Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/_rassXhhLfg-_iVBuJnnwxG3iso.roa
File: _rassXhhLfg-_iVBuJnnwxG3iso.roa (raw, json)
Hash identifier: KT26vKdq/lKOFM6zwdWLLscYrzk+tJTuZofzXXxJ1ks=
Subject key identifier: FE:B6:AC:B1:78:61:2D:F8:3E:FE:25:41:B8:99:E7:C3:11:B7:8A:CA
Certificate issuer: /CN=adafd284dfeccf745cb2e6d1391e260b13a34fe0
Certificate serial: 0186C07111FCCBD7FD0A34F89806AAFB3A30
Authority key identifier: AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ra_ShN_sz3RcsubROR4mCxOjT-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/_rassXhhLfg-_iVBuJnnwxG3iso.roa
Signing time: Wed 08 Mar 2023 08:58:00 +0000
ROA not before: Wed 08 Mar 2023 08:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.18.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:71:11:fc:cb:d7:fd:0a:34:f8:98:06:aa:fb:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adafd284dfeccf745cb2e6d1391e260b13a34fe0
Validity
Not Before: Mar 8 08:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb6acb178612df83efe2541b899e7c311b78aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:11:bd:f5:5d:c7:3a:4c:bb:12:f8:8e:fd:
39:88:1f:3c:5e:1d:3e:ca:f0:c5:06:c0:71:4b:ff:
93:a0:93:3a:db:c9:55:69:9d:84:c9:e2:0e:a5:7c:
cc:42:b5:99:53:c0:5f:a0:d0:5c:f2:17:4c:e6:a1:
1e:96:98:a3:63:70:b7:0b:53:76:68:9a:e4:9d:36:
dd:b0:91:b1:8e:94:a2:f7:2f:9a:81:18:0c:99:f3:
66:50:6a:b4:ae:ab:22:26:b7:a0:f3:2a:e0:21:68:
ac:07:c9:e0:ad:3e:29:25:f4:38:99:ff:55:60:a9:
ae:1b:de:0d:a6:38:e0:99:df:15:62:31:02:b8:6d:
d7:7d:2f:37:15:fb:79:17:60:c0:cc:68:1c:6c:19:
1a:21:bc:af:cb:50:c6:1e:19:19:71:82:d6:7f:29:
93:c6:05:a6:cf:2a:74:04:d8:26:75:8c:81:13:0f:
7d:1d:93:d5:48:2f:53:65:8e:b8:21:a5:a7:b4:b6:
c5:0a:d2:f9:72:25:69:26:b1:3c:67:8a:f3:47:ba:
b8:b7:e6:f5:3b:66:8c:6a:e1:0f:12:f6:15:d5:59:
36:89:88:01:3b:d5:eb:cd:41:8a:ad:15:32:ad:cb:
a3:ad:1d:42:5c:68:95:b6:16:f7:0d:42:09:4f:bb:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:AC:B1:78:61:2D:F8:3E:FE:25:41:B8:99:E7:C3:11:B7:8A:CA
X509v3 Authority Key Identifier:
keyid:AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ra_ShN_sz3RcsubROR4mCxOjT-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/_rassXhhLfg-_iVBuJnnwxG3iso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.104.0/24
Signature Algorithm: sha256WithRSAEncryption
de:5d:18:d3:82:26:c3:b3:39:96:4f:00:7e:4c:3c:da:d2:8e:
08:aa:8b:e7:c7:39:98:9c:8d:1a:f3:dc:b4:66:b1:90:79:b6:
4e:bc:8f:00:6c:d7:dc:45:36:91:19:c3:dd:71:57:f2:27:60:
88:c8:11:9e:85:97:8c:e3:cb:04:d2:2f:8e:90:c3:ce:cd:21:
95:53:7f:b1:2e:79:10:08:1a:d4:80:35:80:73:bd:76:0f:0a:
4c:87:91:51:00:95:fb:5c:61:82:43:71:f9:ee:90:c1:27:3c:
d3:eb:0f:85:8d:08:f4:a5:00:0c:19:38:f4:8a:78:bf:60:11:
83:9e:eb:92:48:3f:e9:cf:c8:58:e8:3d:f8:ec:f5:3d:f2:d2:
2c:b5:d4:d7:88:61:0d:30:11:7d:07:7d:77:0b:a5:4a:38:6d:
71:1a:41:15:d3:04:97:39:a3:7b:7b:bf:bf:07:20:5c:83:61:
86:1d:46:9d:d3:6a:11:73:7e:18:df:d1:c8:68:73:5f:83:36:
a0:eb:07:30:d2:31:cd:e3:70:d2:57:23:fc:27:04:ec:de:a8:
1c:21:c9:ed:9a:a7:c5:f3:a2:dc:05:d2:cd:15:91:fe:50:70:
9d:ce:91:7d:62:ee:9f:32:f0:14:17:32:f9:c2:a9:bb:f3:28:
ee:96:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net