Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/3uqyV8qvbv4M0AkUOFDziy8GHlM.roa
File: 3uqyV8qvbv4M0AkUOFDziy8GHlM.roa (raw, json)
Hash identifier: j+eR+nOz6OtxAcZA3BXjHQXpmesbzqYla55kHo/lFwY=
Subject key identifier: DE:EA:B2:57:CA:AF:6E:FE:0C:D0:09:14:38:50:F3:8B:2F:06:1E:53
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01909BDCC1A642E6178EA0105321C159DD10
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/3uqyV8qvbv4M0AkUOFDziy8GHlM.roa
Signing time: Wed 10 Jul 2024 08:57:34 +0000
ROA not before: Wed 10 Jul 2024 08:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 185.51.44.0/22 maxlen: 24
185.51.44.0/23 maxlen: 23
185.51.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:dc:c1:a6:42:e6:17:8e:a0:10:53:21:c1:59:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jul 10 08:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=deeab257caaf6efe0cd009143850f38b2f061e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:ce:3f:7f:2f:4c:e2:e3:b2:3c:5f:af:2e:
b2:b1:b3:0d:1b:85:42:35:e5:1f:38:03:49:65:3d:
31:3e:22:c5:e1:15:d3:d5:35:d6:52:ba:f7:f8:ad:
c8:8e:58:51:51:77:c9:84:0d:f9:e9:22:68:5f:6e:
4e:f7:f0:8a:9e:e1:9d:f4:5e:56:fe:21:02:e2:a8:
92:39:e4:f9:44:c8:58:b4:c0:85:80:a0:87:ff:91:
e9:3d:6a:3a:d1:71:98:04:a8:0d:8b:39:52:a3:47:
3d:54:72:cb:82:b8:fd:1f:b0:51:97:8e:86:3d:5e:
a7:39:a8:c9:13:70:5d:b1:42:00:e3:dd:6e:7f:ac:
66:5d:ad:00:3f:3b:0e:39:21:86:2f:1f:1a:38:d7:
f7:61:1a:fc:e2:54:4d:cb:0f:3f:98:11:cf:42:d9:
41:fe:f7:c8:6e:27:47:c1:41:07:ff:7c:f1:1e:ac:
f0:d6:71:e1:fa:7a:a9:67:c4:19:35:2c:36:51:5a:
c0:f1:0f:69:37:39:02:e6:b6:dd:dd:87:33:d0:52:
ca:dd:15:67:5a:e0:b6:e5:f9:17:4b:41:44:48:7b:
e2:84:7f:50:e3:d8:3a:f1:b8:c6:d9:a9:b1:d8:98:
d2:55:aa:e4:66:42:02:3b:1e:1a:c3:ac:95:a6:89:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EA:B2:57:CA:AF:6E:FE:0C:D0:09:14:38:50:F3:8B:2F:06:1E:53
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/3uqyV8qvbv4M0AkUOFDziy8GHlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:55:46:ff:af:d7:36:11:c5:23:cc:37:53:1b:1f:42:a6:2a:
d7:33:a0:3c:af:15:11:8f:32:70:36:14:06:76:8d:cf:6b:05:
b2:e6:3e:b4:dc:81:77:83:11:11:9e:60:07:18:17:81:af:9f:
b2:19:4c:07:79:3f:1a:d8:a8:46:22:6e:b5:73:6a:b0:fc:63:
4f:47:0f:7b:c3:44:e5:a4:45:0a:9d:e9:17:21:93:0e:9f:95:
ca:91:53:80:c3:2d:58:90:5f:58:ae:73:75:e3:3d:01:17:50:
dc:37:6b:fa:75:b3:84:35:be:c1:9a:22:a8:cc:00:60:67:41:
48:9b:66:d6:82:a0:a0:a1:0b:83:8d:2d:98:d1:f5:c8:a7:f2:
49:a3:38:52:87:cf:ca:98:a1:bb:cb:f1:3b:27:63:d4:c5:56:
a1:37:2e:54:cf:24:81:a4:0d:c8:d2:76:d9:e2:5a:39:3e:95:
9f:8c:4e:7c:a7:0f:e3:4d:0f:e9:4c:6d:b4:b5:54:d0:27:a4:
97:a9:03:bc:2b:ea:be:eb:95:31:7a:f0:34:b1:de:bc:cd:29:
84:eb:0b:05:9e:b4:aa:b9:3b:c8:f0:51:b6:91:0c:60:16:98:
15:a3:ad:17:1a:5e:a6:46:5d:1b:d9:85:4c:67:ea:dc:c8:23:
c8:fa:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:41 2024 by rpki-client on console.sobornost.net