Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/MuBHqR4FhDWQMHE0JpXaSqICw4I.roa
File: MuBHqR4FhDWQMHE0JpXaSqICw4I.roa (raw, json)
Hash identifier: a0bV/WCpwUwxQIcQaODViSVvHh9LeMvY9FdHBJfrekU=
Subject key identifier: 32:E0:47:A9:1E:05:84:35:90:30:71:34:26:95:DA:4A:A2:02:C3:82
Certificate issuer: /CN=77c51066d4f53dae10e69674dced3f032dd72efd
Certificate serial: 01878366BF972D19CCE4EE9AB7AF46782954
Authority key identifier: 77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/MuBHqR4FhDWQMHE0JpXaSqICw4I.roa
Signing time: Sat 15 Apr 2023 05:32:41 +0000
ROA not before: Sat 15 Apr 2023 05:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 185.138.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:66:bf:97:2d:19:cc:e4:ee:9a:b7:af:46:78:29:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c51066d4f53dae10e69674dced3f032dd72efd
Validity
Not Before: Apr 15 05:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32e047a91e058435903071342695da4aa202c382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:f3:1c:7f:12:0f:f4:62:04:2c:94:d0:0c:
36:49:7c:58:2c:6e:2e:2d:9b:f7:14:ae:e9:63:02:
66:2b:a0:77:66:8d:1c:2c:fb:61:33:1d:e3:86:b3:
ad:59:99:09:d9:f3:98:03:2c:03:6f:a1:58:36:76:
16:51:95:5e:4b:f4:d3:78:f7:a2:65:b4:b8:78:0b:
8f:3f:b1:ae:49:36:31:60:64:c2:58:4b:1e:2a:e7:
0c:a4:99:1c:ce:69:37:cc:50:5d:77:74:32:cd:de:
bb:c3:ca:f8:60:a9:47:28:95:7f:74:07:4d:0a:63:
34:c4:c3:a9:89:53:e8:c2:6b:61:cd:96:f0:ca:e4:
89:66:c2:6b:87:c1:13:02:75:b8:27:91:8a:ed:02:
d4:7a:af:6a:99:52:f4:19:63:e6:a7:87:90:6a:4d:
41:18:9e:67:12:e9:5c:3b:e0:9c:17:4d:c4:93:6d:
8a:59:60:3b:2e:4c:eb:56:e2:7d:37:a0:cf:c9:22:
78:2e:98:9e:ea:79:8c:d5:a8:c1:76:03:02:18:2b:
74:ca:82:e1:ea:82:d4:9e:cd:0c:f0:a0:d5:10:49:
9a:73:7c:56:56:bd:bc:12:2a:f3:f6:66:7b:c9:b5:
7f:d7:7a:8e:52:5d:ae:a2:22:7f:32:ba:30:69:45:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:47:A9:1E:05:84:35:90:30:71:34:26:95:DA:4A:A2:02:C3:82
X509v3 Authority Key Identifier:
keyid:77:C5:10:66:D4:F5:3D:AE:10:E6:96:74:DC:ED:3F:03:2D:D7:2E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/MuBHqR4FhDWQMHE0JpXaSqICw4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/53a03e-5571-456f-88a6-831817955d33/1/d8UQZtT1Pa4Q5pZ03O0_Ay3XLv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dd:9b:39:fd:35:92:51:6d:76:06:4c:fa:8a:4a:90:45:cb:
27:bb:5f:9f:61:6f:9a:a9:da:6e:97:8e:51:b2:b1:e6:3c:78:
e5:d6:15:0a:85:75:0b:a4:0b:11:19:d2:60:2e:1c:53:dc:e2:
bc:c4:6f:ae:bf:96:8d:cd:4c:56:b4:3b:b7:b0:90:ae:ba:de:
2d:d7:cc:c6:74:9c:25:b6:42:89:43:d4:36:e1:fb:3f:fa:6d:
23:aa:e3:ad:46:88:22:e8:9f:2f:39:10:b2:b9:bc:74:58:11:
ea:c9:fd:bd:02:e8:6d:9c:60:d4:d2:9f:93:05:f8:81:00:2b:
20:be:54:ad:bb:c5:92:a0:35:1d:57:45:95:dd:2a:76:9d:fc:
ea:ec:66:54:15:7e:77:82:4c:e5:65:cf:03:ef:d5:4e:e9:7a:
ae:2c:c0:16:ed:c2:67:fa:43:c0:91:da:39:50:e4:69:e6:a0:
cd:8f:f8:ff:13:45:43:f1:c1:e7:9e:4e:33:a5:66:57:34:bc:
a1:46:9a:2b:e3:a6:61:98:96:56:8f:13:e5:b6:63:42:bb:0f:
ab:fc:b2:61:10:61:06:6b:9b:97:ed:20:02:ac:4c:97:f7:a8:
e6:1a:62:b1:98:49:64:c6:90:d4:bc:48:b0:67:87:65:73:f7:
7d:e8:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net