Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/tT-28nt1D1dctxgTRlUcBtXm1II.roa
File: tT-28nt1D1dctxgTRlUcBtXm1II.roa (raw, json)
Hash identifier: nqdttlPpLyFMZoZWznNe4IlD9zPxA5xZWwU4b/zVrTE=
Subject key identifier: B5:3F:B6:F2:7B:75:0F:57:5C:B7:18:13:46:55:1C:06:D5:E6:D4:82
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0193978D65AE93E39189EB4FCE9872BE2C57
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/tT-28nt1D1dctxgTRlUcBtXm1II.roa
Signing time: Thu 05 Dec 2024 16:00:46 +0000
ROA not before: Thu 05 Dec 2024 16:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20746
IP address blocks: 185.63.228.0/22 maxlen: 22
185.63.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:8d:65:ae:93:e3:91:89:eb:4f:ce:98:72:be:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Dec 5 16:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b53fb6f27b750f575cb7181346551c06d5e6d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:67:de:e2:d4:d1:4b:81:38:86:84:62:2c:
c5:de:a1:23:e6:73:7f:6a:12:66:7d:b7:23:f1:15:
1e:56:6a:9c:53:0b:3f:c4:e8:15:44:d1:ff:4c:10:
b5:70:f8:40:5f:47:1a:78:8e:b5:0b:bc:bf:b4:d0:
a0:34:ca:9b:0d:ee:12:d9:5f:fc:84:db:7d:3e:fd:
08:8b:94:5d:ee:4d:af:55:dd:84:49:7e:cc:80:61:
49:21:82:e6:e5:be:71:1e:07:96:e7:55:0a:56:86:
7c:09:3b:1b:0b:94:e2:a7:ea:9d:f1:4b:c5:50:22:
c1:76:89:2c:f8:4d:db:a4:57:cf:ad:0c:e5:34:3c:
a3:b7:2a:44:34:b7:fe:0c:53:f7:4d:af:9f:8f:f4:
de:ed:b9:61:54:cd:9f:c6:5e:12:ac:86:30:97:86:
42:21:82:10:65:9b:02:a5:70:97:a8:88:5a:17:8d:
a5:78:23:32:ae:10:6c:85:f5:8d:16:18:b3:6c:0a:
59:23:dc:ce:46:14:ca:da:e2:bd:cd:4b:18:fd:9d:
a9:29:6b:6f:70:31:b4:5c:42:8d:2b:1a:32:c6:8f:
06:80:53:db:17:4e:4d:94:f6:1b:1d:c6:97:c3:89:
6e:a6:42:9b:57:bb:3d:12:3b:48:35:58:2f:02:05:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:B6:F2:7B:75:0F:57:5C:B7:18:13:46:55:1C:06:D5:E6:D4:82
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/tT-28nt1D1dctxgTRlUcBtXm1II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:e0:2e:bc:82:e7:d5:eb:ed:86:bf:e1:42:de:9d:6f:8f:a5:
74:62:96:54:fe:bc:26:97:8f:cb:ea:28:2d:08:da:e2:a1:e8:
ae:9d:e5:34:ed:41:7b:ec:5f:d5:f8:1b:33:43:16:f9:67:d2:
e5:b1:04:4d:6b:4c:94:97:8b:35:5d:b1:77:0d:c2:13:01:e9:
e4:55:7c:f9:04:45:b4:0a:db:3e:f6:45:03:50:f0:bb:88:5a:
3b:19:50:40:e0:d2:23:21:04:da:a7:f9:a2:aa:35:01:2a:c5:
53:13:77:0b:a2:58:3b:3f:ef:c9:e4:28:d9:c9:35:41:02:3c:
e8:ff:50:f6:7f:3d:60:10:04:ae:db:b2:01:00:38:42:e9:ef:
a3:c5:9d:45:07:3f:3d:5c:9b:06:f7:99:ec:17:8d:01:71:f4:
40:1f:c2:6b:7d:2b:ac:2b:05:f5:01:96:bd:64:57:43:10:59:
cb:1f:ff:8a:ad:4a:21:3a:22:91:e3:69:61:81:1f:c2:d6:25:
e6:5d:f8:74:6a:c3:08:90:95:3b:61:95:9a:05:fb:10:71:0e:
d5:a7:32:cb:ad:0e:49:2e:95:77:49:cc:01:05:20:3b:07:8b:
78:a9:65:36:bf:f7:cc:a5:df:0d:01:45:55:43:3d:99:31:a1:
c8:cc:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net