Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/Hm_uOgEjUaf6MEOksmA-bctlQ64.roa
File: Hm_uOgEjUaf6MEOksmA-bctlQ64.roa (raw, json)
Hash identifier: 2FAXPYRM6gUJBa6wWY2y2Hc3tfOPe8lg+XjBJr1ag9E=
Subject key identifier: 1E:6F:EE:3A:01:23:51:A7:FA:30:43:A4:B2:60:3E:6D:CB:65:43:AE
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 018CC26D192167ACFB0B980A75E0C7C3D738
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/Hm_uOgEjUaf6MEOksmA-bctlQ64.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206348
IP address blocks: 185.159.248.0/22 maxlen: 24
185.159.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:19:21:67:ac:fb:0b:98:0a:75:e0:c7:c3:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e6fee3a012351a7fa3043a4b2603e6dcb6543ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:41:1f:51:3a:af:85:13:4b:c9:0f:77:10:
1a:6b:2c:1d:3e:17:de:53:b7:50:a5:c9:c4:e7:b0:
52:6d:e5:29:9a:be:8c:6c:79:8c:47:ef:5d:48:73:
8d:81:33:18:8f:fe:72:a0:e7:1d:63:b8:a1:e6:82:
a4:5b:f6:f6:ee:85:6a:92:c8:24:a3:cc:69:fa:7d:
7e:23:60:2c:c4:b1:fa:3e:26:f3:05:8d:2e:27:8c:
57:09:cf:55:82:82:9a:48:65:5d:aa:ec:e1:6f:8a:
54:23:56:36:8d:51:56:59:bc:3c:b6:c7:e6:6b:f5:
29:62:dc:1c:c2:17:45:d7:17:88:0e:10:53:f6:c5:
30:1b:0f:59:9f:c5:14:65:d3:63:2e:82:b1:6d:22:
a9:cc:2f:77:73:6c:3e:1c:2d:5b:bb:5f:6b:73:af:
71:7c:10:cf:5b:7e:67:e7:25:8d:78:79:65:89:79:
6c:8b:3b:e8:64:96:8c:a6:b5:4a:50:2a:c6:f3:8e:
aa:5b:ff:33:1c:01:7d:4d:f5:eb:92:83:45:2e:32:
cb:6e:d5:ad:c2:9c:0b:3b:8b:99:31:ec:80:d6:cb:
fb:c8:87:cb:45:a4:4a:49:c5:b8:84:38:e1:4e:d9:
29:64:06:b1:66:79:d2:c5:db:54:d8:8f:f5:ce:f2:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:EE:3A:01:23:51:A7:FA:30:43:A4:B2:60:3E:6D:CB:65:43:AE
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/Hm_uOgEjUaf6MEOksmA-bctlQ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8f:80:4b:b4:6e:98:2d:af:1e:d3:97:61:ef:76:d0:e4:d4:
e3:87:dd:b4:da:47:39:b3:f0:df:95:99:ff:14:1d:5e:4a:1d:
1f:21:40:8d:ed:11:15:14:02:c9:6c:70:c3:04:13:64:4f:02:
d1:07:a3:cf:31:08:37:b3:99:85:ab:c8:ad:81:09:d0:2c:64:
a9:14:48:9e:59:d4:a8:36:b8:7c:9d:f6:73:31:e9:08:26:cf:
69:8f:71:2c:95:1c:bf:f3:82:c6:52:8c:d7:2f:b9:80:c5:98:
fb:91:99:ae:c5:d0:ef:d3:3b:95:ca:a6:b7:79:84:d3:98:c2:
31:16:a7:64:b4:3d:86:db:72:c8:5f:66:6e:c5:e1:3b:03:89:
4e:f7:6f:9e:b5:09:d9:5c:f2:df:e8:91:84:08:b9:0a:97:cb:
0e:d1:32:5b:d8:0c:c8:51:51:cd:73:fc:a1:c2:0f:0e:9a:fa:
f2:9e:35:01:90:80:0c:69:4e:29:75:2c:85:a8:3a:9d:65:40:
85:08:92:a8:a4:97:2b:a8:56:4d:ce:af:cc:ef:ef:e7:6f:d5:
17:d5:41:39:cb:40:dd:3c:34:07:f2:2c:b4:d3:49:ec:9c:15:
63:59:7a:8b:50:fb:6d:ea:2b:3d:e6:eb:c9:ac:83:25:99:05:
6f:1f:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net