Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/muF4xDYKBOFkC-qCnoE0Eq6oNjs.roa
File: muF4xDYKBOFkC-qCnoE0Eq6oNjs.roa (raw, json)
Hash identifier: DN1kMYa4k4Orenvp6yGOYV4d1D4ivP+7tA7QFZwzXVQ=
Subject key identifier: 9A:E1:78:C4:36:0A:04:E1:64:0B:EA:82:9E:81:34:12:AE:A8:36:3B
Certificate issuer: /CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Certificate serial: 01882086B2F96D503C93F8006C5D9A0EE682
Authority key identifier: 3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/muF4xDYKBOFkC-qCnoE0Eq6oNjs.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.252.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b2:f9:6d:50:3c:93:f8:00:6c:5d:9a:0e:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae178c4360a04e1640bea829e813412aea8363b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:d7:09:7e:f2:7f:ea:5e:b2:22:ff:b2:48:
ba:77:64:0a:de:1c:51:e9:d5:0c:d9:39:bb:29:35:
6b:77:73:b4:dc:60:21:64:dd:ba:d1:f6:ad:1b:2e:
1d:6d:05:22:a5:ef:f3:76:20:e7:95:e8:bc:e5:a0:
f6:08:1d:81:69:60:23:4c:ea:91:f9:d4:6c:cf:f4:
68:30:d0:a8:c1:e2:a4:20:15:b4:f9:44:41:e6:2b:
bb:b4:35:ff:d6:57:10:ef:45:7d:be:3d:58:a8:bd:
b9:93:6c:8c:8a:b4:5e:92:42:3e:3d:9e:c8:d9:43:
f6:07:20:ab:61:c7:c5:f6:78:ef:f0:6e:55:9c:63:
e7:16:2b:bb:0e:9b:cf:a1:d5:fc:13:be:10:f0:37:
fa:de:70:3d:cb:b8:95:7f:dc:98:8c:d6:5e:67:dd:
24:b9:0a:95:91:6b:7a:f1:09:28:7c:ce:8a:f1:2a:
c2:cf:53:80:2f:4b:d3:c8:07:09:0d:21:8d:66:72:
e1:d4:8c:2a:16:c0:4e:a7:bd:2f:58:68:ac:eb:ba:
dc:cd:12:f8:0a:f5:f4:d0:b8:ed:2e:1d:50:f6:62:
a9:d9:ba:05:2b:52:cd:5a:44:4f:18:77:a7:46:38:
72:36:d3:be:68:e7:a9:b8:02:70:e5:33:d8:8e:ec:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:78:C4:36:0A:04:E1:64:0B:EA:82:9E:81:34:12:AE:A8:36:3B
X509v3 Authority Key Identifier:
keyid:3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/muF4xDYKBOFkC-qCnoE0Eq6oNjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.213.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c2:bd:6d:02:41:f0:15:8e:ed:7e:94:94:2d:d4:24:4a:be:
6f:04:e3:f8:58:b3:5f:95:35:c6:73:6e:4d:10:cd:c6:48:52:
20:05:3e:2b:10:2a:2b:2d:a7:d8:ea:0b:f3:fe:e5:74:29:df:
7b:9b:68:32:c1:bc:cc:8d:ec:d8:ca:89:ee:14:63:c9:84:bb:
cd:64:36:f6:ad:f1:a9:37:a2:12:96:59:ba:71:6f:1a:0e:f2:
71:17:24:a9:75:9d:7f:38:ea:94:83:42:0b:20:4f:b9:4d:8d:
eb:fa:f5:c9:1a:0a:cf:10:4d:ba:ca:ef:c3:fc:3f:23:10:f1:
c5:32:e0:d9:f9:26:c9:5a:95:e6:74:4e:ac:df:68:f6:ca:09:
74:89:a9:58:5d:fb:d5:ed:26:d2:8b:58:1f:bc:ab:31:90:00:
76:ad:f9:c7:8d:c3:4b:93:69:11:03:d0:fe:e2:7c:30:c4:cc:
fb:dd:15:0d:db:4f:44:d6:3f:35:85:12:bf:2f:b9:39:fe:da:
68:20:d2:75:9c:1c:2a:a1:5b:8e:bc:b3:85:f9:11:87:94:fc:
e3:d3:4d:28:7a:74:5c:79:5e:76:0b:d2:2d:81:0d:71:26:ca:
fa:cc:e8:b8:e3:50:b9:71:6d:5b:ff:dc:dc:35:72:23:e8:f5:
29:bd:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:42 2023 by rpki-client on console.sobornost.net