Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/AhyQ8JCkRIqppZqYRdjV7L7l20Y.roa
File: AhyQ8JCkRIqppZqYRdjV7L7l20Y.roa (raw, json)
Hash identifier: 5MKKUenL4lOtNN/0GzWBqML7HAW4460y7NGzOTKgOwI=
Subject key identifier: 02:1C:90:F0:90:A4:44:8A:A9:A5:9A:98:45:D8:D5:EC:BE:E5:DB:46
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 05FA546C
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/AhyQ8JCkRIqppZqYRdjV7L7l20Y.roa
Signing time: Fri 04 Mar 2022 18:58:02 +0000
ROA not before: Fri 04 Mar 2022 18:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 87.121.136.0/21 maxlen: 24
176.111.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100291692 (0x5fa546c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 4 18:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=021c90f090a4448aa9a59a9845d8d5ecbee5db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:19:91:48:3f:88:0e:77:23:88:74:fc:14:
04:52:f3:c2:44:7f:ca:86:e6:db:8d:b7:06:d7:bd:
18:7e:af:3a:68:50:53:0c:d5:02:f4:ce:7f:d1:8b:
ee:b2:16:7a:53:83:3d:9a:41:1a:2c:f5:b3:f8:09:
78:4e:84:a0:d9:2b:e3:ba:ec:85:d2:5f:93:c2:2a:
5f:f7:a1:30:75:56:9f:a6:f0:fa:ff:54:f2:7f:50:
25:db:9c:65:43:30:22:35:90:34:4b:7e:b5:67:07:
d8:27:02:6e:67:8e:36:19:06:12:9f:85:24:23:ae:
2e:7c:16:09:90:e8:04:f2:c7:9c:2a:4d:ac:86:af:
d9:6e:29:08:31:ea:8a:31:87:3e:c4:b3:0c:f2:77:
15:2a:46:ff:29:58:c5:34:0b:74:4a:95:1d:90:f4:
c3:12:f6:50:7c:be:8a:52:87:83:f8:62:ef:58:11:
1f:1e:52:aa:6d:07:8c:46:fa:3c:b7:44:e8:cf:24:
cc:a2:34:33:3e:d0:0e:c5:df:03:c4:d5:94:48:6b:
df:2c:b6:d3:71:32:dd:79:52:cc:0b:7c:f4:28:c9:
d6:49:29:98:b4:71:c3:27:01:9e:26:c4:d5:84:99:
06:84:8c:e2:aa:32:49:d2:3f:42:d9:c7:7e:b3:f3:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:90:F0:90:A4:44:8A:A9:A5:9A:98:45:D8:D5:EC:BE:E5:DB:46
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/AhyQ8JCkRIqppZqYRdjV7L7l20Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.136.0/21
176.111.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:07:f9:05:25:d7:ba:7f:01:27:2b:2b:02:61:e6:55:42:0e:
6c:be:14:54:18:75:00:48:0a:b9:9f:9c:88:1e:56:9c:b4:88:
45:88:f6:fc:5b:f1:ef:72:6e:25:01:9a:aa:5c:72:b4:3a:f9:
3c:31:fb:78:9d:8f:4a:fc:27:ca:3b:dd:ad:ff:e8:b3:81:49:
97:df:68:48:0c:e3:ed:7f:12:a2:e6:34:7f:7b:cc:6d:d1:62:
d9:9a:96:4e:05:bc:78:a2:1e:de:df:cb:86:ea:6d:d7:28:0f:
ef:f0:ab:9b:d6:f8:16:bb:ef:09:42:c2:33:86:14:5a:aa:c0:
04:ee:89:25:6e:6a:a5:6a:87:67:c3:56:97:3e:85:f2:b9:c3:
4e:6d:5f:4d:29:76:55:05:5a:0b:2d:1c:eb:9d:45:1e:cc:3e:
bd:5e:a8:b0:72:8f:c2:1c:6c:f0:2b:d8:5b:ea:4b:35:52:07:
7a:8b:d8:85:e9:76:ef:12:f5:54:0a:be:d4:17:ff:63:bd:15:
e1:7e:19:12:87:4e:05:f8:db:f0:7a:c7:6c:76:2b:06:b5:f8:
14:c5:cb:64:42:0b:87:91:56:e0:e5:a1:03:31:41:61:f2:ac:
3d:02:f8:91:2c:10:68:7d:ff:22:d8:16:a5:74:36:55:ac:06:
a4:8a:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net