Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/m9GjhS3o3nK9Hamrf2ATChjAq3w.roa
File: m9GjhS3o3nK9Hamrf2ATChjAq3w.roa (raw, json)
Hash identifier: 1A3lCSWc/s7Mlmo8/byV32XCq7Lprl8wU0qHTnFmpqg=
Subject key identifier: 9B:D1:A3:85:2D:E8:DE:72:BD:1D:A9:AB:7F:60:13:0A:18:C0:AB:7C
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 018FE337FACF2AB86CB5FFA57EE658DA31DB
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/m9GjhS3o3nK9Hamrf2ATChjAq3w.roa
Signing time: Tue 04 Jun 2024 12:27:27 +0000
ROA not before: Tue 04 Jun 2024 12:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214776
IP address blocks: 212.110.141.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:37:fa:cf:2a:b8:6c:b5:ff:a5:7e:e6:58:da:31:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jun 4 12:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd1a3852de8de72bd1da9ab7f60130a18c0ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:c5:08:5d:08:22:81:1c:f8:f0:30:58:88:
71:e0:2b:aa:39:25:19:0d:37:a3:85:69:93:4a:63:
18:ac:a2:82:0d:b4:f7:b7:5a:1b:a1:e5:a2:5c:2b:
47:de:18:b6:46:99:5c:85:15:e5:a2:62:db:30:1a:
e3:cf:c2:bc:8a:6b:47:9d:53:da:db:61:3e:3d:c3:
9e:07:d8:27:c3:10:f1:33:9c:43:f3:37:92:e3:be:
01:3a:f6:0e:e6:7c:6f:ec:54:c4:47:a1:8f:f0:94:
59:e7:b5:3c:df:93:d6:1c:d7:4c:a6:8d:18:53:4a:
7c:5b:ea:3a:2d:f8:41:1a:a2:63:80:93:fb:bf:81:
ae:8a:e1:e4:91:8f:2b:d2:44:05:4c:4f:90:70:c8:
b2:83:d3:b5:70:a3:a8:89:18:d8:cf:0c:ff:7e:47:
84:7c:93:28:ee:d4:d8:f4:ed:da:11:d1:a8:f4:66:
98:b5:24:65:73:99:06:87:d9:bb:8b:2a:02:8e:34:
fe:d1:16:0b:4f:78:af:f1:8e:8a:2b:1a:6b:31:94:
73:7d:5e:d7:12:df:77:dd:48:27:a4:5d:f6:b5:00:
3d:84:51:b0:16:5b:86:5b:ee:2d:11:20:00:98:c5:
4a:61:d4:69:a1:25:2a:a9:79:4d:d6:85:2d:e8:dc:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:A3:85:2D:E8:DE:72:BD:1D:A9:AB:7F:60:13:0A:18:C0:AB:7C
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/m9GjhS3o3nK9Hamrf2ATChjAq3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:23:95:61:15:bc:2f:32:c5:79:40:c1:cc:64:d0:e8:95:8d:
0c:82:26:32:f8:97:a9:6e:9d:1d:65:0b:33:2f:07:7b:fb:67:
8e:08:5e:6b:f1:d3:33:35:a0:2c:5d:19:3f:25:31:c7:52:f9:
9a:95:20:c9:fa:1e:44:ea:91:1f:ed:5f:d3:fc:85:70:4e:77:
d7:33:a5:f9:fb:c1:ac:41:1d:50:9e:7b:dd:f2:52:17:ca:9a:
58:67:c0:13:f7:eb:a5:99:79:da:45:8a:d3:41:6c:81:27:3b:
c1:8a:05:db:05:c7:c4:b1:60:1f:ae:9b:a5:8f:28:a8:aa:a2:
bf:ea:10:94:79:57:f5:a9:b4:4f:9a:5a:19:2c:43:7a:60:8a:
de:a3:a6:05:9a:f9:f1:e7:ad:02:f2:9f:59:bf:fe:0b:d1:8d:
a4:03:ff:0a:46:7e:5b:57:51:b8:fd:ec:05:85:46:37:5c:8a:
66:3c:04:68:d3:81:75:cc:cd:a5:63:a8:bf:e8:35:ab:c2:a2:
1d:e1:00:c0:b5:83:46:18:14:60:9e:26:bb:ff:4f:ac:1b:f4:
71:e4:48:92:89:24:4a:cd:69:f3:80:43:8b:e7:9f:8c:d2:68:
e3:32:74:51:ed:45:b4:35:8d:ad:be:20:29:d7:f4:df:97:c6:
53:4d:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:52 2024 by rpki-client on console.sobornost.net