Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/j-XlLHRPPOiWepl5qOJRXEUgS5k.roa
File: j-XlLHRPPOiWepl5qOJRXEUgS5k.roa (raw, json)
Hash identifier: EKW/ZsTGK++yvnBjgolhBSrcmv2ETR9AZ7cwZv9EHQ0=
Subject key identifier: 8F:E5:E5:2C:74:4F:3C:E8:96:7A:99:79:A8:E2:51:5C:45:20:4B:99
Certificate issuer: /CN=1d3df4abd9de641e1eeabcb7abc4c13343135e69
Certificate serial: 0181FC6F1FCD08A3073902CF60528C1ECC09
Authority key identifier: 1D:3D:F4:AB:D9:DE:64:1E:1E:EA:BC:B7:AB:C4:C1:33:43:13:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT30q9neZB4e6ry3q8TBM0MTXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/j-XlLHRPPOiWepl5qOJRXEUgS5k.roa
Signing time: Thu 14 Jul 2022 11:19:09 +0000
ROA not before: Thu 14 Jul 2022 11:19:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60257
IP address blocks: 145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:6f:1f:cd:08:a3:07:39:02:cf:60:52:8c:1e:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3df4abd9de641e1eeabcb7abc4c13343135e69
Validity
Not Before: Jul 14 11:19:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fe5e52c744f3ce8967a9979a8e2515c45204b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:ef:a0:db:76:ad:7e:0e:ea:5f:89:56:ef:
d9:c9:ff:75:bd:82:df:03:fb:47:f2:e2:ed:ed:81:
cd:8c:6d:1c:98:58:43:35:00:7e:35:09:b9:51:12:
03:e1:d5:83:36:ce:48:38:a0:ee:79:7f:60:2a:a9:
40:7e:a8:0e:50:58:0b:24:b0:5e:13:ca:8a:f8:6d:
7e:a0:b5:32:77:b6:33:4f:83:62:d2:8b:48:19:87:
b2:97:09:85:e6:a3:a9:c2:e5:ae:5a:3c:19:d1:1f:
4d:0e:ff:21:57:86:44:c1:1e:0a:06:3e:43:ab:f8:
43:de:bb:bb:e9:a4:27:66:cb:2d:6b:af:85:63:a2:
67:c5:b1:e0:12:a2:dc:12:4c:4e:5e:a6:14:a7:b3:
4a:25:86:c0:0b:31:22:cf:f7:b7:04:73:4a:10:b8:
63:a3:dd:f7:03:78:c0:52:90:37:8b:b5:07:99:66:
0b:c3:51:d5:b3:94:e1:7b:11:69:60:f3:89:5e:af:
0b:59:6d:0c:43:d9:3b:41:1c:b9:a6:86:16:47:d4:
f2:9b:af:18:fe:4e:00:68:c0:7f:2e:94:11:a4:40:
e6:f2:b8:6d:ee:44:e9:0c:9d:c1:e6:31:15:5c:d7:
0c:13:5f:cb:e5:7b:c8:9e:9f:dd:28:5f:a2:6c:1d:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:E5:2C:74:4F:3C:E8:96:7A:99:79:A8:E2:51:5C:45:20:4B:99
X509v3 Authority Key Identifier:
keyid:1D:3D:F4:AB:D9:DE:64:1E:1E:EA:BC:B7:AB:C4:C1:33:43:13:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT30q9neZB4e6ry3q8TBM0MTXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/j-XlLHRPPOiWepl5qOJRXEUgS5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/HT30q9neZB4e6ry3q8TBM0MTXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.255.240.0/21
185.24.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c8:c4:f9:57:ff:73:5a:0e:9f:87:a8:14:ca:b5:99:c5:9f:
ae:87:e7:e3:89:50:44:aa:a4:85:67:68:c7:a8:91:96:a6:0a:
09:39:48:c5:cd:fa:3b:ab:ff:eb:ec:18:59:02:ad:18:b2:a3:
45:89:6b:a0:11:b7:23:b7:b6:32:55:62:c1:2a:37:28:ae:5d:
82:e2:2c:10:3c:09:cb:20:3b:0d:53:b6:2e:76:0b:f1:b8:07:
82:88:17:86:8e:fa:60:57:5b:b5:63:e1:c7:b8:67:22:79:f3:
26:fd:a3:c6:11:00:ce:a2:d8:91:b0:a5:57:03:03:52:85:34:
12:f8:f1:a0:75:d6:86:9a:28:06:c3:a2:ec:66:a4:46:5b:2d:
a2:90:4d:51:2b:e5:13:6d:b7:70:45:bd:cb:72:92:b6:45:7c:
67:e8:ea:95:82:67:43:5e:2d:f2:2c:83:aa:92:fa:dd:93:75:
1b:a6:3e:03:6f:bf:e5:23:f6:e4:21:98:d3:55:2c:36:0a:04:
db:32:54:4b:4e:ad:6e:dd:ee:ee:33:bf:05:40:16:e9:b9:c1:
63:d7:6f:c8:e2:93:46:fe:15:7f:3b:f2:0c:f7:2c:84:10:88:
90:a8:c7:29:ac:27:af:00:18:a8:80:03:e2:48:d4:9a:de:0c:
3e:e4:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net