Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/5nmmAloHFABsa2E50Z2PxtCTMsU.roa
File: 5nmmAloHFABsa2E50Z2PxtCTMsU.roa (raw, json)
Hash identifier: TjHOjVk6LW/JgpJJqeTIigsmlrnBlzUnNCTwdI565P0=
Subject key identifier: E6:79:A6:02:5A:07:14:00:6C:6B:61:39:D1:9D:8F:C6:D0:93:32:C5
Certificate issuer: /CN=8070314fbf3491e6af73039898246d18b5746538
Certificate serial: 01821AF517638EBBA191BE305D45A4A66817
Authority key identifier: 80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/5nmmAloHFABsa2E50Z2PxtCTMsU.roa
Signing time: Wed 20 Jul 2022 09:34:06 +0000
ROA not before: Wed 20 Jul 2022 09:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8312
IP address blocks: 185.213.0.0/24 maxlen: 24
185.213.3.0/24 maxlen: 24
185.213.2.0/24 maxlen: 24
185.213.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:f5:17:63:8e:bb:a1:91:be:30:5d:45:a4:a6:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8070314fbf3491e6af73039898246d18b5746538
Validity
Not Before: Jul 20 09:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e679a6025a0714006c6b6139d19d8fc6d09332c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:71:90:2b:48:77:89:2c:d2:2f:20:53:93:
17:cd:b5:5f:74:2f:d0:22:dd:75:86:ac:73:91:c8:
53:c0:09:71:56:9d:f6:06:52:a3:53:60:4a:c9:78:
73:c2:e8:13:c9:f2:8a:ff:ab:38:de:a7:a3:cd:0b:
81:42:b0:d8:f1:82:a1:f0:4b:70:0b:7b:2f:64:f5:
c5:96:0e:75:49:fc:ec:8c:69:65:cf:66:a4:2b:c1:
8d:b5:33:46:78:5d:69:c1:e0:5a:a1:1c:73:60:4d:
32:06:8f:92:18:8b:0c:59:b7:c5:22:fc:c2:1a:9f:
b0:9c:93:d3:86:b1:a5:21:cb:02:74:de:de:c0:ee:
b8:0f:1e:f9:d6:bc:44:bf:c5:4e:0d:13:b4:b0:84:
68:08:13:8c:48:b2:e7:7e:56:f1:6f:7c:3c:04:10:
8c:01:25:79:b7:9e:16:4f:f0:72:13:2f:8b:5e:0e:
cd:d5:6b:39:b9:0f:a6:92:b6:02:6a:91:3b:10:b0:
19:92:83:ad:e8:1d:5e:a3:3a:99:5e:6a:2f:52:0c:
50:0b:3b:82:f5:84:00:03:96:eb:63:a8:95:f6:9c:
49:81:4c:76:b6:ba:ea:c4:bc:c9:69:f0:8a:ea:d8:
99:fb:6f:1e:18:6c:cd:f1:9e:ec:00:1c:0c:0d:e7:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:A6:02:5A:07:14:00:6C:6B:61:39:D1:9D:8F:C6:D0:93:32:C5
X509v3 Authority Key Identifier:
keyid:80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/5nmmAloHFABsa2E50Z2PxtCTMsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/gHAxT780keavcwOYmCRtGLV0ZTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:89:61:59:44:8c:5d:41:3b:d1:b0:6d:b0:ad:bb:72:fc:5e:
52:b0:c9:dd:e2:17:8d:f2:ee:09:b3:e5:d9:1d:71:58:af:82:
bc:3d:39:c3:64:d4:dc:fa:c4:7d:eb:b1:b9:71:7a:71:79:d5:
ba:91:b6:1b:ed:fb:aa:46:c3:3c:1f:f2:a3:47:b3:5f:ce:89:
b6:b2:c3:e9:fc:4c:e1:c9:43:98:3b:1e:93:33:cf:c9:f0:51:
a4:92:d1:17:99:d8:18:64:47:f1:ba:6a:6f:ad:2c:7b:cf:7d:
09:8b:65:66:af:25:33:49:85:b0:1a:6c:73:f2:a6:81:ad:a4:
69:73:5a:17:98:e9:89:75:f7:29:6f:41:81:66:e2:0d:de:4d:
fb:b1:84:9b:8c:39:c4:92:ee:3b:1c:b5:ae:1c:bf:c0:b6:53:
31:f9:bf:2c:a4:64:bc:89:89:ab:ff:e2:49:6b:41:b3:b6:00:
53:85:eb:47:60:8a:ce:2d:cc:74:84:32:ea:a5:d1:17:3f:f5:
d6:39:8c:ff:7c:17:4a:fa:4f:a2:52:60:8c:0d:28:d0:d8:03:
61:2d:f2:5d:d0:3c:1c:a0:70:a7:0f:ae:d1:5c:e9:af:ea:54:
f6:9b:b2:7d:b4:96:54:16:07:ca:47:b1:21:d4:9d:b1:07:06:
27:44:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net