Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/JmXIShmUYRpgxyddcXDxVladcTQ.roa
File: JmXIShmUYRpgxyddcXDxVladcTQ.roa (raw, json)
Hash identifier: 3FcKyKL+E6Ipkyw+vgp5w/IwSsPlrVQdYJL1mhEKHHk=
Subject key identifier: 26:65:C8:4A:19:94:61:1A:60:C7:27:5D:71:70:F1:56:56:9D:71:34
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 02A3D155
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/JmXIShmUYRpgxyddcXDxVladcTQ.roa
Signing time: Thu 19 May 2022 20:01:29 +0000
ROA not before: Thu 19 May 2022 20:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44290389 (0x2a3d155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: May 19 20:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2665c84a1994611a60c7275d7170f156569d7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:34:57:7b:18:d7:21:52:b9:c9:26:1d:64:
ee:ff:18:ad:d8:04:b0:6e:bd:f1:ef:c7:01:a2:15:
e2:bb:5d:82:44:23:b9:38:e6:cd:d5:73:00:3b:3e:
da:07:69:a7:5f:6e:62:1d:b3:3a:b9:04:12:45:ab:
8a:cd:e6:eb:91:1b:fc:3c:82:af:74:e5:77:3f:2c:
0b:17:b6:cc:3b:da:e5:4c:b8:d3:a3:68:0e:d5:50:
7b:85:cb:61:e9:63:db:59:33:00:35:2f:1f:b7:81:
c4:f4:2f:37:4d:81:00:05:a7:39:d4:3a:20:0c:fc:
92:a7:55:8d:9a:87:1b:05:a6:28:b5:c8:8c:72:c3:
4b:d3:a7:c0:ec:bc:6f:04:ca:34:0e:de:e0:cf:46:
7e:c2:33:6e:85:34:df:5e:78:8a:41:69:54:e6:fd:
80:b8:1c:29:28:0a:be:13:29:7f:9f:86:a3:d5:08:
60:56:12:a3:6b:a4:eb:39:6c:70:6a:37:ac:a4:99:
d5:af:f9:ff:4b:63:d8:f7:bc:25:96:59:5b:d1:a7:
f4:04:2d:97:ee:6d:f4:54:d8:eb:c2:1c:dc:46:37:
5b:68:f6:bf:86:e7:09:48:73:f2:89:0d:7b:b9:db:
44:9f:7e:ad:3c:49:62:2a:84:c1:61:a8:00:60:d0:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:C8:4A:19:94:61:1A:60:C7:27:5D:71:70:F1:56:56:9D:71:34
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/JmXIShmUYRpgxyddcXDxVladcTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6e:33:31:25:17:ac:64:40:da:81:29:dd:96:c3:5a:10:e9:
b9:00:6e:0b:76:31:a5:04:70:bc:f2:1c:c5:e4:82:fb:25:ed:
8c:33:8b:75:bb:48:3d:7d:f9:21:51:6d:b7:83:aa:cb:0d:1b:
37:ee:45:d9:78:9a:2a:28:81:84:c6:ee:5b:05:56:74:97:6d:
52:26:5c:c1:7d:d2:e5:ed:44:fd:f0:f5:4e:cf:7e:c4:ce:04:
8f:de:bf:ef:67:74:2a:cd:73:04:d7:04:92:14:36:36:fe:ea:
80:51:fc:5c:a8:8d:b6:96:f8:97:a7:85:98:d8:8e:6d:ce:ff:
15:d7:f8:05:90:3a:f1:07:fe:59:e9:6c:35:7f:8b:b7:d1:bd:
ed:89:a6:29:ad:0d:d3:1d:4f:62:ea:d6:74:e1:74:98:3c:a1:
51:eb:2c:fa:3a:84:43:bf:27:ef:b6:06:cc:7d:5c:05:22:36:
53:0a:91:9e:55:08:c2:1e:c7:3e:b9:6e:fb:46:1d:8d:68:7f:
09:56:05:5e:cc:aa:62:58:a1:8a:f5:c0:85:61:99:60:99:3a:
d4:18:8d:99:f1:b7:88:51:00:55:a7:09:6b:b2:1f:9d:51:be:
10:cf:f5:5b:53:5a:5e:a2:38:9f:78:bd:49:20:09:28:9e:f6:
76:33:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net