Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/MAS1wgwoMPlbpYMcKIf1vMkalcA.roa
File: MAS1wgwoMPlbpYMcKIf1vMkalcA.roa (raw, json)
Hash identifier: cnTDsb/W/uBxT6/WP3R+jsxMCYrBXxb45tvO+YD2EGk=
Subject key identifier: 30:04:B5:C2:0C:28:30:F9:5B:A5:83:1C:28:87:F5:BC:C9:1A:95:C0
Certificate issuer: /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial: 01851C9C2BF93AA521E4FDA5DC10EF1150F5
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/MAS1wgwoMPlbpYMcKIf1vMkalcA.roa
Signing time: Fri 16 Dec 2022 20:24:34 +0000
ROA not before: Fri 16 Dec 2022 20:24:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:9c:2b:f9:3a:a5:21:e4:fd:a5:dc:10:ef:11:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Validity
Not Before: Dec 16 20:24:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3004b5c20c2830f95ba5831c2887f5bcc91a95c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:12:c9:c3:a7:f7:83:0a:cb:23:e7:f9:03:
a8:1f:50:e6:f2:43:0d:42:81:c4:19:b5:d2:86:89:
de:9b:03:b9:ce:43:9e:8f:ae:b4:8e:a9:55:88:3b:
e9:13:9b:f0:0e:87:d7:55:8f:26:2a:07:f0:c6:05:
8e:81:eb:5b:e4:df:b8:f2:46:93:59:f4:da:5f:4f:
23:d9:3e:4b:67:59:19:93:04:1d:07:43:56:93:85:
f7:d2:11:6c:40:b1:6f:d1:e4:92:29:eb:4f:8f:bc:
a3:8e:b5:7a:8a:d5:2c:1c:0f:38:93:4e:c5:7e:d1:
68:8f:eb:84:e9:b4:2d:1d:55:c3:b4:9c:1d:6d:18:
a5:23:93:fd:d9:63:61:06:04:d2:97:72:68:7a:b5:
89:45:11:ed:6f:f6:8b:06:5e:cb:ec:03:9f:60:4f:
c3:4e:1e:c7:c5:b7:ab:3f:a4:8d:53:bb:11:be:2b:
b6:cc:af:91:2c:73:72:46:c1:17:f5:b7:6b:56:22:
b6:1b:71:f3:78:74:c0:06:82:70:94:95:ae:38:47:
86:c9:c8:50:de:7c:34:42:0e:28:4f:c7:80:33:18:
5d:80:a7:71:6a:87:8f:07:e1:e4:dd:49:d3:ea:22:
e8:c0:cb:27:ec:fe:42:89:cd:cb:55:f9:02:0e:6f:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:B5:C2:0C:28:30:F9:5B:A5:83:1C:28:87:F5:BC:C9:1A:95:C0
X509v3 Authority Key Identifier:
keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/MAS1wgwoMPlbpYMcKIf1vMkalcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1c:eb:01:29:b1:eb:05:30:58:fe:ed:ac:f7:11:96:67:ce:
fa:14:36:45:0d:0e:0c:d7:b5:3c:0b:37:3c:aa:04:1b:cb:90:
43:a8:4b:e4:a6:91:cb:d3:0c:35:8d:5e:b4:8e:b8:04:79:c2:
d4:66:dd:86:cb:81:4b:e4:ff:1b:45:1a:34:53:67:3b:9a:eb:
2f:f6:84:a8:a8:e4:82:b7:84:f4:65:1a:54:65:dc:27:a4:2c:
59:d8:4f:0a:88:b3:45:a8:7d:48:c4:b9:ed:d7:fe:91:95:7f:
0e:ad:13:b2:b0:ec:e6:9d:5a:c6:ea:6a:36:38:dc:a1:a1:44:
5a:b3:fc:5c:5f:02:d2:67:bf:cb:85:5f:90:dc:fc:24:9c:3a:
74:5f:a5:46:7a:61:2f:31:a8:15:29:4b:3b:c4:0d:18:b6:15:
84:f5:0b:86:1d:31:b1:16:2a:a9:bb:8f:51:00:5d:de:3c:fa:
c5:66:93:a3:a3:c9:d7:d8:41:7d:29:fc:87:c6:f3:e4:24:fc:
b8:8c:d5:4f:17:10:d0:64:72:d5:71:54:18:95:00:9b:44:45:
ce:00:6c:a3:31:42:03:72:3d:f0:93:5c:95:24:58:4d:36:2b:
11:4c:29:18:01:8d:a8:d3:62:fd:cf:a8:5c:29:bb:d1:77:c0:
9a:87:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net