Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/gF-GIIpr7_Y4-gzXYF7bkKtyZS4.roa
File: gF-GIIpr7_Y4-gzXYF7bkKtyZS4.roa (raw, json)
Hash identifier: h70CxUmtBNRL08pXlLu+mApVx4hYBVSZgEjMDFG7n/E=
Subject key identifier: 80:5F:86:20:8A:6B:EF:F6:38:FA:0C:D7:60:5E:DB:90:AB:72:65:2E
Certificate issuer: /CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Certificate serial: D72DBB
Authority key identifier: B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/gF-GIIpr7_Y4-gzXYF7bkKtyZS4.roa
Signing time: Sat 01 Jan 2022 09:06:23 +0000
ROA not before: Sat 01 Jan 2022 09:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211183
IP address blocks: 37.140.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14101947 (0xd72dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Validity
Not Before: Jan 1 09:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805f86208a6beff638fa0cd7605edb90ab72652e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:8e:c5:db:35:30:02:4b:0d:83:a4:94:35:
63:85:da:6a:1a:9c:d1:1e:29:af:59:1d:00:ec:16:
3d:fb:d5:18:b1:1d:67:00:a7:a9:9c:2a:f5:77:4b:
97:85:35:71:69:e6:33:10:2e:5d:09:50:a5:4d:56:
ce:70:c2:50:07:ff:db:19:08:2a:85:00:e5:fe:e5:
8a:ef:af:98:1c:00:ca:b5:43:67:00:49:7e:2e:c3:
05:8b:ac:dd:e7:22:dd:b4:d7:f2:13:e6:3e:86:7c:
e2:c6:8a:46:9e:74:4d:d6:ff:c2:06:cd:3a:9c:cc:
2d:17:0e:8a:25:eb:9f:57:b0:4b:09:3b:cf:90:9d:
c0:08:e7:74:93:b8:93:9f:ed:74:b2:b4:17:24:9f:
76:bb:03:e0:a8:d6:a3:4b:62:8a:61:d8:c3:da:8a:
8e:e3:80:2d:be:dc:f8:7d:64:78:e9:26:39:52:5c:
4b:df:e2:32:5a:93:43:24:59:24:f7:50:5d:62:3a:
0b:c5:e5:68:02:ae:e4:c3:c3:db:f1:f1:33:58:ac:
ad:c9:d5:37:31:bc:a2:2d:3f:cf:f2:7c:f4:56:ff:
3c:88:47:8f:90:4e:23:1c:d2:1e:4b:21:75:50:c0:
b9:d7:4c:63:93:88:e4:1f:e8:7b:dc:39:e6:31:66:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:86:20:8A:6B:EF:F6:38:FA:0C:D7:60:5E:DB:90:AB:72:65:2E
X509v3 Authority Key Identifier:
keyid:B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/gF-GIIpr7_Y4-gzXYF7bkKtyZS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:cb:e0:43:02:78:08:66:73:d1:d9:09:fe:30:2f:b9:2b:38:
d1:d8:13:f0:9d:99:b0:20:fe:72:52:3c:6a:29:64:81:fe:e6:
4e:12:22:45:42:4d:a7:c7:fd:0f:cf:77:15:ed:0f:94:4f:f3:
c3:44:fb:d8:0e:55:02:5c:c2:5e:2d:c9:ec:e4:c6:fc:c1:cf:
dc:a6:38:ce:fa:ae:9d:52:27:43:97:18:ce:4a:19:1a:10:57:
47:a7:43:6e:aa:ef:e5:16:f3:d6:7f:2b:77:e2:7b:b5:6f:f2:
9b:ae:45:3f:80:7f:5f:55:d3:81:41:0e:65:39:5d:7a:79:f0:
1a:e0:44:1a:3d:e1:16:f9:dd:64:5b:e3:33:3a:cc:1f:9c:a4:
9e:6c:ac:8d:03:24:29:2f:1b:2f:d6:69:43:b1:85:33:ec:2b:
2b:6f:72:8f:fd:41:2d:0e:e7:f7:5f:3b:11:c0:aa:1b:62:bf:
43:c7:19:8a:62:fc:5f:09:bf:63:1e:c4:1a:1f:ef:08:a7:40:
c3:83:41:4c:a6:4c:23:a7:69:e1:14:c6:55:e4:d3:9f:ca:85:
7c:59:2c:a6:c8:80:1f:d7:48:84:40:ad:c1:62:1a:ef:d4:6d:
25:e1:f3:d3:13:64:1a:20:1d:82:ea:c5:5e:5e:53:0f:bc:cd:
ef:9a:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net