Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/DMT23ba-5iEWN0TxiflGKhDxI_M.roa
File: DMT23ba-5iEWN0TxiflGKhDxI_M.roa (raw, json)
Hash identifier: CuFPmLri5kT1uJ/AsYyqQntcoBqoeLSWR68UWIuZjiY=
Subject key identifier: 0C:C4:F6:DD:B6:BE:E6:21:16:37:44:F1:89:F9:46:2A:10:F1:23:F3
Certificate issuer: /CN=1cf72457d60a5ce50bf350dc0cbf5fc07cb1cb45
Certificate serial: 0B3D17B9
Authority key identifier: 1C:F7:24:57:D6:0A:5C:E5:0B:F3:50:DC:0C:BF:5F:C0:7C:B1:CB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPckV9YKXOUL81DcDL9fwHyxy0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/DMT23ba-5iEWN0TxiflGKhDxI_M.roa
Signing time: Sat 01 Jan 2022 13:07:02 +0000
ROA not before: Sat 01 Jan 2022 13:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200807
IP address blocks: 78.31.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188553145 (0xb3d17b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf72457d60a5ce50bf350dc0cbf5fc07cb1cb45
Validity
Not Before: Jan 1 13:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc4f6ddb6bee621163744f189f9462a10f123f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:23:13:0d:2f:08:ae:34:99:af:a9:d7:47:
92:6f:4a:c2:80:87:88:71:4a:ad:80:bc:de:2b:bb:
89:03:29:84:6f:ed:9d:ce:b0:8b:d5:48:20:44:4d:
26:c2:5a:98:88:f4:00:cd:8a:4b:c0:39:1b:79:7c:
0a:d6:8b:62:4f:de:38:a3:29:e7:91:d0:3a:ca:c4:
bf:57:1b:1c:51:d2:f4:25:2f:3a:fe:cc:74:b1:7a:
af:fb:fc:ff:98:df:f5:b4:b1:1e:a5:11:db:4b:07:
5b:1b:72:43:84:46:80:64:9a:91:d5:39:34:ee:4a:
3c:a2:89:ed:46:73:11:ca:55:71:56:15:00:d3:46:
04:70:ea:27:54:23:a0:ff:f6:f9:31:69:02:7f:1a:
22:81:d1:f1:32:c8:48:06:8e:85:ad:32:d5:e1:a3:
dc:c9:6b:71:bd:ea:34:56:70:04:12:4d:c3:48:38:
c6:e4:40:f3:e6:cf:b5:4e:6a:54:26:36:2f:9b:f8:
a9:4f:f9:3d:a0:ea:e3:f3:b0:b2:7c:c2:f0:67:e4:
e5:13:0a:cf:3c:d2:83:be:df:42:4b:22:3f:8b:67:
18:66:61:c7:6c:43:dd:7e:aa:bb:39:47:db:bb:18:
15:9f:cc:76:98:de:4d:e6:53:7c:ed:ec:a7:78:00:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:F6:DD:B6:BE:E6:21:16:37:44:F1:89:F9:46:2A:10:F1:23:F3
X509v3 Authority Key Identifier:
keyid:1C:F7:24:57:D6:0A:5C:E5:0B:F3:50:DC:0C:BF:5F:C0:7C:B1:CB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPckV9YKXOUL81DcDL9fwHyxy0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/DMT23ba-5iEWN0TxiflGKhDxI_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/HPckV9YKXOUL81DcDL9fwHyxy0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:ed:f5:b4:9c:3a:61:a6:07:90:46:66:c4:de:ab:99:41:3a:
74:d5:63:0f:1a:6a:df:75:0c:e4:e9:a0:d3:6d:33:0a:39:db:
5b:b7:f8:05:f8:ba:70:8f:8b:cb:62:cb:e8:e1:54:99:e8:ea:
86:55:82:9b:29:8f:1e:c4:68:db:0c:96:aa:19:55:ff:b4:59:
aa:35:6f:e4:59:40:2d:c0:1b:52:aa:17:6a:b9:7d:96:e8:01:
d5:c6:bf:22:df:71:4f:c0:97:6e:2c:1f:eb:ee:8a:11:ec:a3:
34:d8:d0:f8:0b:db:b5:f3:a0:22:2a:18:0e:fa:1f:9b:23:10:
c9:4c:9b:af:18:19:18:8a:4b:92:88:96:50:1b:21:dc:40:d6:
ca:3d:aa:ab:02:2c:8e:56:0c:fe:08:5a:ac:9d:e5:fb:71:fb:
25:da:00:9b:55:b1:cb:f0:f0:88:06:c7:a6:6f:bd:33:15:a9:
d3:24:7e:e1:3d:2f:ab:cb:48:99:b1:d5:42:56:6f:09:dd:22:
ab:69:e8:48:b8:f0:fc:6c:9a:81:0f:11:c5:a7:75:68:7a:f7:
92:55:02:bd:43:7c:15:53:a0:9b:42:f0:e5:91:01:67:fa:c8:
aa:c6:e5:59:8d:4e:49:2a:b9:ab:bd:a5:3e:dd:16:77:1e:00:
37:67:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:40 2023 by rpki-client on console.sobornost.net