Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/4Gy1bH8I6G7NueDZT6YUbDfOf-8.roa
File: 4Gy1bH8I6G7NueDZT6YUbDfOf-8.roa (raw, json)
Hash identifier: NeuBHey3KjrF6zXWVeYY3X7dnv0u3dMx2MW/kO/ZrKI=
Subject key identifier: E0:6C:B5:6C:7F:08:E8:6E:CD:B9:E0:D9:4F:A6:14:6C:37:CE:7F:EF
Certificate issuer: /CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Certificate serial: D1E784
Authority key identifier: DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/4Gy1bH8I6G7NueDZT6YUbDfOf-8.roa
Signing time: Sat 01 Jan 2022 13:05:56 +0000
ROA not before: Sat 01 Jan 2022 13:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207046
IP address blocks: 213.232.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13756292 (0xd1e784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Validity
Not Before: Jan 1 13:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e06cb56c7f08e86ecdb9e0d94fa6146c37ce7fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:de:62:96:91:9a:b1:ca:59:34:2f:c6:64:
6c:fb:04:16:bc:84:e6:5d:26:d2:e1:c5:23:e4:8a:
53:bb:fb:c7:ac:4b:a5:a5:29:43:e2:7b:84:18:42:
92:0c:a7:f1:47:8e:a4:bc:a1:72:79:ac:a0:47:c9:
70:70:48:3c:fe:a6:54:75:2f:1b:37:65:84:d5:05:
53:86:41:ed:d4:ad:37:11:61:1c:5f:58:57:6e:93:
d9:fe:e4:0d:98:35:e7:05:dd:be:c1:ac:93:00:2e:
e3:45:f8:9e:a9:1f:46:02:d3:c0:3a:3c:bf:e4:0b:
87:24:98:f7:4c:6b:48:26:36:cd:3c:b9:60:2a:4e:
23:8a:fc:36:11:e1:7d:73:3c:f6:1c:d7:b1:e7:f7:
ca:49:d3:b2:c9:a2:dd:27:ce:90:bc:16:b3:95:5c:
34:d9:2f:ee:20:c8:65:fa:6c:1b:25:e2:df:34:7d:
4d:37:52:9e:d0:2f:d2:01:18:b5:01:08:22:a0:1b:
df:3f:b5:30:4d:e1:b2:61:9c:63:26:05:6d:d7:07:
39:74:66:ae:40:83:a0:e2:45:d0:ae:9f:2a:80:3e:
98:db:6b:86:6f:f8:28:02:47:24:d0:79:f5:56:60:
04:da:f0:de:8b:94:b3:b5:5e:57:d6:cb:ec:dc:9e:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:B5:6C:7F:08:E8:6E:CD:B9:E0:D9:4F:A6:14:6C:37:CE:7F:EF
X509v3 Authority Key Identifier:
keyid:DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/4Gy1bH8I6G7NueDZT6YUbDfOf-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
52:17:91:31:04:f7:cd:a3:18:c2:f4:e7:ea:d7:04:de:e7:4f:
52:70:94:c2:7b:29:98:c5:71:4b:2a:3e:31:c4:84:34:7b:ff:
64:2a:90:16:5d:c3:b0:bd:e7:20:a6:82:de:20:d2:51:ae:a8:
4e:81:58:2d:09:46:18:c4:9d:5f:80:4e:95:53:5a:58:a6:89:
15:29:a8:03:d4:a6:d3:fd:fd:d8:7a:8d:06:c4:5f:d8:d1:66:
4c:27:c8:01:ae:2c:32:43:a4:b6:c1:eb:3b:98:5f:50:74:63:
9b:b4:3c:34:73:f9:28:27:1d:27:f0:52:f2:74:c3:3e:af:bd:
bd:15:93:6b:ab:40:f0:e9:17:68:e2:d3:24:e6:96:87:a2:3e:
52:8e:43:f8:ab:d7:d1:2c:17:14:50:89:3b:2e:86:c2:ab:3d:
5e:ed:f7:7f:72:1e:f4:01:fb:bb:ea:9b:e8:23:19:88:83:e9:
54:73:13:af:f3:32:ca:f6:df:34:3e:13:49:6d:7d:96:5a:6d:
b4:17:da:4f:08:b1:e9:c7:fe:8b:1e:df:46:c3:c7:53:62:8f:
3d:20:7e:46:35:e5:9f:7f:28:a4:29:9e:4f:ec:5f:a7:3b:35:
f9:4b:a3:b1:76:35:37:39:98:20:83:44:72:79:71:69:31:ee:
26:c5:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:49 2023 by rpki-client on console.sobornost.net