Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/8nmNurx3ZoREY0tJcs0Kmw_P_xs.roa
File: 8nmNurx3ZoREY0tJcs0Kmw_P_xs.roa (raw, json)
Hash identifier: SBmmFZzf8GS5NTyKloZWWzajVL9SkSq/1Q6Qd31/a78=
Subject key identifier: F2:79:8D:BA:BC:77:66:84:44:63:4B:49:72:CD:0A:9B:0F:CF:FF:1B
Certificate issuer: /CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
Certificate serial: 01856F0B6340665A106A64D1CB919B6DAAB9
Authority key identifier: C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/8nmNurx3ZoREY0tJcs0Kmw_P_xs.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 62.204.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:40:66:5a:10:6a:64:d1:cb:91:9b:6d:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2798dbabc77668444634b4972cd0a9b0fcfff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:40:36:c8:c1:99:de:11:dd:43:34:98:b1:
e6:29:62:79:53:46:ea:d8:43:9c:40:3b:9c:4a:a3:
aa:1a:99:7d:f7:2f:50:c5:20:2c:ae:8e:b0:47:ae:
81:e1:9d:52:3d:90:37:af:7f:d8:60:15:47:8d:0d:
19:f3:81:6b:6e:5f:a4:9a:b9:5f:df:a8:97:a7:af:
de:f7:d9:17:b9:1b:e5:08:9d:f3:cf:3b:a3:a7:81:
09:09:7f:b1:61:ae:4f:d5:35:29:11:d2:bc:5c:d7:
6e:0e:4c:2e:be:c8:b8:5c:5d:3c:0e:86:58:1b:bc:
7b:ea:38:7c:34:f9:79:e9:13:e1:4b:0c:b6:39:38:
92:52:ca:b6:af:be:37:e1:d1:2d:cc:8a:c4:db:9e:
7a:f4:e6:e0:71:80:98:df:75:c8:de:79:8e:74:b8:
b0:b7:1a:7a:b0:c8:b0:17:1f:55:ec:38:a0:ab:a9:
26:aa:33:63:00:ee:20:b1:59:2f:be:55:94:16:09:
70:62:d2:55:27:28:25:2a:8f:1c:38:bc:bf:58:aa:
4e:d6:f6:7f:ea:36:78:c9:ff:22:ff:46:96:b8:ea:
26:32:d5:17:0e:d8:c6:15:38:d0:b2:c6:3a:fb:e3:
da:dc:85:61:36:e5:fb:49:a4:82:5d:5a:f8:c5:80:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:8D:BA:BC:77:66:84:44:63:4B:49:72:CD:0A:9B:0F:CF:FF:1B
X509v3 Authority Key Identifier:
keyid:C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/8nmNurx3ZoREY0tJcs0Kmw_P_xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.49.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4b:95:65:9a:d3:c4:6a:a4:df:09:a7:f4:fb:65:3d:d4:bc:
ed:8d:c7:ca:35:c3:5a:cc:e7:85:ca:8a:b7:4c:b6:96:de:f3:
dd:5e:2e:43:b6:16:9d:3d:5b:e7:3e:d7:b9:a2:a5:45:6b:ce:
eb:df:9f:b2:b8:37:bf:47:f1:96:28:b4:3f:ea:a5:c1:45:48:
07:9e:45:a6:72:c3:02:b7:25:7f:79:c5:73:95:32:18:f3:6d:
ff:58:8b:f6:6f:26:ca:b4:a9:6a:7b:fd:25:60:24:e2:f2:70:
24:ad:d8:95:99:d0:af:37:a7:d9:0f:96:01:4b:7c:21:e9:21:
f8:44:76:35:66:f0:a3:54:8e:26:09:69:06:87:df:87:91:82:
42:2c:57:b2:10:05:7c:ea:87:c8:9a:04:16:26:59:d3:03:eb:
6e:ba:d0:0b:b4:a2:e2:ff:36:a7:e0:a9:f1:01:ea:c1:5e:e0:
ba:89:7d:a1:c7:19:e1:69:d4:e0:59:ec:ab:a1:d5:85:35:6b:
04:e3:09:bb:25:a8:70:1b:f4:9c:02:64:1f:bb:bb:a0:bd:ff:
d9:f4:62:85:dc:6a:11:fc:13:a8:b9:a1:32:e3:4f:20:82:07:
32:b4:fa:bf:d7:c0:ba:81:a8:72:f0:55:37:4f:b5:ac:38:26:
ec:0e:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net