Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/0KgNw_NyPEAXdGefvKh67H6FWh4.roa
File: 0KgNw_NyPEAXdGefvKh67H6FWh4.roa (raw, json)
Hash identifier: yyvy+s/kgG3bl36RzXEfJNwhg6rMXtdVzLVedJCDheU=
Subject key identifier: D0:A8:0D:C3:F3:72:3C:40:17:74:67:9F:BC:A8:7A:EC:7E:85:5A:1E
Certificate issuer: /CN=a98785a6259f7b6afa3e2d1e445362a2abdd440e
Certificate serial: 0D952C
Authority key identifier: A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/0KgNw_NyPEAXdGefvKh67H6FWh4.roa
Signing time: Tue 05 Apr 2022 07:42:11 +0000
ROA not before: Tue 05 Apr 2022 07:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28685
IP address blocks: 185.31.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890156 (0xd952c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98785a6259f7b6afa3e2d1e445362a2abdd440e
Validity
Not Before: Apr 5 07:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0a80dc3f3723c401774679fbca87aec7e855a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:e2:3e:78:90:2f:ff:57:47:ab:4f:37:17:
43:96:18:1a:21:5b:40:e7:81:7b:5e:9e:b5:f5:ed:
28:44:ea:20:e6:fa:03:51:73:b3:eb:fc:40:56:c7:
23:90:47:3a:88:0c:15:26:9d:2c:89:66:0d:16:15:
9d:08:06:1a:b2:da:61:6f:65:0f:9a:3a:37:e4:ff:
58:e8:23:43:96:1b:2b:10:1e:0d:24:90:d4:7e:61:
5f:8b:e1:b2:fa:5f:9a:5a:ca:25:5a:ca:88:84:81:
c6:60:30:5e:42:8a:33:55:03:32:5f:31:36:45:21:
0a:dc:28:70:7c:c2:80:f1:d7:5f:98:a1:98:0d:b1:
ea:a7:74:de:9e:a0:4a:45:24:e9:ab:4f:d7:d0:6e:
2d:d5:05:aa:39:7d:7d:b1:1c:dd:74:f5:7b:e9:5c:
8c:a0:b9:54:5c:24:d6:dd:72:7d:e5:a9:7a:07:0b:
2f:5e:06:b5:bc:1b:76:7b:64:66:7e:b2:d4:da:81:
d8:9a:3f:23:00:64:85:76:99:0f:98:40:d2:72:5d:
c1:b6:5b:09:57:a4:f0:92:d5:89:68:62:92:39:50:
1c:6f:56:45:ad:ce:fd:2f:a5:d1:4f:85:3d:25:ae:
ff:28:a0:f4:2b:64:d7:e3:10:ad:1a:b0:39:b1:55:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:0D:C3:F3:72:3C:40:17:74:67:9F:BC:A8:7A:EC:7E:85:5A:1E
X509v3 Authority Key Identifier:
keyid:A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/0KgNw_NyPEAXdGefvKh67H6FWh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/qYeFpiWfe2r6Pi0eRFNioqvdRA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.200.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f4:c5:90:11:38:48:12:87:cb:59:90:f2:82:b3:38:fb:74:
35:87:c6:22:e8:b5:68:86:0e:34:4c:57:db:1f:96:e9:6b:02:
97:07:d1:c7:04:9a:11:32:4f:8e:b2:8a:da:7d:05:98:b3:de:
98:67:a7:d6:48:8a:37:01:4c:70:21:3d:60:a0:80:04:40:db:
8e:4c:4e:9d:ec:fa:2f:cf:36:17:d9:1b:6d:73:59:9a:f1:4d:
41:e4:26:d7:5e:55:85:ca:45:93:cb:93:75:e7:ee:49:23:c6:
ae:07:f6:46:0b:ee:28:86:a1:8c:cd:3d:d5:74:c0:4c:1f:fd:
44:f0:a3:02:bf:8e:f6:b2:a6:35:8e:50:b9:8f:ad:3e:42:36:
e5:33:81:2a:15:80:95:4b:c6:5c:3f:7a:8e:30:21:04:df:3f:
bf:51:e1:d3:12:1e:e9:d6:61:c2:a8:b3:be:58:34:f7:6b:49:
fb:22:15:f4:7f:4e:59:17:7a:51:a1:66:95:8a:97:5f:75:b4:
dd:e3:9e:f6:11:3f:8e:3c:cc:23:db:db:a8:16:39:48:ab:19:
ca:72:dc:a4:c0:e7:43:33:7f:af:5a:b2:c2:5f:da:58:c4:d7:
14:4b:5a:5f:85:ce:8a:c0:9c:5e:53:64:fb:48:c0:51:f2:da:
c8:a0:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net