Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/2GbG4iejJ5S5aPu9ZdQb1lw-PP0.roa
File: 2GbG4iejJ5S5aPu9ZdQb1lw-PP0.roa (raw, json)
Hash identifier: S+PIMRxBzVHFgyNVWF/jo3cgeSU+HxTbh1nGhmctAVU=
Subject key identifier: D8:66:C6:E2:27:A3:27:94:B9:68:FB:BD:65:D4:1B:D6:5C:3E:3C:FD
Certificate issuer: /CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Certificate serial: 01166977
Authority key identifier: A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/2GbG4iejJ5S5aPu9ZdQb1lw-PP0.roa
Signing time: Sun 17 Apr 2022 09:57:22 +0000
ROA not before: Sun 17 Apr 2022 09:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.202.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18246007 (0x1166977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Validity
Not Before: Apr 17 09:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d866c6e227a32794b968fbbd65d41bd65c3e3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:9d:3e:54:08:03:4d:b7:b9:2f:37:06:ef:
54:92:49:82:82:8a:60:d8:6c:12:ee:53:4e:25:fb:
7e:be:8e:0f:e3:c1:21:e4:16:55:8e:1f:64:05:a9:
18:44:cd:11:2e:cd:51:4a:fe:c1:24:4e:f7:2e:37:
a3:be:0a:23:bc:9f:5e:22:73:9c:1d:73:0c:a0:32:
5f:88:09:f1:a7:23:68:b7:52:b8:da:c4:c1:db:20:
74:5d:4a:22:96:63:10:8c:d3:39:b5:aa:35:f8:71:
64:a6:48:10:ff:2d:bf:0c:ca:d1:93:74:fb:82:52:
ba:98:87:78:c9:7e:9b:dd:bb:44:21:d9:fd:53:9f:
9c:83:ed:b4:b9:95:d7:be:46:d5:2e:08:23:ba:d5:
86:83:4f:2d:ef:77:e7:09:34:a4:e2:47:7e:83:3c:
59:fd:ce:b1:80:e0:b3:70:14:c1:16:00:7d:9f:6d:
1a:fa:f4:b2:10:80:55:9c:6f:3c:f3:52:99:fe:c1:
4e:33:7f:ff:c6:96:c9:70:c4:ff:85:df:26:e0:47:
2d:7c:da:20:c4:16:8d:88:9a:35:45:47:38:de:45:
ee:62:d4:bb:d9:f2:40:76:93:52:5d:5d:30:db:b6:
a1:d0:69:6e:13:d8:21:43:a4:f9:36:76:12:8f:1c:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:C6:E2:27:A3:27:94:B9:68:FB:BD:65:D4:1B:D6:5C:3E:3C:FD
X509v3 Authority Key Identifier:
keyid:A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/2GbG4iejJ5S5aPu9ZdQb1lw-PP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:cd:d5:d5:56:60:df:d8:f4:46:84:2e:f4:b9:e5:5e:75:7a:
58:4a:9d:9b:44:e4:54:60:fc:e6:7f:69:5a:a2:7f:e5:17:39:
50:39:00:5b:a3:27:c6:c1:b2:fe:78:f9:f3:be:cd:83:58:8b:
25:58:00:a2:4c:9f:9e:78:10:2f:dd:c8:62:6d:af:0a:5c:7e:
0a:01:4a:12:9b:85:fb:93:c2:de:ff:6f:21:c1:98:5c:3e:b8:
31:6b:34:8d:bb:77:94:a0:be:6e:87:25:8f:9f:99:5a:1c:b4:
d3:3d:d6:6c:dc:e5:c0:03:8d:e9:39:74:aa:03:27:df:c0:57:
8b:7b:21:18:21:05:1e:73:67:ae:dd:ce:75:18:cd:2f:a3:fc:
90:63:4d:2a:ce:d1:81:83:42:6f:bd:2e:1c:ab:98:c3:85:9e:
1e:33:40:90:d3:9e:e5:28:5f:77:dd:f7:b9:d7:45:68:f5:35:
50:73:d2:6a:f1:71:73:49:aa:29:ad:27:a8:90:41:38:25:76:
aa:1d:30:f9:28:50:1c:fb:df:de:52:98:2e:47:c3:25:2a:c5:
e5:12:f4:b9:d6:ca:49:d3:fd:5b:55:b4:7b:09:c6:90:1e:4b:
a0:b2:5c:b7:97:ec:a9:37:73:02:8c:a1:8b:59:cd:ef:8b:e3:
06:28:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net