Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/CmGJxClgln2GMjpvvCQAxu7x2K0.roa
File: CmGJxClgln2GMjpvvCQAxu7x2K0.roa (raw, json)
Hash identifier: RoslKf7WImbpwjXzV1NPC0xFOffOjEhJiGVlwbBCfF4=
Subject key identifier: 0A:61:89:C4:29:60:96:7D:86:32:3A:6F:BC:24:00:C6:EE:F1:D8:AD
Certificate issuer: /CN=794d984a7666ea024ca65f4082801d02f11f9980
Certificate serial: 017D2820
Authority key identifier: 79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/CmGJxClgln2GMjpvvCQAxu7x2K0.roa
Signing time: Sat 01 Jan 2022 04:59:13 +0000
ROA not before: Sat 01 Jan 2022 04:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33438
IP address blocks: 185.69.88.0/23 maxlen: 23
185.69.90.0/23 maxlen: 23
2a04:a8c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24979488 (0x17d2820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794d984a7666ea024ca65f4082801d02f11f9980
Validity
Not Before: Jan 1 04:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a6189c42960967d86323a6fbc2400c6eef1d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:af:c7:6f:ef:3d:71:4d:62:c0:ae:e2:e6:
b8:28:64:ca:a5:c8:a1:f4:00:25:cf:0e:05:36:1a:
09:29:47:99:f7:93:61:3f:ab:0c:e7:1a:80:79:de:
e6:b4:d0:00:6c:0e:0f:b0:93:a6:20:2a:f7:37:dc:
23:0a:5e:b0:84:ef:d7:bc:ae:a8:17:bf:e1:5d:ce:
e5:22:75:7c:03:14:64:ed:bf:05:bd:53:64:3b:3a:
8b:81:7c:ab:c0:22:6a:d7:81:7b:8f:bc:e6:17:d9:
6d:53:28:5d:a6:e8:8a:35:09:17:c5:7f:33:20:36:
ef:61:f2:db:57:f2:b4:21:5e:10:f7:81:de:b2:a3:
30:23:97:c0:ca:db:00:95:14:35:11:bb:6e:d0:4b:
30:ca:9a:f8:40:4a:d3:d3:a0:09:f8:16:a6:fe:8c:
83:8e:41:e2:7f:32:80:2e:3f:38:88:9d:32:8d:15:
60:d1:f5:0e:44:ce:5a:94:6d:a9:35:52:9e:57:3b:
2c:c4:6c:fc:6b:cf:81:91:f7:ec:d3:e7:e6:43:93:
18:f2:9a:c2:c4:ef:e7:12:36:e9:6b:0b:b3:42:d2:
a5:08:36:05:2b:0d:0e:5d:76:65:50:3c:f8:62:75:
49:31:a2:65:b1:ab:84:85:10:91:4a:ad:6a:6e:c9:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:89:C4:29:60:96:7D:86:32:3A:6F:BC:24:00:C6:EE:F1:D8:AD
X509v3 Authority Key Identifier:
keyid:79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/CmGJxClgln2GMjpvvCQAxu7x2K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/eU2YSnZm6gJMpl9AgoAdAvEfmYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.88.0/22
IPv6:
2a04:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:68:cf:fa:c5:ce:67:f3:c2:71:03:6f:23:1f:eb:08:7b:cd:
c4:fc:dc:8f:68:6d:af:d1:1e:4f:4b:63:48:68:1b:c6:2e:05:
9c:5b:b6:ce:52:8c:54:6c:19:af:04:0f:6b:b2:9c:91:c9:85:
07:69:da:e3:e0:c4:4d:0f:20:59:7c:a9:9e:fe:10:4f:12:59:
f9:29:dd:6c:c8:29:89:e0:e0:7a:b0:53:be:08:e7:f5:1b:69:
92:af:4f:a8:7a:fa:e3:dd:15:ee:e3:d5:41:aa:4c:dd:62:5a:
19:d6:d2:3a:f6:fc:23:cc:9a:1a:7d:e4:ec:51:01:1b:8a:eb:
cc:9b:1e:e0:fe:71:c0:d6:82:52:5e:af:52:36:6a:4a:9f:88:
4d:df:47:06:51:af:cb:85:dd:79:e7:87:a4:91:03:ea:3c:82:
33:46:f6:c3:3f:6f:91:b2:bf:d3:92:39:27:f3:a9:b6:ee:c1:
04:95:d2:ff:ee:19:66:8e:21:84:19:02:ac:9d:3a:fe:2b:b5:
f1:22:63:55:46:bd:e7:d0:eb:b9:06:31:82:7c:8e:fd:e9:ce:
ae:1a:7f:33:55:70:c6:7c:c7:40:a5:6d:89:7e:35:9a:3b:d7:
c8:64:a0:65:66:a4:10:5d:0c:ad:79:4e:72:1e:64:e4:19:28:
55:de:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net