Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/Xy5deauUFqEduFjRLC560MHZl7s.roa
File: Xy5deauUFqEduFjRLC560MHZl7s.roa (raw, json)
Hash identifier: D41Ctqf/HZFWrlNZD9l+qPwdktjj9RCV+kKrO1e4MCU=
Subject key identifier: 5F:2E:5D:79:AB:94:16:A1:1D:B8:58:D1:2C:2E:7A:D0:C1:D9:97:BB
Certificate issuer: /CN=1563492884a21a9b3cc2e3a9a0966669e1daac8f
Certificate serial: 01825C4775B94EEE8C2293F69D002477DA6C
Authority key identifier: 15:63:49:28:84:A2:1A:9B:3C:C2:E3:A9:A0:96:66:69:E1:DA:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWNJKISiGps8wuOpoJZmaeHarI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/Xy5deauUFqEduFjRLC560MHZl7s.roa
Signing time: Tue 02 Aug 2022 01:59:23 +0000
ROA not before: Tue 02 Aug 2022 01:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 185.203.233.0/24 maxlen: 24
185.203.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:47:75:b9:4e:ee:8c:22:93:f6:9d:00:24:77:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1563492884a21a9b3cc2e3a9a0966669e1daac8f
Validity
Not Before: Aug 2 01:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f2e5d79ab9416a11db858d12c2e7ad0c1d997bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:9d:6b:e6:42:3b:0f:8f:d6:f5:36:e2:cb:
7d:7e:9a:dc:00:52:f9:22:a1:a5:3d:e2:46:22:33:
3a:52:14:a9:23:6d:b3:6e:25:de:07:c2:81:a3:83:
48:e4:c8:89:c1:4f:27:0f:d8:f8:2b:97:31:71:48:
f9:af:73:dd:c8:aa:1e:77:03:25:88:4c:d9:37:b3:
a1:75:06:90:d8:a7:93:0a:74:bd:56:95:03:74:e5:
24:1e:30:60:92:ee:17:e1:53:5a:40:25:0d:ea:8a:
a2:f5:18:93:88:bb:68:77:83:83:df:5d:25:b5:c4:
28:4d:d7:4d:53:df:d0:9a:7f:ec:cf:19:9e:f8:6e:
03:7b:b7:79:23:17:ef:51:6d:00:c9:62:06:06:68:
7f:85:51:bb:56:57:6f:27:db:97:71:05:33:e4:07:
ec:f7:b6:60:ae:c5:2b:e9:1c:26:8c:c6:55:b9:6c:
ee:e0:6a:a3:44:e2:93:f9:73:e0:3a:f7:9a:7e:da:
24:11:53:ca:0a:c7:09:65:f1:f3:a1:29:0a:6f:9f:
56:86:34:8f:1c:35:c5:d2:cc:f0:64:87:63:5b:71:
5c:dd:ab:9b:8d:b0:bc:9d:e8:05:21:81:b0:25:21:
09:d3:92:e1:4d:be:83:3b:da:38:1b:1f:96:83:21:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:5D:79:AB:94:16:A1:1D:B8:58:D1:2C:2E:7A:D0:C1:D9:97:BB
X509v3 Authority Key Identifier:
keyid:15:63:49:28:84:A2:1A:9B:3C:C2:E3:A9:A0:96:66:69:E1:DA:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWNJKISiGps8wuOpoJZmaeHarI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/Xy5deauUFqEduFjRLC560MHZl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8a5f47-f1d0-45ea-ab49-2fef21e88807/1/FWNJKISiGps8wuOpoJZmaeHarI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.233.0-185.203.234.255
Signature Algorithm: sha256WithRSAEncryption
32:ca:c5:2e:b1:f9:79:d1:fe:08:68:b3:b8:25:b3:0e:c0:2b:
55:a0:a8:1c:ce:f6:e2:2e:15:88:ee:87:52:01:47:50:59:b4:
ea:ea:d8:50:f8:af:98:7b:7e:a1:0c:05:2f:30:fa:61:d8:cb:
46:a1:67:76:79:f6:5e:25:37:c3:03:93:47:47:be:af:44:03:
b9:69:6b:5e:38:2f:5e:a6:5d:0e:4c:0b:e3:18:c2:e6:d8:d1:
a9:ae:b7:40:8c:d6:ac:33:07:eb:40:dd:a9:80:2c:e7:60:f0:
f9:0f:76:9f:f2:18:c5:53:6e:8b:32:f4:53:1d:8d:94:95:b0:
43:2d:2b:0f:61:e9:c3:58:b5:5a:f1:49:a4:08:9c:9b:f8:a8:
40:d8:c7:c5:7e:03:d5:ab:f7:e7:d8:a9:44:fd:80:fd:84:f1:
eb:2d:6f:cc:94:76:27:6b:fd:96:84:00:2a:9a:ba:e3:b5:02:
f3:96:c6:01:cd:fe:7d:3a:63:83:16:1e:22:5b:e6:93:0e:be:
3b:2c:01:75:fa:c4:01:71:ef:97:a6:55:d4:76:12:81:d6:0b:
87:87:45:7e:0b:1f:09:4e:ce:54:ed:9e:cc:68:25:c3:a3:30:
4b:a5:1d:4a:71:a4:4d:6a:fa:f1:36:44:2f:d5:55:e6:c0:50:
2e:b8:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net