Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/DZFkgbaPKsIgque6B-kXhcK-90Y.roa
File: DZFkgbaPKsIgque6B-kXhcK-90Y.roa (raw, json)
Hash identifier: 86pvRqgKp8/tpR0lMWUw67EsGjy7UkHa0duHEYcBnmM=
Subject key identifier: 0D:91:64:81:B6:8F:2A:C2:20:AA:E7:BA:07:E9:17:85:C2:BE:F7:46
Certificate issuer: /CN=8070314fbf3491e6af73039898246d18b5746538
Certificate serial: 03699222
Authority key identifier: 80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/DZFkgbaPKsIgque6B-kXhcK-90Y.roa
Signing time: Sat 01 Jan 2022 04:04:09 +0000
ROA not before: Sat 01 Jan 2022 04:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8312
IP address blocks: 185.213.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57250338 (0x3699222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8070314fbf3491e6af73039898246d18b5746538
Validity
Not Before: Jan 1 04:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d916481b68f2ac220aae7ba07e91785c2bef746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:2d:b4:9e:f8:d4:f5:8d:c7:92:88:a8:20:
1a:ee:74:23:13:8e:d4:6b:79:b3:ba:a1:9e:ec:1f:
cf:e4:9c:7c:90:67:e9:0d:8f:df:11:48:5d:ea:86:
de:6f:23:4a:b8:e0:77:6a:ed:b6:51:ad:37:09:b3:
5a:6e:a0:73:57:0d:aa:bb:43:90:e5:2e:07:89:47:
bd:6b:e3:2d:64:1f:7b:28:f7:c8:dc:53:09:d1:72:
47:07:65:ef:90:09:95:49:19:4c:25:44:6d:c4:d3:
6e:0c:8c:f8:ce:83:55:8f:12:fe:4c:0e:e8:95:16:
3f:48:5e:0b:60:04:f6:46:6d:91:bd:cd:6c:62:21:
fb:a5:af:35:fd:55:2e:8e:4b:8f:ca:86:38:9f:f8:
51:02:f0:d7:de:00:b4:49:30:47:4b:6d:22:e2:cb:
5f:d6:f3:da:fd:b8:b3:09:d8:18:67:9b:27:3a:7b:
94:9d:18:c8:99:3d:48:6d:5a:b3:db:24:55:e0:6f:
99:4b:39:d7:0a:29:68:2b:03:d7:0d:e9:78:7c:c4:
61:f0:43:83:20:41:be:dc:ec:bd:90:f4:7c:7e:1a:
8e:ae:d4:17:9b:51:c8:2b:42:10:e4:06:4f:15:f7:
69:7a:45:6b:9b:3e:d3:ca:e6:7d:78:5d:86:88:3f:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:64:81:B6:8F:2A:C2:20:AA:E7:BA:07:E9:17:85:C2:BE:F7:46
X509v3 Authority Key Identifier:
keyid:80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/DZFkgbaPKsIgque6B-kXhcK-90Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/gHAxT780keavcwOYmCRtGLV0ZTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4d:5f:88:cc:68:29:a9:db:5d:cb:a1:67:03:aa:9e:6d:84:
a6:13:12:e3:3f:b4:40:b4:59:a7:ef:ce:0b:ab:3c:b6:58:40:
e2:64:bb:ed:bf:b6:27:7e:76:a0:be:e7:9b:a5:cd:e4:7e:a5:
29:08:93:7d:ff:a2:d2:5e:a2:10:94:3f:f9:88:72:7c:d7:47:
6e:42:95:4d:21:20:91:39:10:30:4a:fc:66:06:72:80:73:cd:
37:ef:db:00:f3:37:ef:41:39:83:ea:22:a8:ec:73:89:2a:44:
8c:8f:20:13:f4:6b:e7:ad:28:d5:3a:66:81:d8:a9:24:06:b4:
3b:22:8d:fe:ec:6e:bc:51:aa:a2:c5:76:4b:31:5e:50:59:0d:
fc:e7:6d:50:07:57:6b:a4:59:e7:3d:4d:9b:23:96:5f:a4:5d:
5d:52:06:3b:63:05:0c:07:26:e1:8f:54:de:a9:77:d0:91:cc:
fd:3c:af:98:89:10:07:b2:1f:df:f5:6e:27:53:ac:8a:a1:54:
dd:18:ac:f8:3e:cb:62:cf:f5:25:eb:01:ef:22:5a:82:0e:b5:
2f:3e:ee:93:06:74:b3:f8:0f:b4:dc:7c:0f:fd:bf:85:b8:a3:
85:6c:7a:e9:4e:3a:ee:92:e6:99:7e:55:67:1a:7a:5d:a2:c2:
c2:1d:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net