Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/nfGRyjwHbUWNGqk925SluWhjTBs.roa
File: nfGRyjwHbUWNGqk925SluWhjTBs.roa (raw, json)
Hash identifier: sXz/HfJqK3PrOFTp94lmofP1UYObfgxLWUAc7CEslDY=
Subject key identifier: 9D:F1:91:CA:3C:07:6D:45:8D:1A:A9:3D:DB:94:A5:B9:68:63:4C:1B
Certificate issuer: /CN=8070314fbf3491e6af73039898246d18b5746538
Certificate serial: 01821B0FE6B6D7AA32A1216369919142976C
Authority key identifier: 80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/nfGRyjwHbUWNGqk925SluWhjTBs.roa
Signing time: Wed 20 Jul 2022 10:03:23 +0000
ROA not before: Wed 20 Jul 2022 10:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8312
IP address blocks: 185.213.0.0/24 maxlen: 24
185.213.3.0/24 maxlen: 24
185.213.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:0f:e6:b6:d7:aa:32:a1:21:63:69:91:91:42:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8070314fbf3491e6af73039898246d18b5746538
Validity
Not Before: Jul 20 10:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df191ca3c076d458d1aa93ddb94a5b968634c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:ab:6e:5f:e3:b3:93:87:59:fe:68:77:98:
34:af:bf:e4:1c:93:b7:e1:a0:e0:33:e8:28:e1:a9:
fb:e1:a8:ea:ac:2c:6a:f6:b0:bb:85:88:92:56:8f:
33:63:30:a4:93:0c:b9:ca:fc:d9:7c:18:35:42:1f:
2e:eb:b1:92:10:23:8b:ca:55:43:45:0f:27:81:0b:
bf:62:21:e9:1c:12:ee:ef:8f:8d:79:71:b7:7e:54:
7c:68:5e:b0:39:12:a2:3c:9e:e1:2d:26:f6:86:4b:
b9:ec:91:3d:fd:0a:c2:78:c5:c4:78:d6:28:5d:f0:
df:2d:43:a0:f7:06:ab:e4:78:94:69:df:db:3c:12:
88:f2:b1:9e:e9:2b:23:85:b3:f3:ff:52:18:91:2d:
c4:5c:90:0f:5f:c5:f4:c7:73:d1:29:ac:c6:21:dd:
97:75:7e:e2:69:4f:af:16:51:25:fe:73:ef:d6:cf:
68:6a:61:38:8a:a9:bc:3e:7a:ad:31:16:05:b8:69:
a9:3b:2c:36:c0:ec:97:ca:12:3a:80:21:55:95:46:
29:d5:6b:82:0e:cc:4e:b8:6a:92:7a:01:87:9c:54:
9c:33:6a:20:a2:9f:fe:d8:9a:3c:21:e8:f3:bf:9f:
ac:14:e5:67:1c:5b:15:fe:a3:bc:66:b3:6f:89:b1:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:91:CA:3C:07:6D:45:8D:1A:A9:3D:DB:94:A5:B9:68:63:4C:1B
X509v3 Authority Key Identifier:
keyid:80:70:31:4F:BF:34:91:E6:AF:73:03:98:98:24:6D:18:B5:74:65:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAxT780keavcwOYmCRtGLV0ZTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/nfGRyjwHbUWNGqk925SluWhjTBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/179e26-44b4-4998-a935-05db24a9970f/1/gHAxT780keavcwOYmCRtGLV0ZTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.0.0/23
185.213.3.0/24
Signature Algorithm: sha256WithRSAEncryption
43:58:8e:75:54:a5:0e:3f:ca:35:92:67:ab:b4:33:2c:a5:ba:
44:1a:2b:96:53:81:94:8f:f3:90:3c:0f:3c:77:2a:f1:40:e0:
7c:da:f8:53:d0:d1:2c:42:cc:11:63:a6:9d:64:24:e5:33:5c:
4e:df:c1:a3:e3:c4:0e:0f:66:b0:f7:3b:0c:fb:bb:7e:85:64:
2e:6e:7a:c7:6c:5e:ea:b8:a5:be:c1:fc:17:8f:ec:fa:49:58:
47:a4:98:70:c7:88:95:bb:de:82:78:60:1b:04:95:be:77:93:
bc:a7:3e:a5:a8:dd:6d:02:72:0b:08:49:29:3a:6e:bd:d7:d2:
cd:0a:43:13:35:e9:d4:1b:05:4d:d5:f0:1f:b8:cb:2f:dc:19:
01:21:9d:04:87:69:71:26:0a:72:70:2e:51:6d:11:61:fb:8c:
2a:67:73:3b:ac:37:90:be:70:59:0b:33:01:78:15:7e:d4:ce:
cc:c5:6b:04:a6:c6:f4:75:81:c8:de:a1:56:cb:9a:b0:df:6a:
a2:df:18:45:cb:1f:62:39:e6:44:51:04:60:ff:cf:66:8b:35:
77:35:9f:1a:0a:ec:39:e9:65:f5:9b:71:4b:03:59:17:96:24:
90:26:0b:98:01:7f:5e:23:79:3b:a6:1d:7e:a5:03:98:9d:f7:
2e:97:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net