Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/iK8fDdVuMhPZ1PXod1gmBUnpT_Y.roa
File: iK8fDdVuMhPZ1PXod1gmBUnpT_Y.roa (raw, json)
Hash identifier: I7mcruv3LFTthy3ykWD1I7OPkgtyHcst3jXkHq0F2Tk=
Subject key identifier: 88:AF:1F:0D:D5:6E:32:13:D9:D4:F5:E8:77:58:26:05:49:E9:4F:F6
Certificate issuer: /CN=90b1fed7efa9ffdc61800971946b8edf83cee7bc
Certificate serial: 062547D2
Authority key identifier: 90:B1:FE:D7:EF:A9:FF:DC:61:80:09:71:94:6B:8E:DF:83:CE:E7:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLH-1--p_9xhgAlxlGuO34PO57w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/iK8fDdVuMhPZ1PXod1gmBUnpT_Y.roa
Signing time: Sat 01 Jan 2022 03:02:26 +0000
ROA not before: Sat 01 Jan 2022 03:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50738
IP address blocks: 185.98.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103106514 (0x62547d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b1fed7efa9ffdc61800971946b8edf83cee7bc
Validity
Not Before: Jan 1 03:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88af1f0dd56e3213d9d4f5e87758260549e94ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:e5:d1:9e:3b:06:f0:2a:8c:a1:95:84:f0:
f7:f5:ef:79:4b:36:70:38:3a:d3:f5:b9:f8:43:6d:
c9:f8:4a:c5:62:27:06:87:25:3f:08:94:e1:85:ab:
22:3a:6d:6f:5a:8c:6d:dc:e7:19:37:4a:a0:33:6d:
24:00:ec:73:70:07:a2:6a:e5:a1:a8:d5:c8:b7:f9:
1c:47:76:23:37:0e:47:39:5e:23:5e:90:3b:dc:48:
0c:b9:bc:52:9a:a2:84:cc:08:8b:72:5b:63:b1:b4:
d8:b5:95:92:bf:69:91:aa:9d:7b:09:d7:b7:a7:a0:
4d:6a:9a:94:26:98:6c:ce:d4:7e:5c:50:54:43:93:
7d:87:6a:92:6b:c7:7a:de:23:c0:4c:4e:6e:4c:dc:
c5:9c:f0:bf:3b:f6:b5:c1:e9:4a:1c:cb:8a:5a:a0:
72:bc:6d:5c:ab:5e:41:a9:c3:ab:b3:2a:ae:a9:50:
ad:98:50:e2:de:09:64:13:20:27:e2:ab:c6:3b:73:
fe:e4:ae:ea:27:33:ea:e4:ec:31:33:aa:65:c4:e1:
1d:25:c4:1c:ca:85:35:7c:30:f9:0b:3d:b1:bc:55:
a5:cb:fd:b4:00:6a:c7:86:d2:3b:76:16:8a:cf:d0:
a8:d8:ca:06:86:4a:f4:9a:24:7a:93:4b:25:43:52:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:1F:0D:D5:6E:32:13:D9:D4:F5:E8:77:58:26:05:49:E9:4F:F6
X509v3 Authority Key Identifier:
keyid:90:B1:FE:D7:EF:A9:FF:DC:61:80:09:71:94:6B:8E:DF:83:CE:E7:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLH-1--p_9xhgAlxlGuO34PO57w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/iK8fDdVuMhPZ1PXod1gmBUnpT_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/kLH-1--p_9xhgAlxlGuO34PO57w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.158.0/24
Signature Algorithm: sha256WithRSAEncryption
50:31:74:a0:65:9e:7f:2f:5b:d7:e6:3e:66:d6:4b:74:f1:59:
ea:b3:63:93:03:01:47:eb:40:5e:ce:b6:84:6b:82:3a:95:15:
d4:47:07:63:71:0a:e6:8d:de:c0:45:04:bc:ea:cf:22:94:30:
af:3c:46:30:a9:d9:f3:ff:f7:b4:f5:0f:a0:8e:9b:be:fd:68:
12:05:23:17:ec:c5:4e:86:a0:2e:ac:e0:35:1b:05:93:63:7b:
ae:0e:a8:e1:fe:fd:1e:85:85:99:0f:1a:e5:46:2b:91:f3:1c:
9c:1a:6e:c5:6f:7e:66:02:c2:54:05:c6:53:b6:00:10:b5:19:
90:b8:05:e6:8a:6d:61:df:d6:e1:0b:4d:64:d4:64:54:c7:ef:
64:e0:71:36:2c:7d:82:83:9a:38:d9:21:30:37:5a:c6:15:5d:
57:3f:e3:76:f4:2e:de:69:85:3f:65:0f:95:c2:a4:2c:4a:9a:
33:83:fa:9f:97:fe:08:1b:ef:94:57:68:30:62:99:0b:98:22:
ce:e8:1e:b9:ae:a0:6f:28:9f:cc:be:b2:28:5d:23:92:b6:07:
5c:a7:71:ef:88:b6:72:ec:53:ef:80:31:8a:d9:c3:60:b2:48:
30:54:36:fc:0a:5b:bf:e7:ee:e1:7b:af:18:67:42:ba:63:6f:
d0:31:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net