Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/372303-24c5-4a5c-b35d-b463c0613520/1/cnjLltntf7mnQn3DDdLbXqpSick.roa
File: cnjLltntf7mnQn3DDdLbXqpSick.roa (raw, json)
Hash identifier: LjRSN0L63Zz6fY7FMr8zp8wG3r6VF3jC7C9H/Ec+yCo=
Subject key identifier: 72:78:CB:96:D9:ED:7F:B9:A7:42:7D:C3:0D:D2:DB:5E:AA:52:89:C9
Certificate issuer: /CN=7bf3ca6ce49a412eb3b0d4270731b8256c36560d
Certificate serial: 018570C2ABF54A8610014BEE116EBDE47F22
Authority key identifier: 7B:F3:CA:6C:E4:9A:41:2E:B3:B0:D4:27:07:31:B8:25:6C:36:56:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_PKbOSaQS6zsNQnBzG4JWw2Vg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/372303-24c5-4a5c-b35d-b463c0613520/1/cnjLltntf7mnQn3DDdLbXqpSick.roa
Signing time: Mon 02 Jan 2023 04:34:44 +0000
ROA not before: Mon 02 Jan 2023 04:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206766
IP address blocks: 185.255.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:ab:f5:4a:86:10:01:4b:ee:11:6e:bd:e4:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf3ca6ce49a412eb3b0d4270731b8256c36560d
Validity
Not Before: Jan 2 04:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7278cb96d9ed7fb9a7427dc30dd2db5eaa5289c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:a0:9f:2f:54:46:e2:88:18:8f:30:0e:44:
6f:2e:74:d9:9a:d7:e2:1c:de:8f:91:c8:3c:51:12:
28:a3:34:63:b3:0e:cf:b4:bc:a3:79:07:95:35:55:
e0:b2:01:3f:58:f3:71:44:0a:19:9b:96:05:df:a9:
0c:3e:a5:b0:eb:69:8f:26:c0:aa:68:2c:f3:9b:2f:
af:c4:e0:eb:cd:3a:33:8c:ac:3f:e1:4b:96:13:a1:
b2:78:94:69:30:fb:1f:7b:e8:01:2e:ff:18:c0:cc:
19:f3:1a:06:62:b3:dd:f8:d4:eb:07:bf:b7:26:c7:
a7:ba:d8:4e:58:ab:ff:b6:b0:9d:09:b5:5e:20:56:
cd:31:42:b6:71:7f:f5:e2:69:67:ac:27:ad:99:2b:
a5:58:7e:f7:fe:68:0e:71:bd:75:6c:0a:1c:29:2e:
c9:f6:43:13:ca:c2:97:fe:d4:5e:a8:c1:2d:88:f4:
a9:94:5a:27:3d:bc:a9:c8:84:c5:e4:d7:59:27:6a:
99:70:19:90:3e:23:47:16:48:d0:64:82:cb:17:d9:
5c:18:f5:a8:80:ea:91:02:dc:72:1f:55:2a:d9:a2:
f7:4d:d1:b7:4d:48:83:dd:a5:f4:8e:56:6d:48:bd:
12:97:02:a0:b2:8c:18:e3:8b:b5:59:77:87:a3:70:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:CB:96:D9:ED:7F:B9:A7:42:7D:C3:0D:D2:DB:5E:AA:52:89:C9
X509v3 Authority Key Identifier:
keyid:7B:F3:CA:6C:E4:9A:41:2E:B3:B0:D4:27:07:31:B8:25:6C:36:56:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_PKbOSaQS6zsNQnBzG4JWw2Vg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/372303-24c5-4a5c-b35d-b463c0613520/1/cnjLltntf7mnQn3DDdLbXqpSick.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/372303-24c5-4a5c-b35d-b463c0613520/1/e_PKbOSaQS6zsNQnBzG4JWw2Vg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1e:49:04:fb:eb:fb:7a:b0:2a:80:eb:a0:36:27:fc:97:ee:
d9:61:05:82:a4:d8:78:e8:de:7f:50:de:01:d2:eb:28:c1:30:
0c:81:49:ec:83:7d:b1:3b:c0:20:be:95:49:df:77:2a:68:1d:
84:bb:6e:2f:68:94:2e:09:fd:1b:84:75:64:97:ed:af:d4:66:
78:fb:cd:12:16:78:81:8c:79:31:13:e2:9d:66:95:53:e4:d5:
61:49:f4:9e:a8:4a:a1:20:68:c8:c3:e2:dc:36:e1:af:f9:6c:
6b:0d:90:15:e3:54:3c:13:c3:f4:c1:c0:29:97:5f:66:ed:89:
09:f2:7b:f2:aa:7a:eb:8c:b1:a3:51:a7:ee:d2:05:6d:fa:9b:
95:fc:9b:a2:ac:b2:82:c7:5d:72:73:a9:0a:f1:aa:9c:78:04:
2a:86:d2:99:64:0d:e0:d5:a7:59:a8:f8:57:c2:32:d7:56:25:
da:a5:b0:36:37:1e:9e:9c:04:c2:4d:a7:e6:28:51:ea:c0:89:
db:5d:7d:87:d2:82:b1:ef:3c:1f:ac:98:6a:d2:22:5d:24:d3:
b1:93:6c:f3:59:73:81:73:8d:c6:92:40:57:91:af:d5:14:15:
8d:0c:57:54:58:f0:6e:cd:95:a6:be:2b:42:a6:17:51:ac:ec:
c4:51:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net