Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/HDSYK-Jvi39W-6DVKfw3AJHP08c.roa
File: HDSYK-Jvi39W-6DVKfw3AJHP08c.roa (raw, json)
Hash identifier: II/+efNoPN5p7MRNCTM/m9lJ+WkYwrUT6XJWG1gbjCw=
Subject key identifier: 1C:34:98:2B:E2:6F:8B:7F:56:FB:A0:D5:29:FC:37:00:91:CF:D3:C7
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019103001C7BB5C432A8E3ECE70688A63AD9
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/HDSYK-Jvi39W-6DVKfw3AJHP08c.roa
Signing time: Tue 30 Jul 2024 09:37:04 +0000
ROA not before: Tue 30 Jul 2024 09:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207773
IP address blocks: 185.155.216.0/24 maxlen: 24
185.155.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:00:1c:7b:b5:c4:32:a8:e3:ec:e7:06:88:a6:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jul 30 09:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c34982be26f8b7f56fba0d529fc370091cfd3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:fd:fe:68:f9:b3:3a:2a:7e:aa:fa:53:cf:
b4:99:5a:38:24:7e:e6:cf:9f:c0:36:59:ee:52:b2:
c5:9c:f6:89:a7:36:0c:33:2c:ac:c5:af:96:a8:15:
fa:17:b4:1c:59:ed:a2:5b:a6:a2:a5:e2:92:33:cd:
31:84:0f:33:77:dc:1c:80:32:f9:c5:c8:de:56:4b:
3c:5e:0e:62:fb:12:ba:2b:e2:ef:87:1c:f4:cc:c3:
d2:87:dd:63:bb:ff:a6:31:ab:b3:f6:ef:62:3a:4f:
b9:5f:ee:19:76:c0:e2:48:88:39:c5:f3:21:51:35:
40:6f:a7:9a:ea:1b:1b:17:c7:14:fc:42:6a:7a:c6:
f4:53:36:d9:e6:77:a0:fa:75:6b:ce:bd:24:f6:79:
b7:80:03:f2:a7:cb:eb:36:bd:d5:43:ca:2a:97:18:
a1:92:65:4d:69:77:1a:da:08:60:c2:68:18:62:ee:
d1:1a:d1:f0:37:5a:22:2d:c8:7b:1a:2c:8e:de:2c:
d7:a0:61:1f:34:3e:81:7a:63:77:a3:9b:ca:32:b8:
ae:73:8c:b6:e9:7a:84:c4:19:bf:98:d9:0e:fa:f5:
ed:46:92:50:fe:e3:79:a0:c2:20:cb:9f:d9:99:bd:
d7:88:73:11:22:8d:5b:4e:c2:6d:4e:50:d2:d9:46:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:98:2B:E2:6F:8B:7F:56:FB:A0:D5:29:FC:37:00:91:CF:D3:C7
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/HDSYK-Jvi39W-6DVKfw3AJHP08c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.216.0/23
Signature Algorithm: sha256WithRSAEncryption
71:27:9e:03:07:d7:1c:c2:56:f2:2f:78:13:0b:62:a6:f2:b6:
42:1f:4c:47:02:fd:34:9d:3f:f8:05:61:e0:a0:82:5b:30:ec:
ba:d9:02:7c:26:2d:d7:f5:e8:a7:a9:c4:13:53:ae:52:90:83:
39:15:b6:e7:c1:0e:11:7a:2d:78:c7:23:bb:c3:23:68:5e:9c:
8e:78:8d:a5:a9:f5:c6:3e:96:a2:9f:3a:73:fa:b0:f0:cf:a0:
2a:18:e9:2b:02:31:c8:de:c2:2a:db:18:1e:e8:c3:ef:a3:29:
c2:33:f9:ca:7e:d3:1d:7a:db:84:5f:14:33:51:2d:5e:3a:67:
4c:96:95:9e:64:32:6a:5e:f5:2c:4c:8c:64:00:37:6d:d6:33:
2f:68:02:c5:30:b5:95:e8:b7:3f:0d:d8:57:bc:62:2b:6e:bc:
e2:51:09:fd:ca:b7:77:e9:f9:83:f5:f6:ef:96:2f:1b:17:d5:
b5:a1:75:e9:6f:0b:74:85:93:56:a3:e3:10:92:cf:e8:a7:3a:
9d:d9:24:33:8d:6b:f5:df:fb:c2:76:e5:b7:15:06:ca:4d:5e:
79:12:9c:70:a0:73:9f:b4:4d:85:e8:f2:75:21:7a:39:24:ac:
78:f6:68:7c:4b:df:33:9d:84:39:f4:a0:26:f9:9d:d8:e3:0c:
fc:1a:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net