Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa
File: ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa (raw, json)
Hash identifier: MDlSKIEnwZnHcClE0/IidM/980MMkhPGrzWnRvjCtq4=
Subject key identifier: 9E:D3:BC:8B:51:DC:1E:16:98:DC:1A:66:8C:BE:0F:0B:35:7E:3A:42
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018CC6B7E8ECD1645807673F194B9AED82FF
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa
Signing time: Mon 01 Jan 2024 20:29:50 +0000
ROA not before: Mon 01 Jan 2024 20:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206756
IP address blocks: 185.175.116.0/24 maxlen: 24
185.175.116.0/22 maxlen: 22
185.175.117.0/24 maxlen: 24
185.175.118.0/24 maxlen: 24
185.175.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e8:ec:d1:64:58:07:67:3f:19:4b:9a:ed:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 20:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ed3bc8b51dc1e1698dc1a668cbe0f0b357e3a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:c9:31:79:0c:6c:79:05:fd:77:aa:ee:c7:
03:ff:f7:a5:3d:c6:9e:b6:10:d3:38:24:63:d7:6a:
3a:72:c6:9b:45:88:58:a3:18:c6:64:ab:1b:d0:12:
03:f7:ab:56:a4:3f:06:a5:b8:68:b4:8b:90:12:e1:
c9:be:9c:a6:0c:e1:87:f2:e3:30:80:86:2b:6e:9f:
2c:72:af:97:d4:60:cd:3a:38:41:de:6a:a6:a7:e4:
66:e8:5d:ba:cc:5b:b3:7c:21:24:13:ab:e2:aa:9f:
7b:34:92:ff:fb:72:5f:87:b7:63:b4:bb:a0:69:9f:
60:a9:29:24:8f:a7:54:ab:9a:38:5e:4d:ab:b4:d6:
56:3b:9f:ed:69:32:62:8b:78:a4:0f:22:85:71:5f:
c8:bb:4b:4f:c8:6b:5c:11:86:25:70:bf:18:75:68:
04:d8:c0:03:d4:63:9d:1d:5b:74:20:60:d1:a2:69:
e5:cf:a1:6d:59:a5:49:46:89:c5:fb:f6:d8:61:2d:
6e:bd:d3:f9:52:c7:03:38:f8:4f:ce:35:6a:96:24:
55:8b:c2:f5:63:5f:37:43:59:32:96:cd:94:69:33:
70:5f:ee:1b:f4:39:68:2c:fe:0b:e9:c8:be:c3:c0:
64:0d:4d:5c:38:2e:ba:f4:bf:1d:c6:fc:92:a6:8a:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:BC:8B:51:DC:1E:16:98:DC:1A:66:8C:BE:0F:0B:35:7E:3A:42
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:24:24:8d:07:2d:a8:dc:e6:66:7b:51:50:11:5f:ce:d6:a2:
6d:92:d1:67:e4:bf:cc:d3:89:ff:40:f9:3a:ea:1f:0c:ff:77:
e0:7e:07:f0:ab:9f:60:76:9e:c4:32:71:4f:93:78:00:a0:71:
7a:56:0f:25:ad:90:5f:e4:b7:cb:28:67:cb:69:80:b6:5c:d9:
c4:9f:7e:df:a2:6a:f5:08:a4:8d:48:1b:2f:c0:b9:bc:f6:cd:
ea:88:20:f4:73:a1:1c:07:99:84:64:fa:4b:fd:08:ee:77:69:
49:de:10:fa:7e:3f:3b:e0:7b:af:4f:56:fb:45:da:d5:2e:68:
ea:5d:7a:e9:01:4a:f7:2b:e1:c7:dc:8a:08:38:3b:ce:bb:40:
95:97:8f:82:0f:1e:6d:8f:31:75:41:39:7a:20:19:81:91:85:
7d:5b:49:a6:9f:f0:81:91:db:fd:b4:82:ae:59:95:b9:61:8a:
05:08:d9:8d:64:c4:3b:51:8b:ba:fa:af:fb:81:29:3a:b6:2e:
ad:11:3d:ae:a8:86:89:ed:46:8c:19:70:d0:3b:10:4c:ac:b3:
bd:4b:44:7d:20:21:55:1b:0d:84:36:41:8b:d0:4c:09:10:ce:
d9:59:cb:51:6b:81:d5:83:26:d7:5d:59:5b:aa:5f:57:54:d7:
89:e7:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net