Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/1-f_hhmIgbf1IxpiA1oObjqeC8tw.roa
File: 1-f_hhmIgbf1IxpiA1oObjqeC8tw.roa (raw, json)
Hash identifier: sKRT0GnYd+CCVlfe5qJKZHlDwBJE8mHm16LOACB5T+A=
Subject key identifier: F9:FF:E1:86:62:20:6D:FD:48:C6:98:80:D6:83:9B:8E:A7:82:F2:DC
Certificate issuer: /CN=281597558437c58185d4c2fe71b9d52779d800d6
Certificate serial: 018A5EF589BBF5E25AB9A836DCF68965EEAA
Authority key identifier: 28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/1-f_hhmIgbf1IxpiA1oObjqeC8tw.roa
Signing time: Mon 04 Sep 2023 06:51:04 +0000
ROA not before: Mon 04 Sep 2023 06:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:f5:89:bb:f5:e2:5a:b9:a8:36:dc:f6:89:65:ee:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281597558437c58185d4c2fe71b9d52779d800d6
Validity
Not Before: Sep 4 06:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ffe18662206dfd48c69880d6839b8ea782f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:b3:1f:1b:be:35:16:0d:bc:9b:9f:7f:13:
0a:a7:5c:05:b2:4b:4a:c1:27:31:e6:12:db:08:e3:
d6:34:a6:a9:4a:60:43:17:c2:72:ea:51:23:c7:64:
5b:b3:e5:7c:bd:53:4d:dc:48:ab:0c:f8:ed:3f:cd:
4c:2a:66:fa:84:12:02:b0:1d:a6:7a:56:0c:84:c4:
ac:00:1b:1f:ab:cc:79:63:b5:f3:b1:2c:49:c7:c2:
e3:e6:9f:1a:ec:b6:97:cd:3e:e5:03:d2:0f:2b:29:
02:ae:62:62:91:b9:65:bf:52:c3:bf:6d:d6:0e:1d:
17:97:5c:a9:1e:2f:b2:b3:b0:8a:e8:9a:50:cb:0a:
c4:6b:98:8f:96:43:5f:18:80:cc:33:ab:1a:36:a2:
a9:2d:a3:9d:0e:06:fd:d4:72:9a:4f:13:14:81:88:
86:0b:47:5d:f1:51:83:71:89:4a:4d:7a:ce:c5:8f:
06:83:3e:9a:7a:40:26:80:f1:19:15:d7:b5:3d:28:
ca:51:f2:29:30:ac:b6:bf:ff:78:12:43:e0:ef:57:
98:da:38:b3:28:d5:20:51:36:55:cd:50:f5:93:96:
68:0d:77:00:f7:c8:b8:98:56:ba:3e:2d:b8:08:a1:
7f:01:41:2a:75:2b:ff:97:96:46:2c:85:64:73:24:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:E1:86:62:20:6D:FD:48:C6:98:80:D6:83:9B:8E:A7:82:F2:DC
X509v3 Authority Key Identifier:
keyid:28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/1-f_hhmIgbf1IxpiA1oObjqeC8tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:50:15:8b:10:ae:85:0e:71:aa:36:06:e7:d5:ad:23:cf:
21:ef:d2:f4:20:e0:07:74:8b:54:58:17:c0:4c:2e:aa:63:ee:
a3:8c:fe:20:a2:e4:77:da:b8:22:9b:84:ea:fc:5f:d7:10:1e:
ee:ab:1f:ff:02:73:04:9b:20:8c:79:a9:a2:a7:53:e5:bd:5e:
9e:8e:24:df:b0:5a:a6:23:af:1d:3f:ef:3d:36:c5:f6:d9:40:
52:25:68:f7:c8:74:d9:66:1a:a4:10:65:f2:13:64:51:cb:f4:
96:44:c0:5a:6a:20:b0:a0:bb:d8:b5:ff:f4:bf:c9:c4:6a:59:
3f:39:c6:ef:f8:90:12:35:ab:66:33:79:c0:3a:b0:3c:5c:f7:
bd:34:f2:af:1c:0e:76:fd:b5:15:bc:6a:ab:a8:65:34:2b:4e:
e9:dc:90:00:ab:e0:d0:78:23:ca:60:ad:d8:9a:5d:f3:df:62:
97:7e:59:f6:c1:33:ef:fe:52:97:8c:ce:58:2b:8e:6b:b8:5d:
72:2c:ae:4b:d5:de:64:10:48:1f:3e:d7:83:a7:06:a8:85:bc:
1d:fe:a7:41:62:59:f4:b0:43:ef:3b:42:4a:5d:f5:0a:93:c7:
da:f5:73:9f:5e:a6:28:ef:6c:12:8c:3d:69:48:f1:b9:50:6e:
f4:e8:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net