Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/s2_2huHYlk2bp6XlehlHt-FB--0.roa
File: s2_2huHYlk2bp6XlehlHt-FB--0.roa (raw, json)
Hash identifier: 6Ojttd9TFUtGfEofH0obgJ7Dgjd3aFji05GbR028z1E=
Subject key identifier: B3:6F:F6:86:E1:D8:96:4D:9B:A7:A5:E5:7A:19:47:B7:E1:41:FB:ED
Certificate issuer: /CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Certificate serial: 0185706731B849EAF5E0770BDD2D9A2F3AC9
Authority key identifier: AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/s2_2huHYlk2bp6XlehlHt-FB--0.roa
Signing time: Mon 02 Jan 2023 02:54:49 +0000
ROA not before: Mon 02 Jan 2023 02:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.23.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:31:b8:49:ea:f5:e0:77:0b:dd:2d:9a:2f:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Validity
Not Before: Jan 2 02:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b36ff686e1d8964d9ba7a5e57a1947b7e141fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:f5:79:34:12:6c:5a:f7:c6:c0:7b:ee:68:
99:bc:38:61:ab:2d:1e:06:f4:d9:28:3d:39:25:95:
9f:2a:2d:a6:8e:be:0e:2a:0d:f1:60:67:54:32:67:
07:71:62:f6:db:ee:d4:66:27:c3:c8:3a:13:7e:20:
d7:a2:c4:2e:3a:10:07:44:71:e6:1e:4f:74:7f:6e:
d1:7f:51:9f:de:9a:de:5d:ff:d4:63:61:54:17:05:
97:0d:49:82:9f:ec:04:03:a2:92:d6:27:ea:85:c5:
d3:ed:ac:e0:c8:16:51:af:02:01:69:49:dd:d7:17:
45:d9:57:22:c1:f2:9a:9f:4a:13:72:bc:8e:11:0c:
ba:a7:86:fb:36:4d:47:88:db:4a:bd:17:bd:95:b0:
af:dc:d7:95:ec:0e:ff:7f:99:fe:9d:24:e7:76:88:
fc:52:0b:8e:8d:3c:27:01:fa:33:f9:6e:bb:96:8e:
62:2c:88:2d:36:5a:b7:f8:af:79:45:a1:b3:b1:d5:
44:e4:8e:8d:45:bc:0b:93:ac:f8:89:57:9f:6c:56:
ac:c9:22:a3:fa:34:28:d7:b1:84:67:8b:55:91:59:
bc:08:71:4a:2c:c6:4e:a8:43:ce:5b:0a:a2:d3:46:
75:0f:ca:8d:66:b1:26:d0:b7:fe:b8:a0:c8:98:e6:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:F6:86:E1:D8:96:4D:9B:A7:A5:E5:7A:19:47:B7:E1:41:FB:ED
X509v3 Authority Key Identifier:
keyid:AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/s2_2huHYlk2bp6XlehlHt-FB--0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.194.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:38:a3:67:36:8d:ad:6c:75:80:fd:b1:45:53:03:03:62:
40:89:fc:7d:e9:70:12:a9:76:9a:2b:45:da:63:7e:d8:eb:d9:
be:97:c0:c3:f7:c0:2b:8f:e6:04:25:38:64:81:d0:68:fe:3b:
13:32:a7:23:2e:e3:d2:af:5f:bb:c0:4a:15:58:d7:e7:25:a9:
e6:ab:6c:dd:9b:ce:9d:b8:48:fe:a3:f5:32:5a:be:a2:d1:46:
fb:f7:3e:aa:fd:b4:72:6e:c0:82:21:15:86:23:09:16:b3:25:
5f:4b:15:1d:53:49:62:d0:f0:c9:9c:2e:28:2a:e4:75:19:d8:
50:35:3a:bc:58:e0:5b:13:40:72:27:29:c0:52:82:aa:fb:9b:
fc:aa:bd:55:93:6c:0e:af:f9:39:91:37:af:61:61:fc:75:57:
99:30:f7:11:8e:56:94:35:0b:c2:c0:aa:2d:39:35:62:8e:b4:
24:a0:75:c6:cb:75:3f:06:c5:cb:56:05:b5:69:46:d9:b5:97:
c9:bf:6d:be:9d:13:e5:6f:cc:37:d1:60:93:d5:92:19:4a:2b:
c5:db:7f:d4:0c:ab:70:72:ae:a2:4c:77:0a:98:e0:1f:d8:52:
80:76:9d:6a:17:49:2b:00:27:fc:0f:ec:fa:e9:e0:c3:33:1a:
b4:b7:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:41 2023 by rpki-client on console.sobornost.net