Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Ta9pG6yJQlwnVd6ylV0KeC9Z1X4.roa
File: Ta9pG6yJQlwnVd6ylV0KeC9Z1X4.roa (raw, json)
Hash identifier: gNm/9XryH/MpWKrsoyPozWBpMWaz09ysISlwZoJWqf0=
Subject key identifier: 4D:AF:69:1B:AC:89:42:5C:27:55:DE:B2:95:5D:0A:78:2F:59:D5:7E
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF93BC79401971736B8AB59DDD48998
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Ta9pG6yJQlwnVd6ylV0KeC9Z1X4.roa
Signing time: Mon 02 Jan 2023 00:54:42 +0000
ROA not before: Mon 02 Jan 2023 00:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 36.255.94.0/23 maxlen: 23
36.255.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3b:c7:94:01:97:17:36:b8:ab:59:dd:d4:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4daf691bac89425c2755deb2955d0a782f59d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:7d:7d:0c:41:77:6e:d1:f2:b3:7a:7b:ad:
54:66:1a:76:af:b3:6e:2d:e6:2a:ea:44:a5:72:23:
21:1f:18:45:f0:b6:df:33:58:28:84:2c:8e:82:17:
e7:04:b9:01:44:eb:0f:f5:f8:de:be:de:c3:b6:22:
ec:52:2f:32:25:9a:50:17:a5:8a:45:30:11:f8:28:
35:0f:71:1d:7e:32:dd:fe:ea:df:ef:2a:17:73:61:
43:b2:47:6f:08:79:70:9f:c7:14:5f:b7:29:52:e2:
6b:75:56:a7:31:b3:71:43:75:9a:85:79:c9:1c:a2:
f4:9d:1c:33:51:f2:9b:54:62:8f:26:c6:83:04:26:
27:7b:df:03:71:08:df:eb:ec:94:43:38:a1:95:2e:
72:3b:b8:f3:86:0f:54:66:79:af:f3:48:6e:7e:f9:
76:c8:95:29:90:9d:ef:9a:c6:ec:92:cb:79:be:2d:
c1:57:aa:e0:b1:fe:a9:8e:e0:18:c6:a7:e3:c6:b5:
28:ec:c0:38:ee:68:ad:94:75:af:74:46:9e:16:61:
5e:f5:e3:15:d3:f5:f0:de:d3:b6:89:1a:8c:78:ff:
a5:04:2b:45:f0:e1:3c:75:40:6f:43:c3:63:02:37:
71:5b:47:bf:2d:f1:1d:86:8a:eb:8a:fc:76:d4:12:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:69:1B:AC:89:42:5C:27:55:DE:B2:95:5D:0A:78:2F:59:D5:7E
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Ta9pG6yJQlwnVd6ylV0KeC9Z1X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d8:bf:4e:40:99:fc:2a:9f:81:49:60:52:c4:4a:d6:ba:66:
db:67:36:d1:1c:68:7d:58:24:da:86:82:4b:7e:66:84:63:e0:
17:10:e2:0f:56:e0:eb:ea:a6:ec:f9:f3:dc:3a:73:17:28:e9:
8c:d0:f7:d8:0a:51:8e:62:2c:a6:47:7d:0f:be:3c:75:a7:2e:
41:63:d8:e9:90:cc:ef:c5:55:28:e3:c4:a4:07:b2:c7:04:a5:
3b:14:99:c7:a9:14:1e:df:fe:f0:fe:a9:6a:ee:b9:b0:fe:0b:
a5:c1:4b:0b:2c:51:69:90:54:00:98:5e:46:30:1b:56:73:15:
35:41:e6:af:c7:5c:c6:a7:f0:9b:44:1f:23:cc:8e:4c:7c:6d:
1e:87:79:44:79:73:b2:5a:eb:8e:98:09:23:ae:c9:d1:f7:46:
c4:98:b0:30:96:c1:ed:26:a4:c2:e1:91:8f:bf:1f:13:94:8e:
a9:f5:71:5a:cf:13:89:6f:98:a9:2c:34:11:9f:f6:89:dd:d2:
e9:e8:53:c6:f7:02:3f:72:57:e7:f9:a6:16:cd:58:6f:35:1d:
b9:1a:16:5b:73:1e:5c:de:9f:a6:aa:52:0e:84:e3:79:27:1e:
f4:5e:a2:31:ad:89:3e:cf:1d:f3:62:a6:9c:5a:dc:2f:9f:91:
d6:fb:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net