Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/DLH4FP5OtTNxInIlbmFS2dedheo.roa
File: DLH4FP5OtTNxInIlbmFS2dedheo.roa (raw, json)
Hash identifier: 872UCwRqMrh8OwBIA3Sv2wwyasUFpO3mna/NmHhf0tM=
Subject key identifier: 0C:B1:F8:14:FE:4E:B5:33:71:22:72:25:6E:61:52:D9:D7:9D:85:EA
Certificate issuer: /CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Certificate serial: 01792CD8
Authority key identifier: 5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/DLH4FP5OtTNxInIlbmFS2dedheo.roa
Signing time: Sat 01 Jan 2022 05:53:09 +0000
ROA not before: Sat 01 Jan 2022 05:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206417
IP address blocks: 84.205.180.0/23 maxlen: 24
91.192.225.0/24 maxlen: 24
84.205.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24718552 (0x1792cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Validity
Not Before: Jan 1 05:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cb1f814fe4eb533712272256e6152d9d79d85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:44:09:99:c2:0e:9a:45:18:e4:c2:0c:c3:
39:11:4b:ee:4b:f4:02:00:ae:f2:e5:eb:04:55:6a:
70:3d:bb:32:0d:63:45:c8:77:1d:4d:58:ce:a4:92:
18:2f:43:f3:f1:9d:39:f9:30:4f:bf:44:6b:57:a5:
95:8a:29:23:c8:3e:c2:a7:1c:81:65:18:26:4f:ce:
07:24:3d:db:6b:d3:7c:46:bd:a1:01:68:fa:bb:8c:
83:2b:16:05:c4:a9:17:20:82:01:38:79:0b:02:8e:
06:17:13:8c:03:c1:5b:62:bf:4a:96:1b:d7:39:4c:
33:46:75:63:d1:32:83:b2:e8:f6:5c:72:6f:ae:8b:
12:48:c9:56:06:44:fe:f2:9e:2f:b8:6b:e4:26:9b:
aa:d8:8c:ed:73:90:9e:01:55:55:45:5d:a4:50:cb:
41:63:48:eb:29:1b:63:60:c4:f6:3b:b9:1f:1a:b6:
5d:12:69:27:f9:da:59:fa:ee:30:f0:7e:b7:6c:4f:
62:b0:1d:8f:a3:49:27:16:90:c9:dc:2b:2a:84:fd:
99:18:87:8f:aa:3e:8c:b9:29:8e:fe:52:1f:a3:4b:
04:61:be:86:0d:9d:37:f4:dd:77:50:5e:8f:6e:38:
40:34:bc:6d:a4:4d:e1:7c:04:1b:c4:3b:b2:6f:98:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:F8:14:FE:4E:B5:33:71:22:72:25:6E:61:52:D9:D7:9D:85:EA
X509v3 Authority Key Identifier:
keyid:5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/DLH4FP5OtTNxInIlbmFS2dedheo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.167.0/24
84.205.180.0/23
91.192.225.0/24
Signature Algorithm: sha256WithRSAEncryption
56:82:df:7f:fd:d8:f2:18:a7:8b:09:25:c5:f3:21:4c:3d:fd:
c9:a8:1c:a8:be:8b:25:75:eb:d8:c5:17:88:61:81:28:e7:42:
84:2c:96:a5:97:15:c0:38:c4:08:5c:a2:47:7b:96:58:76:c9:
0b:93:56:17:14:80:88:0e:71:86:af:28:dd:8d:33:a2:34:90:
0c:30:d9:75:cd:b7:5b:c6:a9:05:f7:b9:60:9d:ad:54:be:e2:
e0:a3:2e:fa:1f:40:42:ea:82:ae:23:08:42:f0:bc:97:d4:40:
dc:f5:b5:c9:91:54:50:29:cd:d9:83:9d:82:08:96:29:58:e6:
c6:cf:a5:5d:95:8c:35:21:14:55:6c:a2:26:2a:68:fa:d2:fd:
9e:3b:38:f1:e6:c9:f2:f6:24:75:1f:92:04:5c:1a:ee:41:b8:
f2:11:46:59:93:f9:0d:84:80:4b:22:99:54:45:29:44:21:01:
9d:bc:db:95:47:dd:68:64:3f:85:3e:fd:f6:70:58:88:51:b2:
7d:9e:36:c1:e8:e1:d1:ca:87:8f:1b:d5:a2:f2:ef:4b:c1:59:
d2:e0:eb:1e:53:9f:59:44:14:b4:63:8d:b3:66:2c:0e:f1:21:
b6:d9:f1:a8:a2:03:cf:84:ff:f5:cc:b7:55:fa:f4:ce:ff:ae:
90:0c:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net