Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nzPku4qHvm5QRCsf1q2gwaiCBzo.roa
File: nzPku4qHvm5QRCsf1q2gwaiCBzo.roa (raw, json)
Hash identifier: IvxPX5YLCX/cwiGVeO3+KemhH7S6WOhb1oPOjO5OwzI=
Subject key identifier: 9F:33:E4:BB:8A:87:BE:6E:50:44:2B:1F:D6:AD:A0:C1:A8:82:07:3A
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0190DA99EC5C125FF4125D5C8546ADDC202A
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nzPku4qHvm5QRCsf1q2gwaiCBzo.roa
Signing time: Mon 22 Jul 2024 13:20:38 +0000
ROA not before: Mon 22 Jul 2024 13:20:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.194.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:99:ec:5c:12:5f:f4:12:5d:5c:85:46:ad:dc:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 22 13:20:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f33e4bb8a87be6e50442b1fd6ada0c1a882073a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:a7:6a:f2:40:b9:41:75:3a:f1:9f:9e:7a:
e7:ed:18:39:02:81:61:3a:c3:1f:05:be:c9:a5:f3:
64:49:dc:76:53:dc:c5:79:f3:09:bf:bd:0b:07:31:
90:b9:c9:26:82:63:96:f0:28:74:c4:3a:f2:48:8b:
19:c5:a6:61:18:b2:92:3b:3f:ae:26:99:4f:30:82:
29:f6:ea:e2:32:bc:9d:78:b2:52:50:bc:af:79:76:
ea:99:68:36:9f:9a:a5:11:ee:77:e5:30:32:df:ed:
25:a4:26:73:61:93:aa:d0:3a:c5:32:25:1b:64:eb:
7e:86:05:9d:74:38:e2:fc:af:fd:4d:19:66:69:e2:
7a:d9:bc:78:ef:ad:35:d3:e7:5f:90:71:82:c2:c1:
aa:f1:af:d8:65:6f:28:b9:4d:ac:2d:ce:0b:20:0a:
ed:d6:59:d2:6d:71:f6:8a:e1:a5:1b:e0:c0:79:1e:
11:a9:b2:9e:be:6c:1e:65:98:f0:b6:1b:4a:a0:8e:
2b:3f:17:9a:e0:95:7b:eb:1f:21:1a:aa:cc:15:bf:
1e:55:b0:20:7c:3c:84:53:14:f2:1c:67:14:ca:f1:
11:8b:8c:48:89:39:52:71:d3:8d:1f:fa:95:6e:2e:
6b:1d:80:b8:4b:d0:88:a1:8f:18:2b:b0:6b:60:50:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:E4:BB:8A:87:BE:6E:50:44:2B:1F:D6:AD:A0:C1:A8:82:07:3A
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nzPku4qHvm5QRCsf1q2gwaiCBzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
25:14:3a:5f:a3:80:9d:88:6f:20:c6:4d:49:90:4a:f0:9a:c2:
c8:09:68:ec:13:58:c4:36:7c:ba:95:22:33:32:7b:de:a3:67:
9a:01:66:ee:05:7c:8d:b2:ae:e2:7c:02:85:2f:2c:fe:89:ab:
cc:ee:ac:c6:94:6f:d2:fe:05:10:41:24:e8:c5:ec:22:ec:1b:
7d:91:dc:67:d8:e0:1b:11:e5:b3:95:f7:03:f9:7c:99:f3:7e:
a7:3e:06:84:a3:42:6f:83:d5:83:a6:89:03:d5:ca:c6:98:92:
89:a5:7d:d8:90:e1:b2:0c:32:7b:e0:33:70:71:0f:a4:50:b6:
d4:94:80:20:76:b3:a8:c6:e4:8a:24:1d:44:26:2c:a1:e7:1d:
42:3a:1f:25:33:7d:65:e5:2b:6d:20:d8:ce:9c:95:3d:c5:13:
7f:98:39:0d:c4:02:e2:02:f4:cf:c3:9d:73:a0:f5:0a:df:3e:
34:f3:f9:b9:53:88:07:23:c3:d1:24:11:a4:ca:84:7b:b3:50:
85:ac:8b:7a:c4:4e:1a:f3:a2:dd:10:a8:a2:ca:72:19:ae:63:
72:7f:19:fb:39:2b:12:24:48:b4:0a:5a:c8:f3:a5:51:34:f6:
88:d4:57:84:13:d6:27:fc:41:52:f2:b3:9b:6c:37:a0:30:90:
85:a9:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:59:55 2024 by rpki-client on console.sobornost.net