Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/k6LbJpbSRPVmeKaxAf8O4oTbdBU.roa
File: k6LbJpbSRPVmeKaxAf8O4oTbdBU.roa (raw, json)
Hash identifier: q0vn6VAtGodk/tS6gzMIgAhreuGcZeQKXSDYW/4skRg=
Subject key identifier: 93:A2:DB:26:96:D2:44:F5:66:78:A6:B1:01:FF:0E:E2:84:DB:74:15
Certificate issuer: /CN=669fb61f94b679dce9855754f2aa8424d23d6952
Certificate serial: 05DB38E1
Authority key identifier: 66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp-2H5S2edzphVdU8qqEJNI9aVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/k6LbJpbSRPVmeKaxAf8O4oTbdBU.roa
Signing time: Wed 29 Jun 2022 08:20:04 +0000
ROA not before: Wed 29 Jun 2022 08:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 194.106.209.0/24 maxlen: 24
194.106.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98253025 (0x5db38e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669fb61f94b679dce9855754f2aa8424d23d6952
Validity
Not Before: Jun 29 08:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93a2db2696d244f56678a6b101ff0ee284db7415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:50:ed:79:21:03:7e:b5:ee:c1:d4:14:9e:
f1:d2:8f:13:01:ba:38:67:67:47:71:66:db:bd:28:
b8:53:7d:9d:9e:f3:b7:be:06:4e:02:c8:20:05:24:
e0:1b:8c:32:d3:92:27:67:2d:13:e5:c7:12:2d:0d:
3b:7d:0e:82:f0:a1:f1:e2:01:78:23:f9:3c:2e:81:
49:57:2f:87:3b:2c:ee:55:b3:de:33:26:31:ed:d3:
26:f7:cc:55:06:11:e7:c7:64:1b:e2:18:07:1e:31:
80:7c:c8:70:ed:b9:65:9a:74:78:28:50:57:94:ac:
e5:ae:5e:4c:d3:c3:c7:a4:d3:8a:95:2c:ff:07:f5:
a7:c3:87:dc:18:cf:45:7f:c0:b6:c1:28:d1:3c:41:
36:77:6f:fa:2e:04:2b:6b:97:77:99:3f:71:f7:cf:
df:45:6d:a1:ce:e8:98:38:cb:ba:9e:2f:b1:1c:13:
ca:21:92:ea:04:aa:a6:1c:6e:61:8f:a1:46:c8:90:
43:72:b7:3f:16:cf:cd:6a:03:62:d3:bd:73:8b:32:
eb:e6:75:32:d8:9e:02:50:19:fb:be:32:78:83:ce:
cd:7f:04:f9:25:a6:16:98:a6:47:91:d0:60:1d:d0:
0d:9b:f4:bf:61:ae:ef:a2:be:29:a0:56:24:b2:3c:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:DB:26:96:D2:44:F5:66:78:A6:B1:01:FF:0E:E2:84:DB:74:15
X509v3 Authority Key Identifier:
keyid:66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp-2H5S2edzphVdU8qqEJNI9aVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/k6LbJpbSRPVmeKaxAf8O4oTbdBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:f7:11:e6:a6:38:20:c8:e7:75:58:53:56:dd:70:7c:49:c7:
f5:5f:84:9a:02:a4:9b:02:ae:33:c0:c5:21:e2:fb:31:8a:27:
37:a2:10:a8:cf:1a:3b:3a:4a:00:30:26:d2:ae:8b:ad:ed:bd:
b1:f4:38:d4:e1:fe:cb:43:51:b4:32:3e:e4:2a:ca:71:5f:e2:
a5:ae:99:d3:7d:3d:76:0b:50:e5:4e:e8:cb:0d:af:37:dd:2c:
e7:77:9b:82:1f:3f:72:ec:4d:f0:80:2c:5b:fe:8d:fa:75:40:
a3:d4:74:71:e0:c4:89:62:c0:0a:94:c4:88:88:9c:cd:2e:0e:
b1:69:a0:4c:a3:a4:e8:02:f8:ed:4d:45:90:a2:88:25:8d:c8:
d8:35:95:6c:99:0d:61:63:54:4c:e8:66:8f:b1:7a:a6:d5:95:
fe:ba:28:c6:f5:d7:4a:a6:f0:ef:ec:a2:9b:56:1b:a5:cc:7e:
a0:15:a2:fb:b5:6e:c9:e5:af:46:fb:02:00:8e:bf:8d:ff:d3:
d4:57:7e:91:86:3a:30:d2:67:7f:e0:75:96:bc:23:1a:4e:94:
de:3e:ef:63:da:24:7f:2f:d8:6d:76:1f:d0:83:dd:f5:b8:88:
26:2c:e2:bb:50:31:9b:92:dd:6b:36:1b:51:c8:1e:21:aa:19:
c9:bd:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:40 2023 by rpki-client on console.sobornost.net