Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/2_rF0aVtsU9S6Kz6rxl85_pvkXc.roa
File: 2_rF0aVtsU9S6Kz6rxl85_pvkXc.roa (raw, json)
Hash identifier: LO3Wxe01CEnoHtQSHUyac40wCzi6rXL6LDHa5yeSdGw=
Subject key identifier: DB:FA:C5:D1:A5:6D:B1:4F:52:E8:AC:FA:AF:19:7C:E7:FA:6F:91:77
Certificate issuer: /CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Certificate serial: 0182D456D6498EAB4B70AE94C49B0E749903
Authority key identifier: 85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/2_rF0aVtsU9S6Kz6rxl85_pvkXc.roa
Signing time: Thu 25 Aug 2022 09:30:36 +0000
ROA not before: Thu 25 Aug 2022 09:30:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209326
IP address blocks: 62.106.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:56:d6:49:8e:ab:4b:70:ae:94:c4:9b:0e:74:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Validity
Not Before: Aug 25 09:30:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbfac5d1a56db14f52e8acfaaf197ce7fa6f9177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:c7:e6:4d:f7:96:e8:9b:46:ee:21:b3:f0:
93:7e:f7:1c:57:78:ff:6a:7d:82:60:39:64:60:06:
51:85:32:45:d9:bd:9c:48:a0:bc:31:e3:69:58:43:
cb:8b:14:ca:5f:24:63:f5:4c:c7:c0:36:f1:86:5c:
44:81:5e:84:fc:8b:0f:64:8a:07:0a:82:c0:1b:8c:
66:e4:3b:6c:3a:2e:fd:4f:27:2f:c2:3b:d9:fc:b5:
bf:16:ef:d0:24:a6:c2:5e:b4:73:12:70:ba:9e:39:
1d:d1:90:88:25:43:1b:57:02:a8:0d:ba:9d:aa:89:
a2:f3:36:30:be:a0:f5:4b:66:74:99:7e:d4:5c:8b:
7b:50:c3:07:d6:3a:b8:f0:81:b5:b7:84:55:3c:e4:
48:94:a8:05:e4:a4:8d:08:89:fc:f4:19:82:88:45:
12:fa:3e:01:a1:b2:41:7b:b0:e8:fd:0d:98:09:9a:
b1:54:7e:c7:d7:60:ef:6b:38:c9:36:2e:af:cc:bf:
92:7a:b0:9e:04:c3:4f:cc:30:0e:95:35:48:dd:b6:
51:7b:4c:41:c8:77:83:40:87:ac:87:a6:df:49:0a:
45:0a:58:fd:49:b3:22:95:fc:ff:48:92:9c:92:ac:
c7:0d:3e:96:77:48:01:ea:dd:c7:45:97:ab:cd:a6:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:C5:D1:A5:6D:B1:4F:52:E8:AC:FA:AF:19:7C:E7:FA:6F:91:77
X509v3 Authority Key Identifier:
keyid:85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/2_rF0aVtsU9S6Kz6rxl85_pvkXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:60:b8:54:4c:df:7b:db:c8:8c:31:53:91:f2:9c:70:d5:
0f:f3:09:59:d5:60:51:41:bd:a1:10:ca:3f:aa:42:cc:aa:a3:
7d:92:e2:23:95:35:eb:9c:7f:9c:22:f3:fc:fb:33:63:23:58:
c6:f8:f2:6f:b0:65:97:c8:ba:65:b4:e6:d8:90:a9:40:a7:bb:
34:e1:ee:ce:bd:67:43:0c:4b:f0:ac:09:7f:3a:78:01:1a:a1:
1f:c9:ca:09:61:08:61:b1:cd:73:83:da:5d:1c:ed:92:36:4e:
1a:ab:70:fd:98:cd:10:ce:cf:28:7e:00:f6:05:a7:70:b1:61:
2c:19:48:6f:c0:6e:e2:71:3e:51:eb:87:5f:91:e8:42:df:c9:
aa:46:e2:c9:d4:2e:8c:20:81:a0:07:49:f3:da:6d:e0:ac:82:
65:63:d4:83:ff:1c:8d:eb:dc:84:19:0f:90:2b:b8:24:e5:cf:
82:2c:57:77:4d:67:40:ad:a7:04:16:ff:e8:c6:45:5d:01:5a:
19:11:2b:dd:71:84:cb:86:57:51:07:6f:21:0a:e6:47:d7:d5:
3d:a4:b2:3e:6d:01:aa:e4:ca:19:e4:ee:57:51:bd:3a:a0:c8:
8b:63:db:c3:c1:cb:9d:12:d5:18:5b:70:78:a0:aa:e7:b3:4c:
d2:35:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net