Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/5nEE6j6zRpHCcC4hjvf76dMYjWw.roa
File: 5nEE6j6zRpHCcC4hjvf76dMYjWw.roa (raw, json)
Hash identifier: XKT9lMf5Xc+0JIcq1XuAa1o8FdOffLq8D8NJeEGlEC8=
Subject key identifier: E6:71:04:EA:3E:B3:46:91:C2:70:2E:21:8E:F7:FB:E9:D3:18:8D:6C
Certificate issuer: /CN=7b8415ffab220f31629dad1e716423e2cd703eb0
Certificate serial: 01856C1CC831A430D6FDA51D0487D63490BC
Authority key identifier: 7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/5nEE6j6zRpHCcC4hjvf76dMYjWw.roa
Signing time: Sun 01 Jan 2023 06:55:03 +0000
ROA not before: Sun 01 Jan 2023 06:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209197
IP address blocks: 185.207.31.0/24 maxlen: 24
185.207.30.0/24 maxlen: 24
185.207.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:c8:31:a4:30:d6:fd:a5:1d:04:87:d6:34:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8415ffab220f31629dad1e716423e2cd703eb0
Validity
Not Before: Jan 1 06:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67104ea3eb34691c2702e218ef7fbe9d3188d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:bb:80:8f:30:0d:67:69:de:20:2d:88:dd:
75:f3:9a:2f:a1:2c:f8:ed:0e:3d:34:28:30:24:c9:
73:1b:30:26:bb:f6:24:91:6d:8e:47:84:2a:96:ea:
e9:a5:71:b1:7c:36:2d:3c:f0:4e:9d:00:a9:99:7b:
9a:e8:9a:45:3d:34:69:46:42:04:ec:6f:c6:b4:2f:
0f:da:34:17:68:49:2c:b7:77:19:e1:2f:68:22:0f:
bf:8c:0e:d1:2b:e9:07:3c:49:23:dd:e2:df:5a:8e:
30:8a:be:75:85:82:52:37:05:21:16:c9:c4:c0:85:
7a:19:e0:c5:47:c4:fd:b7:30:b6:bf:f7:6a:40:e4:
85:cd:32:b7:fe:78:85:2c:47:7f:06:cb:10:ab:02:
4b:58:36:e9:16:d6:31:1f:df:ac:18:0d:a8:0d:23:
03:bf:24:41:33:9c:1f:51:61:9a:6d:e0:b5:dd:8a:
53:e3:fb:6e:2f:0a:09:a1:59:3b:3b:57:79:96:ff:
bf:5a:bd:5c:a5:0d:4f:ef:88:e8:7b:27:55:16:29:
2a:9b:ec:08:79:77:a8:7f:05:63:df:c9:0a:ca:3e:
2b:18:af:b0:d0:93:8e:38:78:c2:5f:9c:4c:d5:7a:
c6:28:05:d0:2e:aa:ec:c6:94:1f:77:40:bb:4b:f5:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:04:EA:3E:B3:46:91:C2:70:2E:21:8E:F7:FB:E9:D3:18:8D:6C
X509v3 Authority Key Identifier:
keyid:7B:84:15:FF:AB:22:0F:31:62:9D:AD:1E:71:64:23:E2:CD:70:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4QV_6siDzFina0ecWQj4s1wPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/5nEE6j6zRpHCcC4hjvf76dMYjWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/99c246-0fa2-44d1-a8f1-a06178ef3f50/1/e4QV_6siDzFina0ecWQj4s1wPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.30.0/23
Signature Algorithm: sha256WithRSAEncryption
03:09:31:a3:51:40:16:4d:10:7e:40:b0:37:5f:43:0d:29:7b:
b6:69:c1:18:fa:61:d1:70:10:f6:7c:cc:e9:14:6d:66:0a:a6:
66:55:79:76:5b:b2:c8:3c:83:d2:9d:c8:5f:c6:10:91:17:a6:
27:d5:7f:d0:73:a5:c7:07:c8:0a:69:c3:9b:da:26:d3:6f:16:
b6:e8:ae:99:3a:57:f1:14:03:e3:be:66:a3:f1:20:88:b5:f3:
0b:68:c0:40:0b:08:f5:98:33:1e:e0:0e:5e:a1:e5:8c:13:88:
f5:3f:dc:b2:72:f9:02:48:f1:65:0d:9a:f2:63:81:38:e0:36:
18:c3:09:a3:0f:77:73:0a:c5:03:2b:b6:b2:5b:02:d5:d9:2d:
1b:70:82:6f:58:4e:d6:59:9c:87:d0:34:3d:1b:6b:4f:89:09:
25:80:0e:7c:7d:28:f8:40:be:4c:b3:de:c4:19:f2:bb:6c:a4:
8a:e0:0f:b9:06:75:fa:ce:2b:c2:18:92:0a:82:8a:66:f6:68:
9e:20:3a:55:26:54:27:fe:91:25:95:46:5d:2d:5f:b9:66:e0:
f1:1a:2d:88:d7:ef:52:bf:fc:f7:82:be:05:7c:21:2c:01:8a:
05:64:30:5c:06:83:b8:7e:ea:fa:0c:5a:b2:3c:3e:29:e7:65:
8d:d3:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net