Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/j_vxLmFg9r7dpW2gPOVmkS88RVM.roa
File: j_vxLmFg9r7dpW2gPOVmkS88RVM.roa (raw, json)
Hash identifier: HfoNhxO1sUBXgXHsBKj4caByoXoJjSsfKtX/R4WPbJs=
Subject key identifier: 8F:FB:F1:2E:61:60:F6:BE:DD:A5:6D:A0:3C:E5:66:91:2F:3C:45:53
Certificate issuer: /CN=65e597f3ace516d6cf57ceff1606bbedaa382151
Certificate serial: 01857169AC29761765AC1A348276CDCDB732
Authority key identifier: 65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeWX86zlFtbPV87_Fga77ao4IVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/j_vxLmFg9r7dpW2gPOVmkS88RVM.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 185.218.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ac:29:76:17:65:ac:1a:34:82:76:cd:cd:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e597f3ace516d6cf57ceff1606bbedaa382151
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ffbf12e6160f6bedda56da03ce566912f3c4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:cc:04:94:a5:c3:b5:0f:f1:48:da:37:8b:
dd:49:52:11:9d:16:f6:cc:13:01:19:8c:bd:15:37:
eb:c6:a8:3e:d9:32:c2:f4:e7:0e:4a:57:2d:15:e1:
42:2e:73:68:ab:7f:e9:2b:9b:dc:c5:f3:69:6f:fd:
4f:22:88:27:b0:d8:b4:41:c4:ad:f7:ed:50:22:52:
4c:40:ef:58:b3:5e:95:15:6d:bf:34:46:10:e5:a0:
c2:2e:43:54:ea:89:da:83:00:59:07:df:90:01:a4:
82:ca:c0:4e:a5:e0:dc:45:5a:75:bc:53:e3:51:69:
8f:df:b5:cd:8a:34:ee:fc:a7:82:cd:66:fc:f7:e6:
73:11:8a:9a:a1:1e:75:b4:f9:72:05:af:24:fd:96:
a7:2b:65:a0:c1:61:ec:27:20:30:c3:a1:f2:b8:ef:
89:13:92:7d:96:0b:e0:28:31:6b:70:1a:d4:56:bd:
9e:ff:49:59:19:fe:32:1a:a6:2a:28:92:5e:42:a1:
fd:3d:7b:e0:5d:e0:f7:a0:30:83:86:87:38:2a:c3:
4d:1b:01:42:c0:27:f4:b7:0b:1d:18:81:ac:5b:1a:
29:d2:30:34:b9:e1:de:cd:1c:ca:d7:27:11:42:da:
98:44:ab:b0:bb:49:61:45:a7:d8:f6:2d:dd:29:d5:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:F1:2E:61:60:F6:BE:DD:A5:6D:A0:3C:E5:66:91:2F:3C:45:53
X509v3 Authority Key Identifier:
keyid:65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeWX86zlFtbPV87_Fga77ao4IVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/j_vxLmFg9r7dpW2gPOVmkS88RVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/ZeWX86zlFtbPV87_Fga77ao4IVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7f:ab:2c:d3:08:d0:37:dc:a6:7e:93:72:1c:6a:0d:9a:c8:
ed:99:86:63:2f:21:db:a1:69:5a:56:07:a6:5a:0a:83:c8:d0:
7a:8f:70:61:47:06:38:b4:ea:53:ef:7a:6b:87:18:de:60:55:
9f:ab:00:16:85:67:aa:ce:94:39:6c:aa:72:74:32:0a:32:6e:
fb:28:68:f9:11:08:07:75:9d:65:55:99:68:98:d7:0b:11:e1:
c9:4f:c4:f2:ac:61:32:4c:eb:73:7b:aa:16:18:54:ac:d4:52:
f6:49:e1:4b:6d:38:96:1b:85:4b:75:23:87:28:32:49:60:cf:
f7:5d:90:1b:6f:64:46:02:84:88:c6:5c:14:16:8e:82:63:d2:
82:e0:5a:df:13:61:25:ed:5b:40:5e:62:03:0e:91:72:c4:2e:
ae:69:91:86:23:30:13:c9:57:e4:01:7b:b6:86:53:98:23:92:
13:e5:6f:cd:53:d6:11:d4:04:cd:d5:46:cd:15:25:34:82:b1:
5f:ee:fd:d8:09:ac:19:d9:52:f7:77:3c:d0:e2:6d:98:f5:68:
81:f8:f8:7a:22:c1:3b:f7:5b:af:1b:d2:c2:83:6c:b5:59:28:
48:99:c5:a5:42:03:6d:54:3f:fd:bf:c5:0c:63:0a:3c:da:fc:
d3:55:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net