Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/e9QqvKtqs1vM4KiAOLdLEqMEkww.roa
File: e9QqvKtqs1vM4KiAOLdLEqMEkww.roa (raw, json)
Hash identifier: SYRAR6VV2sD3Ydm3GI3PZKLM4TMORPy5yYYR1Vn8xow=
Subject key identifier: 7B:D4:2A:BC:AB:6A:B3:5B:CC:E0:A8:80:38:B7:4B:12:A3:04:93:0C
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 018318A66CD8B922429106080332BCD3FA43
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/e9QqvKtqs1vM4KiAOLdLEqMEkww.roa
Signing time: Wed 07 Sep 2022 15:51:43 +0000
ROA not before: Wed 07 Sep 2022 15:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.151.178.0/24 maxlen: 24
185.151.177.0/24 maxlen: 24
185.151.179.0/24 maxlen: 24
185.126.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:a6:6c:d8:b9:22:42:91:06:08:03:32:bc:d3:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Sep 7 15:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd42abcab6ab35bcce0a88038b74b12a304930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:32:db:48:3b:bc:d8:f9:a0:38:a0:ed:bd:
05:3d:fa:4d:0e:22:6c:c8:d4:95:16:3d:87:32:7b:
72:24:fd:4d:80:8b:8e:cd:8c:40:02:3b:3f:4b:cf:
a0:9c:ee:d8:58:94:59:ea:e1:6d:fa:e4:6a:3a:34:
22:8f:d4:37:19:11:f5:08:ba:f7:00:47:f7:4f:5d:
e3:02:87:1b:44:4d:92:26:c8:1a:c1:78:12:9e:8c:
0a:8a:cd:42:63:5f:d4:74:10:8c:36:d4:fd:1d:0c:
ff:a9:aa:59:25:dc:2d:7a:2f:59:b2:0f:08:79:08:
88:0a:c7:9a:55:87:0f:36:5b:d9:2d:db:ce:b1:f1:
90:22:9d:ce:15:27:5e:a4:ff:91:a8:1b:9d:1a:86:
b9:bc:32:fc:a0:04:6b:2c:41:87:37:49:f7:b2:63:
1c:b6:d4:b8:4e:b5:ee:e9:30:ab:32:de:99:f2:d7:
7c:c1:ce:02:60:6a:64:70:d0:65:be:c2:93:d4:21:
10:66:ed:32:12:74:cd:a7:c3:98:7e:78:15:81:5b:
ce:f0:05:ab:6f:98:02:07:f2:b8:85:e7:a1:b6:23:
0c:0d:98:43:fe:db:9d:ff:62:bc:58:e1:55:b3:17:
9a:dd:65:f4:29:fb:20:a7:2d:e8:4a:a1:e3:b3:65:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:2A:BC:AB:6A:B3:5B:CC:E0:A8:80:38:B7:4B:12:A3:04:93:0C
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/e9QqvKtqs1vM4KiAOLdLEqMEkww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.235.0/24
185.151.177.0-185.151.179.255
Signature Algorithm: sha256WithRSAEncryption
43:96:1a:33:f0:84:92:80:df:5d:8d:7c:ec:ca:18:fd:ed:b2:
98:2d:4d:a5:cd:f8:1f:6e:83:46:27:de:a5:8a:3a:c1:f7:4b:
16:0e:d8:26:8f:8d:ea:6f:aa:b1:77:00:0e:0c:d4:6c:5f:af:
68:e5:2e:4d:d3:9a:0a:91:02:4f:15:f5:04:24:f2:43:e4:f0:
6b:72:44:60:cd:e2:2e:8b:90:ff:84:06:45:19:df:5e:8e:56:
3a:27:bf:aa:7b:65:d2:c5:63:93:fa:be:75:06:a3:27:c1:50:
04:cb:38:6e:f5:63:46:37:d6:e3:5d:de:b2:c3:20:2e:24:8d:
9f:36:0c:ac:2a:5b:6e:29:49:7d:80:f5:cf:f3:2c:63:d1:00:
f5:61:9c:80:6d:19:11:86:ea:68:e4:44:b0:ef:ad:33:5c:59:
b6:16:ef:99:aa:78:79:fe:cb:53:48:60:42:23:53:7e:7c:07:
7a:79:05:86:85:06:67:ce:52:ad:33:75:66:cf:8d:06:c3:8a:
93:96:ae:57:e8:3f:f5:d9:84:a5:53:9e:2f:b7:c1:45:a2:b6:
80:1c:e1:f6:cf:d5:13:67:0f:b5:06:75:b1:ce:9f:b3:7d:08:
5d:c7:d1:b4:99:a6:d4:74:30:d7:86:6f:9f:48:dc:5b:57:0e:
fd:c4:20:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:32 2023 by rpki-client on console.sobornost.net