Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/rI_l47ab8RsyXwibK1dB59SXwXk.roa
File: rI_l47ab8RsyXwibK1dB59SXwXk.roa (raw, json)
Hash identifier: 851S7DLomEtRUFmkm1UycQ+m8PvFk1xpowKUofUM7fo=
Subject key identifier: AC:8F:E5:E3:B6:9B:F1:1B:32:5F:08:9B:2B:57:41:E7:D4:97:C1:79
Certificate issuer: /CN=084b2408adf9480e8268b7733be48127433ce4d4
Certificate serial: 01856BAEA32A0CC54AF00D47645153E790B0
Authority key identifier: 08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/rI_l47ab8RsyXwibK1dB59SXwXk.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a3:2a:0c:c5:4a:f0:0d:47:64:51:53:e7:90:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b2408adf9480e8268b7733be48127433ce4d4
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac8fe5e3b69bf11b325f089b2b5741e7d497c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:80:f3:da:e1:dd:64:d6:4b:79:29:86:31:e6:
71:0e:6e:ba:58:68:0d:1c:12:7d:50:41:a3:15:4f:
e6:d3:75:3e:5e:67:fa:c1:4b:cb:96:79:b4:24:62:
8e:61:5e:8d:9a:92:c5:dd:11:20:0f:4e:b6:2b:23:
1a:ba:f7:1f:42:f4:98:ae:f2:d2:a6:22:76:a6:28:
b6:4a:24:82:94:fe:f8:9e:52:ab:13:c9:1d:bd:f9:
60:b1:a5:8b:5f:17:e3:8c:99:66:7b:4f:36:76:ea:
23:c5:02:5f:2b:70:26:c4:6a:12:1f:db:a9:04:83:
1e:0f:46:e9:a4:dd:a7:88:8a:96:64:7d:66:51:70:
5b:c5:88:fd:ca:64:23:1e:a4:7d:ce:bf:93:fa:f0:
49:0a:b8:05:5f:55:a1:4b:79:31:3f:37:52:dc:b1:
85:42:cc:4c:3c:8d:2b:12:cf:12:60:48:14:0c:3f:
86:60:0c:f2:5e:7f:19:ca:67:18:e8:6f:ab:8c:cb:
b5:4e:a4:71:f7:fb:d8:69:20:67:db:9a:40:9e:d1:
a5:1b:0a:26:68:0b:ea:3e:44:0b:6c:98:5d:88:48:
fd:59:49:22:2d:05:4e:53:70:1e:a2:88:49:8c:31:
88:39:41:08:b3:93:3a:49:2f:1d:7f:c1:c7:a2:dd:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:E5:E3:B6:9B:F1:1B:32:5F:08:9B:2B:57:41:E7:D4:97:C1:79
X509v3 Authority Key Identifier:
keyid:08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/rI_l47ab8RsyXwibK1dB59SXwXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/CEskCK35SA6CaLdzO-SBJ0M85NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.224.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5b:87:0d:47:20:4c:20:8c:c3:15:45:c1:8c:06:51:ec:bb:
fc:4b:b6:56:61:7b:4d:58:03:b2:4f:d1:2e:2f:28:24:b8:d8:
60:d5:8d:d1:9f:bc:91:9d:81:cc:e9:af:8d:8f:6c:fc:45:6b:
9e:88:d5:a6:70:66:d2:03:ee:b9:19:6b:9a:05:42:35:c3:e8:
90:6b:fc:24:d5:c3:31:46:37:3f:42:34:54:3e:d2:fe:c8:67:
30:97:40:b6:22:6c:45:64:bc:fb:ff:80:6d:b4:d8:8c:9b:76:
48:d4:76:0c:31:81:67:18:31:bc:c7:31:9b:ec:77:8e:6a:de:
81:bd:ff:95:38:23:81:f5:5b:ab:e3:dd:c4:24:f6:7e:32:0f:
bf:6c:dd:4e:84:6a:5b:77:3f:d2:bd:bc:c3:a4:f3:7e:43:63:
09:b7:07:3e:d0:57:5c:3f:6e:e8:64:40:bb:7c:48:95:05:b2:
33:e2:0c:9e:d2:0a:1f:77:19:d7:e4:d2:b3:1e:fb:c7:75:5d:
78:d4:49:ff:6f:a2:2e:aa:c5:10:63:c6:f6:d9:c5:3a:f8:45:
09:92:96:10:16:3c:42:15:c8:f3:44:2a:b9:be:0f:9a:29:e4:
b6:ff:30:a5:46:14:de:e3:31:a5:74:e4:87:cc:b2:ae:ab:eb:
a3:0b:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net