Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hPaMCJRbkaT21ZVe_XfK4L28cpA.roa
File: hPaMCJRbkaT21ZVe_XfK4L28cpA.roa (raw, json)
Hash identifier: L5TlADFEIg2q7kJOa55Duulxw/AdRyozFq4u9RNeO00=
Subject key identifier: 84:F6:8C:08:94:5B:91:A4:F6:D5:95:5E:FD:77:CA:E0:BD:BC:72:90
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01856ED4C6ECD8F7790B27D8B3CE8A4E9578
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hPaMCJRbkaT21ZVe_XfK4L28cpA.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 152.89.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c6:ec:d8:f7:79:0b:27:d8:b3:ce:8a:4e:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f68c08945b91a4f6d5955efd77cae0bdbc7290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:28:8f:54:a9:53:9a:f8:4f:23:c0:72:44:
46:a6:a4:c9:ac:25:a2:12:dc:af:cc:c0:04:86:ba:
7b:37:a3:cf:41:7e:b8:5c:d2:83:90:91:58:aa:5b:
ab:f9:fa:8a:a4:97:ee:f0:a0:87:72:ea:de:e6:74:
0f:13:4e:a1:fa:ef:37:5e:ab:41:68:42:e1:fe:1a:
80:6c:11:85:7a:60:70:ae:a9:68:32:63:bb:80:0b:
a3:98:81:68:2b:8c:54:4c:3d:9d:63:2e:76:ba:7b:
76:4e:4c:68:7d:83:af:d7:1d:e6:7a:56:1e:c0:a7:
a6:d1:c1:d4:2c:69:f7:54:ff:99:1b:fd:19:eb:09:
5d:1b:8a:72:0a:85:df:38:b9:d7:0f:8f:e2:d6:c9:
75:20:90:3c:f0:f4:54:6e:af:89:1b:e6:0c:44:70:
8b:f0:3c:12:58:6f:3f:ad:82:c0:24:32:52:69:fe:
90:62:67:7c:85:93:1f:f2:66:7c:06:94:e7:c1:5a:
df:7e:ed:37:c1:34:45:40:07:b8:3c:f4:50:f3:35:
d9:d8:02:12:d3:e3:ae:b5:f0:e4:57:31:e0:7b:25:
c0:fe:06:d0:3b:b2:3d:72:17:5c:49:d6:f2:d2:4d:
05:a9:9b:13:4f:8f:c0:f3:6c:58:f6:c6:5b:7e:0f:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:8C:08:94:5B:91:A4:F6:D5:95:5E:FD:77:CA:E0:BD:BC:72:90
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hPaMCJRbkaT21ZVe_XfK4L28cpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8f:d2:a0:7f:c3:d7:1c:fc:93:2b:67:e5:33:74:8a:eb:2b:
74:82:ea:dc:df:6a:e6:3d:d8:ff:9f:7f:b0:70:36:68:9f:65:
6f:4d:f4:1a:a5:f4:1f:f6:59:e5:6a:14:11:36:55:3b:d5:32:
83:6a:f9:4a:b4:08:90:83:d8:be:1d:dd:4f:a7:c0:b8:6a:2a:
e4:5e:60:90:bd:9b:5d:4c:df:e0:e4:59:ef:0f:1a:45:53:90:
15:f4:ad:6f:20:d2:50:59:38:7b:aa:3b:7f:dc:8e:0e:cd:bf:
ed:35:37:3c:d4:d0:69:ac:1c:5f:05:23:b8:50:30:24:21:a1:
8f:2e:bd:b1:fe:86:9e:fa:25:50:09:81:21:dd:6f:d0:8f:64:
a4:64:72:40:a7:40:6e:58:f9:20:0f:ff:5c:92:10:05:42:5c:
af:50:f0:be:9f:4e:3b:27:b3:78:44:88:1a:de:f1:43:b3:25:
04:1d:09:f2:14:ae:d4:35:9a:72:0d:bc:af:74:55:f6:54:b7:
b6:2e:22:33:fc:3d:6e:14:9b:92:fa:b5:c6:dc:1b:5d:b9:3a:
04:f2:52:b3:25:35:05:8b:ac:48:21:43:1e:36:25:c5:eb:85:
59:8c:f2:51:ce:1a:d2:22:cc:83:11:0e:43:45:ff:78:74:9e:
eb:81:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net