Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/YiHOvtjK4KXhBoR3njOSCnwcvyU.roa
File: YiHOvtjK4KXhBoR3njOSCnwcvyU.roa (raw, json)
Hash identifier: OlL3dgxuMqCKkVIdw9TfaGzXUfKvPy6AtPB5X6Jo99g=
Subject key identifier: 62:21:CE:BE:D8:CA:E0:A5:E1:06:84:77:9E:33:92:0A:7C:1C:BF:25
Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial: 01930B5DDF52D873115FB04C8AF22B919182
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/YiHOvtjK4KXhBoR3njOSCnwcvyU.roa
Signing time: Fri 08 Nov 2024 10:42:01 +0000
ROA not before: Fri 08 Nov 2024 10:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 212.115.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:5d:df:52:d8:73:11:5f:b0:4c:8a:f2:2b:91:91:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
Validity
Not Before: Nov 8 10:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6221cebed8cae0a5e10684779e33920a7c1cbf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:91:14:3a:41:c3:13:02:ab:47:b8:e9:17:
dc:60:08:57:35:1e:09:6b:73:28:44:b7:7b:48:1e:
4b:92:67:9f:21:8d:d1:ea:b1:25:12:62:06:e9:f1:
8f:b3:3f:eb:3a:c2:2a:bf:05:3c:73:f3:91:23:8d:
9e:ca:5d:ea:00:82:e1:49:0d:03:7e:6d:0c:fc:7f:
72:72:fd:be:1b:21:a1:53:1f:64:1a:a1:02:be:7d:
dc:bf:82:e8:b2:a3:60:5f:43:be:8b:3c:e1:4d:5c:
57:28:e1:f8:9e:c9:36:8e:61:90:09:49:b3:13:55:
3f:26:d2:90:e0:4f:60:1b:b4:46:a4:35:6f:b8:32:
08:5f:45:06:6f:35:21:f0:2b:5f:07:2f:05:43:ce:
85:9d:7d:e5:08:99:3d:32:4f:d4:20:e8:e0:55:6d:
df:93:71:1c:30:f2:af:26:fc:44:c7:2c:92:57:33:
23:2e:23:ca:d3:38:c4:59:55:b6:e9:50:5b:19:8d:
1d:1a:59:12:4f:42:67:06:bc:fd:8a:fe:18:69:53:
8c:85:96:73:32:d1:e3:2d:ce:84:f1:5a:0f:c6:9d:
3a:51:82:ca:54:61:8d:c1:1f:72:1d:24:40:03:8b:
33:cd:99:a3:b5:7b:c3:da:20:b1:c9:5a:8f:06:51:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:CE:BE:D8:CA:E0:A5:E1:06:84:77:9E:33:92:0A:7C:1C:BF:25
X509v3 Authority Key Identifier:
keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/YiHOvtjK4KXhBoR3njOSCnwcvyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.120.0/22
Signature Algorithm: sha256WithRSAEncryption
65:34:1d:49:b0:ef:48:14:7b:b8:22:ef:7d:19:24:ed:df:f6:
f1:51:24:ff:b1:62:ff:35:ec:c5:fd:48:44:b0:74:8f:29:92:
95:4d:66:c4:cb:61:08:65:9f:68:7d:65:36:f5:a9:84:aa:74:
11:16:47:ff:40:c1:f5:d3:ba:a5:ff:17:a6:9a:05:2e:da:64:
d5:c2:9c:3e:52:6a:1b:6d:58:32:04:a1:f3:be:af:16:02:38:
49:3b:83:83:ac:00:b8:7a:05:41:42:14:b3:28:0f:45:62:9b:
18:0e:18:ba:11:02:fd:99:0c:89:95:b1:94:8f:b6:d6:e4:4e:
20:b3:1b:92:f1:cd:8a:a8:0c:ba:e3:7f:86:12:0c:20:d3:fe:
9b:da:5c:36:a4:7b:b3:00:9c:54:fd:1a:54:56:e6:15:1f:0e:
e8:bc:1b:18:f0:c5:3d:89:dd:0e:59:a9:36:c6:f0:4f:d2:c6:
7c:04:83:66:d8:e9:d3:3f:ed:be:23:ab:80:00:fa:55:bc:bc:
de:34:1b:6e:70:5d:ec:0e:98:c0:59:8e:a4:4a:81:47:c9:84:
e8:84:c4:f1:fe:88:0b:d7:8d:91:32:9f:e4:e3:23:da:33:eb:
bf:c1:b2:c0:4d:7d:5c:eb:dc:cb:51:17:5b:4d:31:26:d6:23:
52:46:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:53 2024 by rpki-client on console.sobornost.net