Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/mIMo2DXa18ZvFv1vDDr8P_CqWEc.roa
File: mIMo2DXa18ZvFv1vDDr8P_CqWEc.roa (raw, json)
Hash identifier: 2VKFgmqGNZdgoiOZ9H3n5aWQ+dOpfl2Q3Z0tC8wlf5c=
Subject key identifier: 98:83:28:D8:35:DA:D7:C6:6F:16:FD:6F:0C:3A:FC:3F:F0:AA:58:47
Certificate issuer: /CN=8a985599b23d425d267c5a2e756609f395b69236
Certificate serial: 01856D2F3FC68183D1EB352AB7B737313503
Authority key identifier: 8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iphVmbI9Ql0mfFoudWYJ85W2kjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/mIMo2DXa18ZvFv1vDDr8P_CqWEc.roa
Signing time: Sun 01 Jan 2023 11:54:51 +0000
ROA not before: Sun 01 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56798
IP address blocks: 45.86.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3f:c6:81:83:d1:eb:35:2a:b7:b7:37:31:35:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a985599b23d425d267c5a2e756609f395b69236
Validity
Not Before: Jan 1 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=988328d835dad7c66f16fd6f0c3afc3ff0aa5847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:b7:2b:af:e2:0d:57:05:84:e5:1c:8c:df:
64:3b:c4:33:1e:86:83:22:9a:39:b0:90:83:46:b6:
a4:d6:c3:dc:3a:80:b6:9b:e2:de:5f:53:40:21:da:
23:04:d5:eb:fd:c5:f4:fd:d6:1d:77:ea:c2:f3:22:
da:d6:c0:22:dc:19:b6:b6:3e:50:ce:99:a8:f3:b6:
63:c3:fc:24:63:c4:ae:39:f4:3a:1b:ad:36:3b:22:
0a:36:7b:a1:fc:71:9c:cd:45:8f:2e:52:89:bf:41:
e2:16:0f:58:66:52:86:70:c4:20:dc:b5:3a:80:f8:
15:08:44:8a:f0:8e:69:8d:54:29:c0:6c:64:6b:36:
66:93:8f:13:ac:9e:4f:9c:a6:4e:2d:fe:95:fe:a0:
fa:b1:7b:39:ea:65:7a:c6:84:3b:2c:39:0b:7c:50:
5d:68:f5:52:0e:fa:ba:df:cf:32:ef:91:d1:d0:a4:
2f:37:33:69:0c:bb:a1:e3:d7:81:5e:10:62:31:d6:
5d:60:6a:f5:5f:3e:32:7d:5d:fd:cf:aa:8c:c3:45:
5b:87:dc:5e:c3:a6:39:c6:1d:86:35:8b:a4:5d:1e:
8c:ee:14:16:bd:82:27:e1:ea:f4:d4:5e:a3:ff:8d:
0f:3c:70:25:ee:7c:c4:23:b0:67:54:97:ee:01:d3:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:28:D8:35:DA:D7:C6:6F:16:FD:6F:0C:3A:FC:3F:F0:AA:58:47
X509v3 Authority Key Identifier:
keyid:8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iphVmbI9Ql0mfFoudWYJ85W2kjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/mIMo2DXa18ZvFv1vDDr8P_CqWEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/iphVmbI9Ql0mfFoudWYJ85W2kjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.36.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f6:46:77:a5:ae:ef:4e:ad:cd:b4:bc:02:f4:e8:c8:1a:dd:
66:d1:bc:42:9a:c6:48:5f:77:a6:97:17:97:46:a4:24:4b:c8:
0c:3d:3a:a6:66:59:bb:a8:fa:55:4c:06:c0:bf:7b:b6:9f:ce:
02:bb:34:7a:55:41:eb:39:0c:a3:5f:de:9f:69:ec:45:37:2b:
41:b3:0e:c4:af:84:7c:4e:a3:2b:df:8f:25:a3:7f:ec:65:3f:
72:2c:2f:a8:b4:a6:83:45:50:d9:cd:0a:7b:42:46:c0:ad:86:
c5:34:d3:e5:34:4f:0d:e0:c7:94:fc:78:92:2d:90:1d:ad:bd:
01:2b:47:1f:38:73:c5:4a:b3:10:79:fc:24:4c:a3:cb:f1:ec:
cf:92:b0:9f:f3:65:69:6d:5a:96:c6:2a:cc:40:40:e4:25:06:
0b:25:f7:81:8f:7e:29:16:a9:9d:85:30:91:ac:8d:9c:74:45:
6d:6d:a9:90:e2:39:18:66:d9:74:2b:40:55:f1:89:09:be:24:
fc:b1:8b:9f:a2:81:fb:91:86:c2:71:60:59:4f:59:44:24:91:
ed:31:bb:74:d2:94:51:63:23:f9:17:1c:46:a6:a1:88:a0:ad:
4c:89:34:3c:1d:9f:0f:f6:15:9b:a6:49:0f:14:77:2f:d4:d4:
82:d3:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net