Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/4iAAUNZPU2eJ0aVCFcuTFppzjDk.roa
File: 4iAAUNZPU2eJ0aVCFcuTFppzjDk.roa (raw, json)
Hash identifier: 5Bw+CfKi/DSSR56OPPngwTRQdnDBexCw+xByCJCPRgE=
Subject key identifier: E2:20:00:50:D6:4F:53:67:89:D1:A5:42:15:CB:93:16:9A:73:8C:39
Certificate issuer: /CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
Certificate serial: 01856F26C151A5109D250DDAEC7A953C21A0
Authority key identifier: 7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/4iAAUNZPU2eJ0aVCFcuTFppzjDk.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 185.89.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c1:51:a5:10:9d:25:0d:da:ec:7a:95:3c:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2200050d64f536789d1a54215cb93169a738c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:29:04:9a:8f:56:26:5d:bf:fb:0a:09:ce:
81:af:14:b0:2d:71:b0:d1:a4:6b:d6:ab:e6:5a:75:
85:e1:4a:05:79:d8:13:cd:25:ae:3f:ce:07:b8:d6:
5e:0d:1a:96:5c:5e:ad:25:e2:a1:21:0b:53:ba:90:
17:2d:6e:fd:17:b5:0f:82:90:71:dd:20:2c:40:e5:
d8:f8:6c:ce:a0:b8:fb:a4:9a:c8:6d:a8:73:f7:22:
35:a0:ce:bf:4c:07:58:58:7e:3b:a4:0d:a3:af:a5:
a4:c3:59:46:cf:d4:0c:44:a2:1e:84:86:6c:08:46:
b5:ae:8e:85:b5:d6:dc:e2:99:26:09:57:7d:ff:85:
e8:97:99:5a:40:a0:74:08:e0:60:b1:71:9c:32:89:
2d:0c:ff:2b:d4:2c:c9:53:80:ca:1e:14:a7:3e:b5:
2c:a9:45:e3:91:53:54:9b:ab:a5:9f:0b:53:c6:6c:
9d:97:9a:ca:6d:b8:b9:9b:39:42:da:e5:e2:a7:46:
44:da:5f:29:03:31:a0:1b:ba:7c:db:bf:3b:19:f1:
96:31:58:69:ac:e5:56:c7:41:be:7b:4f:48:c2:83:
cf:fa:f0:0c:58:b0:c6:2b:be:4f:4f:4e:6e:70:15:
ee:cd:c1:a1:c5:98:ec:8d:93:56:ac:57:bd:a7:49:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:00:50:D6:4F:53:67:89:D1:A5:42:15:CB:93:16:9A:73:8C:39
X509v3 Authority Key Identifier:
keyid:7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/4iAAUNZPU2eJ0aVCFcuTFppzjDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
89:34:c4:0a:38:32:b9:8c:07:87:07:e2:b3:c6:95:16:4d:10:
e4:db:f0:87:9d:aa:5f:90:77:25:23:45:62:de:ac:57:5e:f1:
90:c8:03:35:bf:ed:3e:b9:b7:18:9e:3a:13:0e:66:46:9a:39:
dc:bf:dc:bc:24:f2:5b:ed:ae:84:be:a7:fc:6f:e0:75:1f:d0:
f4:62:2f:3e:54:a5:82:c4:ca:6e:d7:18:4d:48:bb:c1:28:89:
6a:62:64:a7:16:91:46:d9:9e:8d:a2:78:41:c2:8c:c9:51:14:
9d:76:db:59:a4:db:82:d1:b6:b3:b1:eb:d5:52:1a:bb:ee:3a:
b8:0a:0a:4b:5c:81:cc:67:41:db:7f:e6:8c:ef:42:ce:43:86:
db:72:b2:2f:a9:4e:a4:23:78:42:bd:d0:84:16:39:b4:89:07:
84:df:72:87:30:6e:e9:c0:b3:c2:48:fc:20:83:31:ea:4a:da:
f2:4e:6c:d5:d7:c5:6d:e0:67:54:0e:1f:ca:a8:87:f2:1b:6a:
90:63:c9:cf:eb:30:c8:5d:1d:95:59:14:b5:34:3b:b1:6f:27:
ae:df:1c:e9:57:fc:25:a1:8c:8e:af:ce:f4:c9:69:3e:16:02:
ed:ad:d9:f7:c0:ab:ae:b5:01:90:55:5a:3e:e0:27:e9:89:98:
78:75:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net