Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/1-bdHe4JZInYJnXrCUSL3TdqsDOw.roa
File: 1-bdHe4JZInYJnXrCUSL3TdqsDOw.roa (raw, json)
Hash identifier: eC196P7xY3Tym7NkRQcfdAkTuUZTzdHd1AJ7U9ZNFCY=
Subject key identifier: F9:B7:47:7B:82:59:22:76:09:9D:7A:C2:51:22:F7:4D:DA:AC:0C:EC
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 018CC7940C0B51609F47458ED2EBC61B40C0
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/1-bdHe4JZInYJnXrCUSL3TdqsDOw.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61404
IP address blocks: 185.128.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0c:0b:51:60:9f:47:45:8e:d2:eb:c6:1b:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9b7477b82592276099d7ac25122f74ddaac0cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:e8:dc:85:d1:b1:83:c5:bd:03:90:5a:1f:
1e:c5:2f:7b:97:ae:39:1d:7f:69:ff:9f:79:a0:57:
48:71:37:a8:de:ab:9b:34:13:a1:3a:21:26:9b:aa:
7b:f7:78:d9:e4:bd:0c:29:9b:ed:37:46:39:74:60:
60:83:ba:bc:d5:e2:30:68:26:2f:05:b6:ea:55:01:
a6:07:a9:20:09:b3:55:de:fd:75:ea:c2:8a:79:07:
30:55:93:e2:95:45:83:e0:4d:a3:d8:18:1c:07:eb:
a4:47:a3:82:6c:a3:ce:48:11:64:6f:81:f0:49:fa:
99:9a:51:4a:66:ed:1e:05:87:ff:56:7c:27:59:62:
77:97:a9:d8:46:a7:14:19:0d:ab:c0:b8:06:b9:fb:
9c:d2:4c:ac:2e:5c:d3:f0:73:cd:d6:ca:cb:65:d0:
71:62:31:60:f1:2a:c4:a9:4c:40:66:8c:e9:18:a5:
04:7e:89:2b:55:3b:04:e3:ec:d3:38:ee:e9:2a:75:
c0:26:c4:d0:fd:ab:5f:d5:7d:9a:7f:a0:ff:87:88:
81:01:7e:ba:81:65:40:5e:c3:a8:6f:d9:da:e2:c4:
ce:23:ab:ac:c6:c5:f4:cd:92:41:75:18:78:bf:dc:
72:79:60:7e:1d:89:6d:61:36:be:df:84:13:c7:51:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:47:7B:82:59:22:76:09:9D:7A:C2:51:22:F7:4D:DA:AC:0C:EC
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/1-bdHe4JZInYJnXrCUSL3TdqsDOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d9:a1:df:a4:24:d4:38:6a:a9:d4:31:d0:02:9b:6f:5c:e9:
3b:2b:58:af:5b:fc:32:2d:88:4c:87:1b:11:99:f9:19:cf:ab:
33:5b:e9:7b:d7:ee:96:34:6d:3e:41:eb:05:16:d0:b6:e5:e8:
0b:54:e2:0d:7b:6d:b0:42:d1:9b:b2:6f:25:6f:16:38:f4:c0:
99:73:5d:72:5e:c5:c3:96:3d:3d:e4:72:8a:c0:e3:bb:28:6c:
ea:04:f3:f5:0d:1e:15:03:f9:58:41:c0:4c:8b:43:4e:9b:f7:
be:fa:14:53:bf:31:f5:9f:d4:d6:6a:a7:86:33:58:c7:b4:bc:
0d:b9:6f:28:e2:62:c3:4f:bd:b8:bb:6e:17:e5:d5:5e:fe:57:
a4:14:5f:67:cf:db:b6:3c:25:c5:af:1f:82:a8:13:58:86:3d:
37:dd:44:07:c2:d5:8d:60:9d:c4:31:95:bd:6b:6d:be:5e:b3:
b6:01:cd:d7:1f:7b:0a:8b:93:7e:5c:d6:f3:b6:03:a6:75:fc:
e3:5f:de:02:12:1c:f2:cb:ce:b1:73:36:30:c8:8a:45:23:5b:
2d:f2:a9:ed:6a:66:a3:27:8d:de:54:0b:1c:cd:2e:5d:43:fa:
df:a4:84:f4:16:f1:39:47:e1:17:99:ed:eb:61:d0:a6:b7:91:
74:16:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net