Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/kPOb56B68W00SK_Ljw1Mf3VaIzw.roa
File: kPOb56B68W00SK_Ljw1Mf3VaIzw.roa (raw, json)
Hash identifier: 9WWQ6obbzhfJCoQK2cKEJ+zLvBgAvRYj9zJmLM49P4o=
Subject key identifier: 90:F3:9B:E7:A0:7A:F1:6D:34:48:AF:CB:8F:0D:4C:7F:75:5A:23:3C
Certificate issuer: /CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
Certificate serial: 01AF7A92
Authority key identifier: 7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/kPOb56B68W00SK_Ljw1Mf3VaIzw.roa
Signing time: Sat 01 Jan 2022 09:54:09 +0000
ROA not before: Sat 01 Jan 2022 09:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41155
IP address blocks: 185.89.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28277394 (0x1af7a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
Validity
Not Before: Jan 1 09:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90f39be7a07af16d3448afcb8f0d4c7f755a233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:ac:2f:92:bb:d6:46:09:5f:2a:d5:34:a3:
05:05:c0:56:e5:b0:6f:33:29:77:8f:9b:3d:7c:c2:
dd:6a:cd:7d:45:d9:68:5b:cf:ac:2a:d5:b2:9a:96:
fb:06:3e:e2:41:35:a1:99:ba:62:15:51:3b:dd:27:
0d:22:de:b7:bd:58:5e:a4:c8:af:cb:72:92:a9:bd:
66:c8:6e:2e:14:f8:b2:d6:f5:9e:09:33:b0:6f:7d:
0f:fc:89:0d:75:32:df:f1:14:61:75:0a:3c:c6:27:
a1:5b:85:48:fd:0f:04:35:11:b3:ee:fb:0a:13:be:
1a:cf:0a:c1:c6:27:ef:6a:a2:6f:74:23:8f:b0:bc:
53:3e:31:d8:95:a7:dd:8d:3c:6f:51:77:c1:d0:37:
4d:c8:88:42:64:27:dd:4b:70:86:2b:fc:f7:d8:23:
c9:ee:e9:08:b5:d7:7e:c7:e9:c4:0e:70:68:a6:aa:
0b:5d:60:30:67:1c:06:a2:bc:8c:70:61:a8:fb:25:
66:cb:b1:24:6d:5c:5e:b1:64:f3:a9:2c:1e:47:7a:
9b:43:0a:0e:34:38:f4:03:7f:5c:c0:11:74:fd:8e:
0a:43:4b:9e:67:84:98:7c:1e:58:86:02:67:c2:f8:
fc:79:7f:6f:72:0f:e3:c1:58:49:57:fd:38:30:50:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:9B:E7:A0:7A:F1:6D:34:48:AF:CB:8F:0D:4C:7F:75:5A:23:3C
X509v3 Authority Key Identifier:
keyid:7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/kPOb56B68W00SK_Ljw1Mf3VaIzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:78:5e:b4:9b:b1:1c:f2:fb:63:b2:cd:f3:9e:d6:b3:49:c4:
70:72:72:8d:9b:cc:e2:2e:61:2b:82:bc:a2:02:26:eb:a0:22:
a8:b3:77:70:c5:33:a8:f1:ec:2a:49:bb:cf:6f:e0:9c:5b:a8:
4f:f4:75:a9:b9:2d:09:33:83:9a:1b:c0:67:72:44:8b:33:57:
0a:00:31:5e:34:fe:a8:a1:dd:e6:05:26:7f:5b:4d:7d:ef:79:
e4:6b:8b:6c:8e:51:83:02:7f:b5:c8:97:69:10:1f:c0:bc:ad:
cb:d8:5a:4b:1d:df:0f:c7:12:4d:78:ac:df:5d:54:ba:be:88:
21:79:54:0d:ca:1e:57:56:20:36:67:71:45:d0:90:4a:65:c4:
b0:6a:3b:58:c3:a5:6a:69:51:25:51:fc:b5:2b:51:93:a7:93:
36:b0:3a:1e:e9:a3:41:1f:9e:9c:2c:8c:36:0e:19:2d:24:5e:
9f:bb:b2:f0:24:cf:98:a8:97:3b:86:fa:df:7b:b6:66:ce:fa:
bf:82:29:82:fd:ea:f3:16:0f:26:90:d5:04:8c:17:33:6a:64:
f0:a7:cc:31:b8:2b:4b:24:c9:60:bd:d7:06:c5:43:97:bd:b0:
04:90:a8:46:c9:9e:67:85:07:59:93:1e:f5:8b:90:d0:f2:83:
ed:74:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net