Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_sbwLG6oljs575OABAoizvq1Hpw.roa
File: _sbwLG6oljs575OABAoizvq1Hpw.roa (raw, json)
Hash identifier: IO2BnPouwm1wzITOWUnomrTCnDiNwsNJsRHOHYabSz4=
Subject key identifier: FE:C6:F0:2C:6E:A8:96:3B:39:EF:93:80:04:0A:22:CE:FA:B5:1E:9C
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 018F9964662090287C36D65C3183D6E775D5
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_sbwLG6oljs575OABAoizvq1Hpw.roa
Signing time: Tue 21 May 2024 04:24:04 +0000
ROA not before: Tue 21 May 2024 04:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 37.0.10.0/23 maxlen: 24
85.202.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:64:66:20:90:28:7c:36:d6:5c:31:83:d6:e7:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: May 21 04:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec6f02c6ea8963b39ef9380040a22cefab51e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:89:30:33:d7:dd:83:fd:65:40:ff:6b:c7:
e9:bc:27:22:8b:fb:61:21:4e:2d:f8:31:6e:c8:01:
f1:c7:16:63:83:0a:73:3c:50:fb:91:52:89:0a:a5:
34:b9:66:d5:ce:ad:3d:30:b3:54:6e:df:f0:11:ce:
93:2b:bd:4a:ed:31:32:dc:d3:0f:82:85:7d:72:35:
99:a1:38:c6:59:bc:22:d0:34:f8:4b:cb:79:bb:ec:
11:6f:07:5b:70:24:ab:b0:ff:09:46:31:0e:cc:a9:
be:87:3b:e4:84:6d:5c:ab:f5:1e:d2:1b:a3:8f:4f:
c9:b7:f9:eb:72:d7:c1:b0:76:1d:8d:5c:55:90:69:
0a:a2:6b:6c:e0:d9:10:98:f0:05:b2:c9:2a:f2:96:
5c:a7:0f:9b:45:40:dd:72:e2:87:de:59:b5:e7:39:
cc:15:1b:07:17:df:a8:c2:16:6e:67:1f:b5:04:9a:
ff:04:37:a1:a6:5b:66:1e:64:6b:bc:19:9b:20:f6:
03:9c:ca:0d:27:f2:d7:53:b3:05:ab:22:8f:3e:19:
0b:76:62:17:4f:06:02:ab:54:93:02:b4:46:68:90:
bd:97:d3:63:01:18:de:3e:99:ed:97:27:f1:d6:95:
96:73:94:74:92:3e:eb:f2:4c:84:7f:c1:69:bc:07:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:F0:2C:6E:A8:96:3B:39:EF:93:80:04:0A:22:CE:FA:B5:1E:9C
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/_sbwLG6oljs575OABAoizvq1Hpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.10.0/23
85.202.168.0/22
Signature Algorithm: sha256WithRSAEncryption
89:1f:d8:3c:5b:11:cc:74:3d:74:b4:ac:41:44:88:49:fb:a1:
19:1e:0c:a6:2e:28:13:bd:3f:32:18:49:2d:f5:d2:81:17:12:
48:29:c2:b8:a4:0a:89:f5:e3:9f:1a:70:4f:61:56:9a:92:5a:
61:17:86:b3:1f:29:1a:dd:ac:8c:c9:41:79:23:3b:5c:47:a5:
1b:ab:b3:f6:77:67:12:97:1f:60:3b:4f:3f:b1:49:b3:8b:f7:
e7:24:b1:7d:c7:c6:4f:42:af:4b:ae:b8:8b:26:48:fa:be:45:
38:37:55:12:89:47:dd:f0:81:6c:cd:30:9b:8e:d2:0d:ca:e5:
f5:ec:51:62:31:12:43:1d:88:3c:f2:0f:85:8f:27:20:2a:2d:
63:35:90:05:45:74:61:c2:17:17:c4:a3:88:b5:6f:77:13:ab:
9c:4e:00:be:3a:cd:7e:3a:14:14:55:eb:f8:f4:5a:b5:9c:55:
b4:6b:a2:fd:1c:ac:96:eb:8e:41:b8:72:57:40:86:5d:49:1b:
44:09:0b:bf:df:01:7e:2d:ae:7b:19:a5:d1:f2:ba:2d:98:5e:
df:80:3d:18:02:51:0b:df:62:f5:9e:d4:62:ce:b7:c1:25:f5:
a8:a6:ff:78:93:32:24:a3:05:8a:17:72:23:d3:b7:96:a0:9d:
fe:df:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:54:04 2024 by rpki-client on console.sobornost.net