Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/JtaA7iWVco0PLVcunsLgAhAnXMI.roa
File: JtaA7iWVco0PLVcunsLgAhAnXMI.roa (raw, json)
Hash identifier: HUalSCE0vt20tU4nzEglCztEUn657drJe7z0GDWvvSw=
Subject key identifier: 26:D6:80:EE:25:95:72:8D:0F:2D:57:2E:9E:C2:E0:02:10:27:5C:C2
Certificate issuer: /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial: 0182F52CFD1C022A03B6FEA8622719018C09
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/JtaA7iWVco0PLVcunsLgAhAnXMI.roa
Signing time: Wed 31 Aug 2022 18:32:22 +0000
ROA not before: Wed 31 Aug 2022 18:32:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207647
IP address blocks: 87.239.9.0/24 maxlen: 24
87.239.8.0/24 maxlen: 24
87.239.8.0/21 maxlen: 21
87.239.10.0/24 maxlen: 24
87.239.12.0/24 maxlen: 24
87.239.15.0/24 maxlen: 24
87.239.14.0/24 maxlen: 24
87.239.13.0/24 maxlen: 24
2001:678:6a0::/48 maxlen: 48
2001:678:be4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:2c:fd:1c:02:2a:03:b6:fe:a8:62:27:19:01:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Validity
Not Before: Aug 31 18:32:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26d680ee2595728d0f2d572e9ec2e00210275cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:92:0a:52:8b:1b:3d:d4:a2:c4:d3:9b:f9:
e1:e2:c1:2b:af:bd:08:31:e1:a7:ee:6b:37:83:12:
4a:04:97:a3:b8:1d:34:cc:31:34:32:7f:78:a6:85:
1d:21:db:aa:61:10:5e:3b:f9:bc:75:2d:0d:26:e1:
11:a6:69:55:1f:63:29:d2:d4:cd:0b:a2:d2:4b:01:
60:9e:c4:11:12:c1:56:cf:7f:8a:2b:c7:e0:b0:b6:
61:0d:b6:41:93:2f:c9:53:ec:25:c7:28:b9:dd:ef:
31:8c:1b:33:fc:6f:ac:6a:79:29:59:db:23:c4:64:
70:0b:6d:12:f7:7b:10:a3:1d:03:aa:6a:bc:1c:b2:
41:8a:b4:cc:41:f4:6a:e4:98:8d:cc:b8:d0:56:39:
5b:54:6b:7a:de:7e:64:f9:c2:6c:4c:08:bf:4b:f1:
f0:1a:07:66:00:59:31:f0:e9:e1:09:b1:9b:3b:de:
63:ff:87:35:4f:44:f6:15:61:dc:36:96:47:94:99:
c3:b0:8e:b9:5e:3c:06:dc:89:5b:8d:45:bf:8b:75:
31:2e:38:17:9f:41:3a:fc:75:c1:c5:a8:96:88:ff:
75:80:b5:25:45:ff:80:eb:c2:88:a2:4c:a5:8f:a8:
69:89:24:e6:28:64:e4:71:4d:ad:67:bb:b0:08:c3:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:80:EE:25:95:72:8D:0F:2D:57:2E:9E:C2:E0:02:10:27:5C:C2
X509v3 Authority Key Identifier:
keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/JtaA7iWVco0PLVcunsLgAhAnXMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.8.0/21
IPv6:
2001:678:6a0::/48
2001:678:be4::/48
Signature Algorithm: sha256WithRSAEncryption
92:ee:bd:f9:b5:14:25:6f:3d:0d:dd:5c:d5:28:f0:d7:1d:02:
27:f0:98:3a:60:c6:a1:8c:15:d9:84:9e:0b:90:04:38:46:6a:
b8:d6:a5:48:9a:3e:a2:ee:cd:9b:73:b3:bc:e0:c7:8c:87:e3:
a2:3d:11:ec:ed:02:95:3b:18:70:c1:ab:45:f8:0f:83:5a:86:
96:d1:c9:05:25:ac:ed:1d:a8:1d:ff:2e:6c:62:4d:6a:ae:00:
c4:ad:4d:7e:c1:11:d2:2b:9b:48:9c:f0:f3:4d:f7:17:89:10:
69:35:3f:b1:2d:49:dc:0f:62:80:97:00:07:ac:71:84:30:d6:
2f:e6:37:3a:38:e3:30:66:3b:07:ad:11:5c:43:5d:84:93:c2:
9b:e1:2d:a5:c6:ff:f7:7a:96:92:77:7d:44:c8:a2:93:99:0b:
fc:83:cd:a9:94:7b:35:3f:fb:53:e5:37:9c:c0:83:b5:23:b0:
06:bc:87:3b:44:ec:64:49:3c:a2:2b:fc:da:b1:cf:05:c2:e3:
ed:bd:84:fe:7e:03:25:46:58:1b:7c:c4:f0:8e:75:50:d6:ce:
a1:fd:af:d1:dd:48:02:eb:45:67:06:76:6a:ad:e5:df:2e:ef:
fd:26:95:5c:6e:cd:93:64:2d:fe:39:5a:ba:be:07:93:b7:33:
8f:2f:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:24 2023 by rpki-client on console.sobornost.net