Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/IVng_teJpnxqGfTt6HkbpWolaws.roa
File: IVng_teJpnxqGfTt6HkbpWolaws.roa (raw, json)
Hash identifier: Yv+LCQgKNeQk+bqh6Q/S33IbKdH0dj905Svsfqq4g6s=
Subject key identifier: 21:59:E0:FE:D7:89:A6:7C:6A:19:F4:ED:E8:79:1B:A5:6A:25:6B:0B
Certificate issuer: /CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Certificate serial: 01856D6F7E187ADD1707E8D8A9A6759F446A
Authority key identifier: DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/IVng_teJpnxqGfTt6HkbpWolaws.roa
Signing time: Sun 01 Jan 2023 13:05:01 +0000
ROA not before: Sun 01 Jan 2023 13:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 213.232.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:7e:18:7a:dd:17:07:e8:d8:a9:a6:75:9f:44:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Validity
Not Before: Jan 1 13:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2159e0fed789a67c6a19f4ede8791ba56a256b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:98:e9:7d:bf:17:cd:a2:b5:88:7f:f9:75:
da:6f:8a:04:2c:f7:67:d3:72:4c:05:8c:08:ab:b2:
2e:24:f7:6c:e3:d1:74:57:c8:63:cc:f2:94:4e:63:
13:e3:1f:51:f3:1c:20:ea:5a:21:34:12:e6:02:03:
0b:23:69:3d:27:57:8c:84:06:a0:85:0a:69:3b:b2:
5a:ce:94:2b:87:4f:ee:63:53:67:91:b9:1b:e5:cf:
df:7a:d9:22:8e:4d:3f:9d:16:be:5b:75:37:d6:d2:
99:c1:aa:6e:b1:bb:b3:08:b5:07:26:29:b7:40:2b:
8e:8e:fd:82:da:b7:e2:39:4b:0d:11:78:b4:7f:de:
6b:2c:ff:46:5e:0d:30:4a:94:32:57:90:e1:b1:73:
05:22:27:54:f5:82:f5:34:db:4e:f3:a4:89:e4:a7:
e9:a6:c7:0d:9f:cb:8e:4f:cc:ba:d1:83:19:b7:21:
26:3e:7b:47:05:7a:ac:c8:f1:71:67:cc:2b:e6:0c:
99:e7:fb:c6:bb:77:21:7a:b0:c5:ba:c6:30:d9:27:
2d:cb:4d:32:12:e5:19:7b:ec:20:e5:31:fc:e0:44:
65:f8:ab:b7:f8:b2:31:c8:8b:c1:7d:88:45:3f:0f:
5b:a8:15:00:ab:6e:e0:01:97:5f:68:fa:c8:25:a9:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:E0:FE:D7:89:A6:7C:6A:19:F4:ED:E8:79:1B:A5:6A:25:6B:0B
X509v3 Authority Key Identifier:
keyid:DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/IVng_teJpnxqGfTt6HkbpWolaws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
66:99:82:5a:4d:78:1f:f0:79:13:96:ea:d7:ab:a2:26:2d:4e:
2f:6b:aa:82:ef:57:24:89:24:ac:5f:8b:43:37:6a:72:8e:f8:
c3:d3:c8:05:f5:d2:fd:2b:1f:85:3b:3e:e5:49:57:dc:ae:42:
87:3c:e9:4e:ce:f4:b6:1e:da:cd:d3:e2:a0:3e:9a:73:a4:f1:
bc:7e:4f:68:eb:80:50:c1:a5:aa:19:dd:1b:45:20:30:51:49:
c8:cb:e5:c0:c5:f5:c1:56:b7:4e:b7:50:97:1f:cb:43:12:b6:
2c:49:4a:ce:6d:cd:f3:e5:1e:aa:ef:af:42:e0:77:17:24:12:
65:98:30:98:a7:30:22:5a:28:48:7e:8a:05:64:cd:f7:19:c2:
b1:b8:57:63:1a:f6:a6:6d:d5:ff:df:03:e0:6c:76:b8:7d:1b:
16:73:d2:8d:a0:54:1c:38:1d:10:08:75:be:47:44:fe:02:ca:
af:d1:c3:a1:61:44:10:63:2b:7a:b6:ee:38:95:11:e8:73:bf:
bf:90:6c:13:e2:20:2d:f6:48:4d:64:d0:0b:9e:b0:db:e1:ea:
84:3b:0e:69:3f:13:50:55:66:ca:49:35:53:b2:15:ac:aa:07:
e3:8e:d6:07:8f:4d:8b:10:5f:d6:33:c6:00:78:76:2a:e6:16:
a7:ab:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:49 2023 by rpki-client on console.sobornost.net