Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/ks0dkQ2Fqw-W8yDowQrvAxDS59w.roa
File: ks0dkQ2Fqw-W8yDowQrvAxDS59w.roa (raw, json)
Hash identifier: UV1LdIKfe1WkPv2wQCQ+k6yonstokJqCSISeoxCFNaY=
Subject key identifier: 92:CD:1D:91:0D:85:AB:0F:96:F3:20:E8:C1:0A:EF:03:10:D2:E7:DC
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 018CC5DBE446447BF43AA688158BA70D5CA8
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/ks0dkQ2Fqw-W8yDowQrvAxDS59w.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204337
IP address blocks: 77.232.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e4:46:44:7b:f4:3a:a6:88:15:8b:a7:0d:5c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92cd1d910d85ab0f96f320e8c10aef0310d2e7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:a7:da:6d:0e:72:39:7d:2b:dd:43:2c:c0:
e5:23:e0:4b:8d:0e:b6:d9:40:61:70:b2:02:17:26:
17:cb:11:44:2e:49:11:46:71:22:6c:4b:86:1a:3f:
f9:1a:9e:94:d7:50:06:67:4d:a9:35:4f:6d:0a:6c:
0b:d6:55:5c:33:da:5c:c9:63:5d:07:cb:c8:79:b1:
f9:dc:0d:2b:b6:1d:9a:a0:ce:97:ed:3a:8d:52:05:
4b:cb:d5:38:70:d7:2a:85:8c:ee:23:9c:4b:03:e9:
4e:b0:ea:b6:51:36:39:04:7c:43:41:d6:67:13:e8:
fe:c1:66:02:b4:00:6d:e3:c0:2b:be:19:d4:ab:ef:
d3:1e:9c:56:5f:e1:44:ec:fe:58:23:2c:95:38:fc:
0a:e6:6e:95:2d:4c:98:dd:bd:85:07:50:4b:ce:6e:
78:b0:0b:0f:63:6c:e8:a2:a7:8a:7e:84:9c:66:95:
b0:72:3c:4e:5c:23:2d:a5:0b:77:35:c5:f1:b3:8d:
3d:02:85:86:e0:93:fb:fb:e4:2a:57:d7:80:4e:fd:
fb:83:75:53:25:8c:68:9c:7c:ed:46:08:a7:df:5d:
a6:9f:3e:28:05:dc:f2:95:ee:0b:83:64:1c:93:e5:
dd:41:d6:5b:9f:08:88:85:a0:b5:2b:bb:f9:fb:e4:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:1D:91:0D:85:AB:0F:96:F3:20:E8:C1:0A:EF:03:10:D2:E7:DC
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/ks0dkQ2Fqw-W8yDowQrvAxDS59w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.34.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5d:a4:a5:22:c6:d1:ad:7e:76:4f:06:fa:f8:6b:9f:c3:69:
1a:49:4f:c0:98:a6:9e:b8:22:fb:cb:45:0d:7d:ed:4c:91:96:
a5:23:7b:00:a1:12:2c:56:9b:cc:3d:98:eb:6e:a2:8b:4a:d2:
2f:15:82:3b:3a:38:54:91:75:d4:6c:83:ad:03:c4:70:8d:85:
10:81:93:36:fb:99:2a:48:71:f5:6e:ec:66:bd:09:fa:7f:2e:
f8:24:1c:4a:fa:8b:02:34:6f:b1:84:87:58:93:21:2e:0d:77:
21:25:e3:48:d7:81:a7:0d:6f:61:fb:df:85:88:bd:a0:7b:0c:
28:7a:32:f6:00:89:47:cc:4e:12:1e:65:c2:54:3c:e1:51:1c:
11:b8:ea:1f:90:4f:6a:97:79:04:38:97:17:fd:e1:c4:fe:94:
38:5c:a9:f8:5c:e4:a5:29:6e:33:ef:97:21:fb:41:fc:57:d7:
62:70:d9:09:14:4b:92:75:6c:5f:9f:53:c4:af:27:77:e5:00:
88:df:3d:df:12:a7:b6:96:79:05:ce:c7:35:1a:84:d5:2c:ec:
56:bf:6f:91:b6:41:ef:6d:9d:5a:25:fc:05:26:d7:c2:e1:07:
85:c4:f0:0b:de:c6:62:55:46:0a:e8:00:e5:30:e6:c5:3f:47:
49:45:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net