Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/le9IVSwzX7geCcUPf7YbfCY4wLs.roa
File: le9IVSwzX7geCcUPf7YbfCY4wLs.roa (raw, json)
Hash identifier: axxPMHwTHJTQyoaB/LW/upltZEAHVh72SUoSjAOf07M=
Subject key identifier: 95:EF:48:55:2C:33:5F:B8:1E:09:C5:0F:7F:B6:1B:7C:26:38:C0:BB
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: 01883A7EBE9DB4E04F46BCEAB556E0DC65A2
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/le9IVSwzX7geCcUPf7YbfCY4wLs.roa
Signing time: Sat 20 May 2023 18:49:24 +0000
ROA not before: Sat 20 May 2023 18:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212835
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:7e:be:9d:b4:e0:4f:46:bc:ea:b5:56:e0:dc:65:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: May 20 18:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ef48552c335fb81e09c50f7fb61b7c2638c0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:35:26:6c:8f:9f:e0:ed:dc:99:95:b2:13:
61:37:2c:7e:b4:34:ab:0b:20:69:85:d1:bc:31:9d:
85:00:21:b4:6a:f4:9b:80:fc:72:3e:0b:c5:ff:5a:
89:18:15:2d:05:3c:37:67:6a:bd:21:0e:fa:30:fe:
55:06:ab:34:d8:63:03:63:a2:9e:f3:4c:8d:d9:c6:
76:4f:d3:9e:1a:36:42:9d:12:5a:18:2f:75:78:c1:
b8:5a:48:b8:00:09:21:c2:4d:c1:cd:05:e5:53:b1:
cb:f4:60:6c:5c:47:f2:b3:fe:11:46:12:2b:a3:bd:
1f:aa:7e:9b:6c:5b:93:dd:c8:5a:ce:67:f4:02:69:
04:d7:6c:e5:77:e4:e0:57:6e:92:04:78:76:19:ae:
7d:95:9e:2f:1a:ea:a8:47:59:8e:dd:36:da:98:0a:
56:b4:e7:ac:b8:90:c3:78:46:24:3d:59:f1:75:3e:
b5:67:cf:0d:17:2d:d0:f9:03:4b:42:67:c0:1d:4f:
e5:7f:6e:31:57:bd:7e:af:7b:be:39:15:2b:9e:47:
9a:2f:be:1e:03:b9:21:ad:37:28:58:01:38:2d:84:
e4:9a:fa:c3:74:b4:96:49:75:82:8c:3d:20:26:80:
91:f6:12:c9:ef:19:bf:25:60:be:1b:cd:70:df:30:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EF:48:55:2C:33:5F:B8:1E:09:C5:0F:7F:B6:1B:7C:26:38:C0:BB
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/le9IVSwzX7geCcUPf7YbfCY4wLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e9:28:24:3c:c4:ce:43:28:d5:71:07:45:61:9b:88:59:94:
05:ba:87:c9:90:5c:21:50:e8:51:ba:3c:a0:0b:ed:e8:b6:1a:
2e:63:da:2a:ac:58:ae:7d:5d:6d:fb:4c:9d:51:a2:64:f5:6e:
75:56:7e:fa:ed:27:8a:5e:16:25:72:96:a0:ad:7d:6b:6f:cb:
b3:f4:08:e3:18:7b:f6:dd:18:a9:af:b2:cd:a6:17:d2:25:ed:
42:88:29:9c:5b:62:6e:d5:8d:0a:0d:87:e5:bf:d1:cb:ca:57:
e6:05:10:ae:60:6c:50:e3:8a:28:69:29:aa:e8:0f:18:f5:6b:
4e:e0:6b:47:69:13:5b:16:bb:c7:f6:d4:3f:1c:c4:ee:0b:85:
7c:db:20:a2:f2:4c:d3:05:19:78:a0:3b:5a:22:6a:bd:0b:4b:
d9:c6:15:c6:e5:3c:17:b0:b0:47:06:d3:ce:13:66:fb:41:77:
aa:71:e3:ad:da:b2:79:ca:88:74:32:a9:1c:3a:05:a8:35:3a:
7a:3b:97:64:7c:87:b4:9b:40:ea:14:74:7f:b7:64:ab:4f:9a:
3a:0a:8e:d8:c2:cb:04:0e:f4:73:3d:21:88:9b:0b:52:6e:00:
60:01:8e:64:47:95:db:c1:21:9e:e7:11:fa:4c:a9:d8:b5:6c:
15:70:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net