Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/zf97s7c33lbjEdHbE8mVdJiQesg.roa
File: zf97s7c33lbjEdHbE8mVdJiQesg.roa (raw, json)
Hash identifier: CWbTDuNpKyLiBVI7dbRYw3zSOp9uNH638r3mfwutBGA=
Subject key identifier: CD:FF:7B:B3:B7:37:DE:56:E3:11:D1:DB:13:C9:95:74:98:90:7A:C8
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 01856B6EB02212236C04A2C2F42906726D51
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/zf97s7c33lbjEdHbE8mVdJiQesg.roa
Signing time: Sun 01 Jan 2023 03:44:54 +0000
ROA not before: Sun 01 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41378
IP address blocks: 2.58.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:b0:22:12:23:6c:04:a2:c2:f4:29:06:72:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Jan 1 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdff7bb3b737de56e311d1db13c9957498907ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:08:bd:59:32:39:4d:04:fd:9e:29:af:ad:4e:
03:34:f3:b1:c8:be:93:ae:30:95:23:af:b7:87:ac:
5e:f5:6a:f1:c0:ae:22:c8:f8:bc:d5:f1:0d:11:f0:
12:1e:56:07:f1:bf:f1:35:ad:86:bc:63:3d:5c:da:
0d:72:14:17:5f:fc:3f:a4:a7:9f:cb:6e:f2:e2:dd:
00:5c:5a:4d:86:4a:e3:15:c5:37:3d:f3:a7:ee:07:
91:dc:3f:40:1b:69:3a:59:c1:84:ac:85:f0:8d:2e:
96:df:00:3e:25:8a:17:e0:1b:e7:2c:c2:bf:98:48:
20:24:ca:3f:46:32:79:c8:5e:6d:33:f4:2f:52:e8:
72:ab:67:06:c2:90:b8:1e:f4:e7:b3:e9:6e:44:a4:
c3:1c:3f:c6:4d:7c:84:b4:50:8d:87:4a:95:ec:82:
21:c1:0d:cd:f5:91:d1:a6:8b:68:89:09:5f:b0:d1:
d8:87:33:d3:2f:8c:4d:0a:b1:d9:1b:d1:77:73:5d:
a8:6e:ab:a1:57:4a:4d:39:da:d6:9c:85:6b:d5:27:
c8:24:76:8e:e1:ce:c2:5c:86:82:bf:56:e7:47:ce:
0b:08:06:e4:c6:37:a4:11:90:54:0f:ed:00:ee:58:
6b:b3:3a:bf:d9:99:da:c9:02:1a:0f:fb:e9:6e:4b:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:7B:B3:B7:37:DE:56:E3:11:D1:DB:13:C9:95:74:98:90:7A:C8
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/zf97s7c33lbjEdHbE8mVdJiQesg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:4d:95:25:7e:3f:bd:24:d8:f7:6f:8d:db:1e:e8:af:d1:c9:
d8:64:0c:df:03:4e:00:fb:87:23:3a:e5:b1:73:6a:ab:e5:f4:
bd:62:91:74:7a:79:7a:23:dd:16:61:fc:1d:6a:0f:67:a3:f5:
1c:ec:9e:95:56:20:97:21:6b:3d:21:85:89:30:94:97:c5:89:
16:f6:1f:7e:1c:a0:a2:8a:52:47:c0:b5:40:5a:e4:54:af:13:
06:6d:c3:3a:6b:b0:74:d8:e8:65:08:0c:da:b6:89:8b:01:b4:
db:6c:55:45:02:01:12:76:1b:25:ca:6d:d5:f2:9b:3c:b2:e5:
d0:4a:75:65:22:d9:87:ca:dc:c9:7d:84:27:aa:34:ea:67:31:
78:d1:c6:6d:e9:2e:eb:ec:3e:33:54:62:89:74:ec:15:c6:f4:
14:00:29:7a:a4:72:be:1a:fd:54:4d:52:7b:c3:03:52:90:98:
8f:5a:75:f9:d3:4a:e8:51:d0:46:ed:94:84:07:03:48:14:10:
2d:dc:e2:73:e9:01:d3:15:9d:43:63:2c:48:d7:e1:5a:3e:b5:
ea:ba:94:51:ec:c6:3b:d4:a0:73:a8:c0:ec:7b:b1:3d:e3:f0:
7c:d1:03:21:63:43:ab:11:c7:76:e3:8d:19:49:12:a9:5a:ab:
7c:94:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:23 2023 by rpki-client on console.sobornost.net