Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/Q5-l8nFLXijqOUR-5x_3DSk6xDg.roa
File: Q5-l8nFLXijqOUR-5x_3DSk6xDg.roa (raw, json)
Hash identifier: TNF8lWnGiIq80tYTvvbc3FaW4wXUSjs1TIwCAs0w6JE=
Subject key identifier: 43:9F:A5:F2:71:4B:5E:28:EA:39:44:7E:E7:1F:F7:0D:29:3A:C4:38
Certificate issuer: /CN=a98785a6259f7b6afa3e2d1e445362a2abdd440e
Certificate serial: 01857139E6A467636ACAE55455ED1D129B05
Authority key identifier: A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/Q5-l8nFLXijqOUR-5x_3DSk6xDg.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28685
IP address blocks: 185.31.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e6:a4:67:63:6a:ca:e5:54:55:ed:1d:12:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98785a6259f7b6afa3e2d1e445362a2abdd440e
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=439fa5f2714b5e28ea39447ee71ff70d293ac438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:96:97:67:e5:05:6f:91:2a:59:cb:32:7e:
25:91:87:6f:8e:aa:f1:c6:e1:50:c3:ec:ac:5c:37:
fd:0e:cd:01:b3:2c:c5:97:64:ab:e1:92:f7:30:cf:
1f:c7:7b:ea:fd:7c:dd:ee:04:33:64:86:4a:f1:14:
c8:ec:d2:23:65:18:29:03:13:a1:74:cb:ac:f8:bb:
db:13:45:cd:de:53:79:d2:75:4c:b1:dd:20:dd:30:
a8:0a:54:4c:b4:e4:e4:4c:25:c3:0e:bb:2e:3e:b4:
a4:46:d4:6b:cd:66:8c:e1:1b:e2:bc:41:b9:31:0a:
69:4e:8f:fc:a1:d7:b3:78:de:c9:43:47:87:09:4b:
39:54:b6:2c:27:3c:23:5b:4a:4e:39:13:c0:60:7a:
b5:dd:ed:93:42:21:f1:3b:5c:59:29:71:d4:60:97:
72:96:fd:c8:b9:a5:f2:4c:32:88:e2:54:72:26:11:
be:ef:45:33:ad:62:2f:d8:21:d7:1c:87:76:a7:8a:
45:eb:13:e8:bd:9c:9f:d5:61:7a:5e:16:0b:d1:46:
5d:7b:8b:1c:96:41:ad:73:ea:2c:54:28:fd:21:c8:
78:b7:78:ab:3c:3d:ec:29:12:9b:43:78:49:d7:80:
57:6f:50:02:04:d6:8f:1c:88:a9:44:36:53:90:9d:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:A5:F2:71:4B:5E:28:EA:39:44:7E:E7:1F:F7:0D:29:3A:C4:38
X509v3 Authority Key Identifier:
keyid:A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/Q5-l8nFLXijqOUR-5x_3DSk6xDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/qYeFpiWfe2r6Pi0eRFNioqvdRA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.200.0/22
Signature Algorithm: sha256WithRSAEncryption
37:48:3a:56:4c:5a:de:25:fc:86:3b:7a:76:e0:6c:21:3b:95:
b4:f9:6a:53:b9:8f:06:21:d2:96:3a:71:7b:a5:4a:ce:c9:74:
93:3c:0b:40:72:c7:cf:81:c9:01:b7:39:84:2e:b6:ca:59:de:
34:2d:d4:f6:aa:89:ea:9a:9e:88:7c:c8:24:ca:70:0e:b9:e0:
9b:82:66:96:30:ca:65:4f:7c:b9:b2:75:ff:3f:45:9f:62:35:
2b:bf:f5:fd:71:42:aa:a9:d9:ab:84:75:75:52:2d:c4:64:77:
e7:75:27:ea:7d:df:a3:8e:76:63:7b:bf:15:12:35:ac:02:13:
03:fd:f6:dc:8d:04:5f:2d:d0:44:b5:62:2c:29:66:6c:ec:08:
e6:b1:da:bc:69:71:36:39:f8:ac:bf:81:97:6b:60:da:76:d0:
a4:55:5a:4b:d9:e2:f5:1e:55:26:5c:5e:7c:06:3f:02:7a:7c:
09:33:d3:5e:3f:9f:c1:40:8e:0a:09:cf:9a:e2:bc:d8:d6:8b:
a1:93:f4:00:a3:d9:bd:13:ad:b0:0b:15:64:38:0d:4b:3c:80:
7d:6a:22:dc:11:c8:17:f9:11:70:c4:41:21:10:86:03:c0:1d:
3b:59:87:6b:f6:2f:7e:29:0f:45:4a:38:21:c2:f7:29:9b:5f:
8b:4c:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net