Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/_la6zZgL_QLzMJXGpXRSo_97KWI.roa
File: _la6zZgL_QLzMJXGpXRSo_97KWI.roa (raw, json)
Hash identifier: wgDo1dbomPopm3XfoJ40HCyohj5kyqIezhjbIKXZI0g=
Subject key identifier: FE:56:BA:CD:98:0B:FD:02:F3:30:95:C6:A5:74:52:A3:FF:7B:29:62
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1C611E87
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/_la6zZgL_QLzMJXGpXRSo_97KWI.roa
Signing time: Sat 01 Jan 2022 04:52:32 +0000
ROA not before: Sat 01 Jan 2022 04:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8935
IP address blocks: 212.26.192.0/19 maxlen: 24
185.116.12.0/22 maxlen: 22
212.19.192.0/19 maxlen: 19
217.8.96.0/20 maxlen: 20
2001:6e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476126855 (0x1c611e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: Jan 1 04:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe56bacd980bfd02f33095c6a57452a3ff7b2962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:0f:b7:49:87:85:7e:a2:38:17:8a:07:5a:
1d:38:73:0e:12:53:21:9e:d1:1b:b1:03:54:78:53:
9d:ac:e5:d3:bb:b6:0e:db:fd:34:83:cf:93:6f:82:
39:76:f6:d8:1c:df:1c:13:21:cf:47:d8:bb:eb:91:
77:b1:c9:a4:c2:8b:5b:ba:b4:51:57:15:15:f3:8a:
3b:db:79:3f:15:bb:21:17:1f:16:64:a1:9d:15:3f:
2c:b8:66:79:24:a1:88:4b:11:e1:29:43:5c:7c:3f:
ee:33:3d:83:14:61:21:78:0a:dd:81:ca:5d:2e:80:
38:aa:a8:97:00:66:83:af:4b:0b:b1:1f:15:b2:08:
d3:3f:8a:94:76:7d:ab:b6:2f:58:42:8b:3a:df:5c:
9f:7e:e3:91:e9:47:10:28:c7:95:01:dd:0b:44:f1:
24:3c:b3:6f:ba:77:eb:ad:f9:91:d5:c6:4c:fa:89:
14:06:56:7e:87:3c:43:bd:51:05:13:16:fb:64:22:
47:e3:13:d6:ca:aa:11:34:34:7d:c5:4d:2e:97:18:
30:9f:c0:ae:cf:4b:fa:69:38:91:a1:51:20:b6:ef:
38:a4:f1:30:fa:a3:a7:b6:ee:da:28:a1:9e:03:32:
3d:c8:80:95:3b:8a:01:81:d8:fd:f1:fe:fe:96:11:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:BA:CD:98:0B:FD:02:F3:30:95:C6:A5:74:52:A3:FF:7B:29:62
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/_la6zZgL_QLzMJXGpXRSo_97KWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.12.0/22
212.19.192.0/19
212.26.192.0/19
217.8.96.0/20
IPv6:
2001:6e0::/29
Signature Algorithm: sha256WithRSAEncryption
90:9b:0e:1f:32:a5:29:bf:7a:34:ae:eb:63:ba:7e:81:fc:cd:
f3:52:15:31:58:8d:c2:d9:0f:9b:87:b7:9e:cb:b9:c3:e4:dd:
cd:54:75:55:fc:2a:7c:4a:6c:6a:c8:a8:64:5a:69:d1:fc:67:
c3:67:e4:46:93:5a:28:b8:00:d7:5a:54:aa:f6:85:9e:0f:8b:
f0:22:53:fa:a8:4e:2c:55:13:b8:81:3b:e1:d3:59:9a:3a:2b:
bb:9e:92:bb:8c:9f:e4:55:0b:91:2a:29:65:cd:91:b5:ec:0f:
49:ab:1a:54:a9:20:96:a8:b8:0f:23:ac:f2:a2:55:79:da:0c:
b0:e1:07:14:c8:b1:0a:6b:59:3e:ef:dd:88:7a:94:66:5b:bf:
4e:30:62:73:81:29:9d:fd:cc:1e:6b:5a:51:ed:a2:35:6a:b5:
fd:5a:5b:5b:17:f0:33:16:c3:5b:d6:1a:51:96:28:55:7f:c8:
da:9e:50:46:4e:23:16:0e:0e:ae:bf:66:df:e5:be:f9:0c:7e:
d8:36:ba:55:2b:8a:0b:11:db:e1:31:02:58:c1:26:89:f4:99:
83:94:51:e3:f6:96:cb:04:c5:b3:a9:9a:88:99:ec:76:f0:4c:
bc:0a:e4:de:fa:76:c9:e3:1f:a8:46:cc:ee:94:82:6e:ae:12:
2a:ef:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net