Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/svK-rLhs0cUJ0UncTDbyyB22WF0.roa
File: svK-rLhs0cUJ0UncTDbyyB22WF0.roa (raw, json)
Hash identifier: nq0Bh/VUjpwderNgkdt6Tw9oNOwIfo3Riekojrk/1is=
Subject key identifier: B2:F2:BE:AC:B8:6C:D1:C5:09:D1:49:DC:4C:36:F2:C8:1D:B6:58:5D
Certificate issuer: /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial: 018CC56EA21F766E6EBCBE13840492018963
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/svK-rLhs0cUJ0UncTDbyyB22WF0.roa
Signing time: Mon 01 Jan 2024 14:30:11 +0000
ROA not before: Mon 01 Jan 2024 14:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 178.212.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a2:1f:76:6e:6e:bc:be:13:84:04:92:01:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2f2beacb86cd1c509d149dc4c36f2c81db6585d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:11:92:c0:97:8b:7f:3a:de:5f:02:2b:07:
bf:42:ae:b3:a7:69:ba:c8:5c:07:34:1c:94:fd:a7:
57:34:d9:40:34:9e:23:b0:2d:6d:ca:d9:5b:16:e8:
20:0c:24:77:9b:fc:b0:e0:89:37:6d:e8:ae:23:8a:
25:e2:a1:b1:39:b8:05:21:18:c1:77:7d:69:b0:8b:
d5:86:a9:1f:a8:5f:c5:ad:72:88:9c:76:6d:8e:25:
8a:ec:e3:d7:7b:76:91:ef:f1:1d:41:ca:ca:49:f4:
f1:d5:5b:67:c6:61:f9:42:5d:01:87:e2:2f:33:b2:
56:7d:45:07:fa:86:e6:e9:c8:d0:00:da:56:a7:dc:
5d:07:3e:07:d4:5f:09:eb:2d:d6:d6:ba:57:84:26:
2e:0f:5e:d6:b5:82:30:fd:03:fb:28:3b:82:9b:9d:
b8:6a:24:f6:4b:53:d8:f1:20:6a:1b:05:7e:72:bc:
05:0b:89:2d:b3:62:2d:1c:2b:61:38:e9:b8:03:36:
3d:5e:27:d6:72:28:73:45:bf:fe:a2:60:66:ee:89:
2b:90:d5:e8:a0:b4:26:e4:51:68:c6:46:7f:d7:18:
16:d0:3e:37:c8:e5:aa:10:0d:df:ce:0c:8d:09:f1:
5a:3d:98:ba:b5:72:ee:0c:5f:c3:84:c7:a8:54:10:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:BE:AC:B8:6C:D1:C5:09:D1:49:DC:4C:36:F2:C8:1D:B6:58:5D
X509v3 Authority Key Identifier:
keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/svK-rLhs0cUJ0UncTDbyyB22WF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.140.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e7:ca:50:fa:07:94:c2:93:50:4c:fa:50:14:d8:1e:0d:b7:
b2:32:84:34:27:a6:11:2c:c8:3e:43:12:5b:ed:8f:da:15:a8:
1d:f9:cf:dd:c9:c6:cf:f3:b4:ff:58:04:20:89:8a:0c:0e:6a:
09:f3:32:ae:45:79:03:25:ba:b3:1c:dc:9c:3c:62:2a:a1:f0:
2f:3d:d0:7e:ec:34:21:be:88:55:22:10:ef:fa:29:93:5e:c0:
55:5a:b5:67:22:c7:cc:8f:7e:80:07:07:ff:1f:60:8c:a1:59:
dd:80:0f:92:33:15:38:9c:b3:ff:b0:55:63:b2:1e:cb:18:5d:
19:2c:a7:f0:88:99:45:11:22:d6:55:a8:a6:a7:1e:9d:8b:4f:
b8:da:22:ec:6a:ab:33:c2:00:d4:5c:46:b2:d7:a7:f2:6a:2f:
e2:13:b9:f4:88:79:d4:b9:ef:30:7e:3f:d4:92:f4:df:1f:1b:
d1:4e:ec:f5:ca:3d:37:c9:10:e4:e6:15:03:95:a2:a7:27:cf:
37:43:4d:b0:b9:e8:52:93:2a:18:47:a6:ed:45:f9:c2:2c:19:
bf:85:93:63:15:ab:aa:b1:d8:62:3f:53:84:1c:95:ba:89:18:
6e:3c:93:76:78:8f:e7:1e:85:26:2f:5a:c0:ce:a4:54:3c:7f:
84:8f:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:51 2024 by rpki-client on console.sobornost.net