Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/mn7aMYrwJBAiz_Nceed-bBUhk9E.roa
File: mn7aMYrwJBAiz_Nceed-bBUhk9E.roa (raw, json)
Hash identifier: gt0QTZuG7xuoG2Fl/+DvQ9m9NvsdrIqESamwHDQ3XQM=
Subject key identifier: 9A:7E:DA:31:8A:F0:24:10:22:CF:F3:5C:79:E7:7E:6C:15:21:93:D1
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 018355FF7DE4835605D85C89DAA4510D8374
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/mn7aMYrwJBAiz_Nceed-bBUhk9E.roa
Signing time: Mon 19 Sep 2022 13:45:50 +0000
ROA not before: Mon 19 Sep 2022 13:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:ff:7d:e4:83:56:05:d8:5c:89:da:a4:51:0d:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Sep 19 13:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a7eda318af0241022cff35c79e77e6c152193d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:4e:3d:6e:4b:ed:65:13:c0:5c:72:de:b5:
63:d4:06:ef:d4:c6:d5:dc:4b:45:5c:d2:bc:f7:6a:
f3:ea:f8:bf:fa:70:8a:8b:09:3b:d1:74:10:8d:c7:
f7:60:33:a4:30:64:ab:db:2e:b0:a4:43:80:55:ab:
4b:2f:97:87:59:36:10:d5:2e:c7:6f:b2:46:b0:8a:
c8:b6:e5:fd:b5:8d:55:89:c6:3b:88:98:02:4c:8e:
c1:59:d5:9e:37:55:5c:bc:c5:ee:6a:ca:59:7b:fb:
62:d9:a7:2f:4f:b7:d6:16:0c:ad:2b:fb:60:7d:b2:
85:c0:10:ff:0c:e5:d4:95:ae:47:6d:e3:eb:7d:2a:
11:ca:d0:47:56:16:82:06:bc:f3:c1:d7:8f:f0:42:
0b:98:7e:a5:38:fe:93:14:6e:11:24:09:be:89:ed:
bd:38:29:92:ce:5e:e5:03:48:32:42:f6:8e:df:4d:
33:a6:93:b1:29:14:05:3a:da:09:22:8d:aa:3c:1f:
f7:de:58:8f:fc:23:88:30:73:04:d1:1f:e8:b2:12:
2a:c5:00:ba:d7:69:66:e3:4d:89:19:55:a9:15:50:
44:f1:f7:4f:46:64:9d:e7:5b:65:d7:77:3c:f5:eb:
17:01:a3:12:f1:55:62:41:5f:a4:47:1c:97:89:b9:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:DA:31:8A:F0:24:10:22:CF:F3:5C:79:E7:7E:6C:15:21:93:D1
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/mn7aMYrwJBAiz_Nceed-bBUhk9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
70:20:2e:15:be:d4:71:25:a9:3e:e2:99:6b:e4:14:97:8c:d6:
70:89:a6:21:a7:e2:94:22:24:29:4f:bd:7e:c2:a7:90:78:e7:
d4:5e:83:38:eb:27:84:8c:f4:a2:46:b7:3f:35:b1:5b:69:9b:
59:8a:cd:af:51:80:01:45:a3:35:af:a3:3a:29:c5:51:53:6d:
41:ee:9c:47:4a:f2:8d:c7:dd:8b:a9:92:59:26:9e:fc:db:8c:
a0:ec:29:18:45:92:f7:51:82:59:39:21:b1:fe:cf:57:91:fe:
60:c6:33:03:03:4f:f3:9f:2b:80:64:5f:a4:73:fe:7b:f7:98:
49:3d:6a:c3:9b:8a:21:c6:73:59:ed:f2:22:03:00:fd:fe:83:
f1:cd:2e:b0:ec:38:6e:2d:d5:96:f9:89:82:8d:5d:cb:3e:d0:
a4:6e:7d:43:90:fa:2d:39:dd:5f:00:a1:2f:5b:5e:8b:8a:e9:
b7:8c:ce:ee:9a:39:0c:f8:8f:43:35:ca:6f:53:7b:1a:1e:3c:
6f:d5:9d:96:e1:b7:af:97:17:fe:8c:19:bd:9d:42:af:00:0b:
35:d0:6f:82:d6:06:88:19:fe:84:7d:32:d7:71:8a:1f:ed:eb:
d9:d9:c2:00:75:ae:10:ed:a1:9f:11:e4:f2:97:5a:ae:b7:5d:
04:29:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net