 05:22:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d564dae866436c6f7034f3a973781ce3a2910560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:13:6c:18:51:1b:31:54:5f:e6:39:ee:4b:
94:4d:b5:a8:2f:d3:c0:25:70:ae:f2:d5:af:ce:58:
c2:5f:d3:55:39:68:e7:93:3a:ea:be:97:c8:2b:ed:
17:da:f3:46:36:ff:0a:24:ab:92:44:ca:c6:be:04:
6f:03:0e:91:fa:b6:e2:d3:a6:cd:ae:f1:e2:0d:e2:
4f:e6:45:e3:3f:52:e9:4a:99:74:0a:47:6a:95:dc:
46:dd:2d:b3:70:01:cc:75:6c:79:e9:41:80:8f:b9:
da:9a:e2:0b:be:8e:8b:c0:03:34:90:ff:21:46:5f:
fb:71:16:3e:d1:bf:b1:1d:28:31:03:84:8c:53:ca:
72:02:8d:97:a4:35:93:bf:0d:1c:03:57:5d:92:7c:
78:34:67:2f:18:35:ba:64:1e:4d:28:73:eb:95:c6:
37:b0:b9:67:8a:31:bc:7d:c9:25:a6:0e:0b:7c:04:
f1:54:98:e4:05:41:e5:f0:68:ed:bc:08:ed:ab:5a:
ad:c8:f8:e3:91:cd:d5:f9:91:b9:aa:f2:1e:b3:b6:
15:94:10:20:74:b4:b2:72:77:49:e9:cc:38:be:bd:
1d:2f:68:f0:43:b3:6e:d1:44:59:ea:39:56:84:ce:
42:b2:0d:08:74:bf:a3:7b:67:e3:34:e0:15:e2:06:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:DA:E8:66:43:6C:6F:70:34:F3:A9:73:78:1C:E3:A2:91:05:60
X509v3 Authority Key Identifier:
keyid:3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/1WTa6GZDbG9wNPOpc3gc46KRBWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.148.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e9:17:74:78:af:79:8c:83:c2:f8:e4:39:be:ef:a3:48:35:
38:04:64:6f:c8:da:b3:98:ef:1f:a6:16:1c:db:4f:3a:3e:cf:
e7:a4:46:63:3a:1e:cd:48:1b:32:c8:21:f1:bf:ac:b8:fd:29:
34:64:12:79:c9:69:40:7b:98:8b:f2:c6:ad:f2:6a:02:19:aa:
ec:26:36:ed:13:83:c5:70:b9:02:b1:1f:b5:68:a3:d0:a7:60:
8c:39:ed:a7:c3:51:b3:de:b4:44:1a:8a:dd:a3:38:91:5e:d9:
c0:5d:bc:d2:0b:d3:2e:60:04:32:b1:00:9e:60:8f:8c:1f:7c:
34:6f:65:37:a1:52:87:7d:59:7e:3d:9c:fb:f6:48:dc:ac:d0:
41:30:87:ac:73:c7:8b:2a:c2:36:a0:2b:4d:bf:ad:04:1d:0b:
c8:c9:76:7c:95:2c:00:dd:88:7a:a4:97:9a:20:45:7c:ba:dc:
9b:b5:25:e0:dd:c5:b4:25:ea:9a:21:17:a0:c7:3a:50:7f:e7:
b6:45:c9:f4:b1:f1:62:5a:99:07:21:f1:6d:88:71:e4:3a:67:
25:1e:10:91:ae:f8:0d:0e:80:ca:0f:27:55:85:e5:9b:24:a1:
63:41:f4:ae:95:c7:de:be:04:0a:ce:6d:81:7d:3a:02:90:ef:
34:99:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net