Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/_2nyH53_Nl6YT0ek0mb8YZL1EOI.roa
File: _2nyH53_Nl6YT0ek0mb8YZL1EOI.roa (raw, json)
Hash identifier: BFu8C5Bx0VIn332fPf6A9An+G1ZbI7mDclocK+cX/2w=
Subject key identifier: FF:69:F2:1F:9D:FF:36:5E:98:4F:47:A4:D2:66:FC:61:92:F5:10:E2
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 018CC4245F97299356E4DE0478937284EC93
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/_2nyH53_Nl6YT0ek0mb8YZL1EOI.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210350
IP address blocks: 185.230.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5f:97:29:93:56:e4:de:04:78:93:72:84:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff69f21f9dff365e984f47a4d266fc6192f510e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:30:a0:f5:c4:d3:4f:fd:a6:62:4a:01:4f:
54:8a:59:a9:f0:58:e5:c8:ea:9b:a0:a0:42:9a:09:
56:70:22:6a:61:43:aa:e3:b8:43:01:ac:9e:d9:ea:
a2:70:e4:84:85:d4:7e:e9:7a:46:45:f5:ce:50:e8:
c4:bf:62:e7:59:b6:2a:da:13:e0:d4:89:b1:7d:c1:
ab:dd:20:69:95:a8:06:46:2e:15:da:a8:5c:aa:0d:
52:75:0f:f2:1b:42:d5:05:d1:e1:90:c7:10:be:c8:
d6:c7:3c:3c:20:59:a5:c8:e7:5f:0c:aa:18:18:b3:
4b:0f:eb:a3:5d:3e:a8:7e:f1:59:da:15:7e:65:a2:
ee:ac:f5:bb:ec:e7:42:0a:19:03:ec:ba:29:28:ce:
c5:99:e8:b4:15:b8:1c:40:ca:05:42:98:1d:8f:53:
62:12:7f:7d:89:48:2e:2e:77:9e:33:3c:30:38:b0:
e8:56:1e:fa:fa:81:bd:fc:b1:84:42:52:da:41:a5:
9a:ae:a1:a8:8d:20:31:bb:a8:79:8f:cc:1d:c9:ec:
3c:dc:eb:ae:f5:33:e4:c2:00:bf:73:a3:49:cc:ce:
f0:89:19:32:9a:f1:35:fe:62:d0:84:7b:8c:d0:54:
0f:e9:34:2e:71:67:e3:47:2a:c8:f2:ee:43:ae:3b:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:F2:1F:9D:FF:36:5E:98:4F:47:A4:D2:66:FC:61:92:F5:10:E2
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/_2nyH53_Nl6YT0ek0mb8YZL1EOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9b:53:5d:fe:1c:cd:9b:2d:0c:21:d8:78:37:cb:4c:84:41:
e1:0b:46:db:63:21:f6:a7:38:22:4c:66:d8:22:bd:fc:93:39:
2b:26:86:d6:fd:0b:5d:07:5c:57:97:b9:cb:93:e5:df:ee:7a:
70:9e:63:64:fc:1f:f6:8b:b9:f9:4e:5d:80:63:f4:5b:97:32:
6f:d7:92:e7:bd:da:fc:59:15:2f:ba:ed:03:17:ce:43:e7:fb:
9c:de:02:a8:50:a6:e3:03:8b:0c:ea:99:83:f1:f7:d8:27:6a:
33:45:45:ef:c9:ad:82:e9:98:2b:cf:73:57:b3:8d:21:4d:28:
15:c3:63:a9:a3:f4:a4:e6:6b:fd:b1:d4:a7:34:f3:80:48:36:
c1:42:60:ac:dc:75:db:30:e2:81:aa:5d:86:ba:df:aa:f9:7b:
d8:d0:79:9f:b8:59:bd:46:d9:c2:c8:84:a7:03:de:d7:67:4d:
92:37:02:88:94:5d:a0:15:8f:1e:d0:78:13:32:1d:82:9a:c7:
16:13:27:5c:0b:07:bf:1f:28:e0:d6:7d:85:de:58:fe:fd:6f:
44:a4:31:82:a8:27:f1:09:af:75:23:72:60:2d:70:43:f7:99:
19:d6:6d:b9:32:6c:ca:de:6f:94:3c:c0:23:83:b9:6e:08:79:
f2:72:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net