Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/i0zJsCjETiZc4GeABjbLxxzHwNw.roa
File: i0zJsCjETiZc4GeABjbLxxzHwNw.roa (raw, json)
Hash identifier: HPPOHDw8EWzuLtXe9bJwzYsQVmz0+8QeAj/iD1OwrlY=
Subject key identifier: 8B:4C:C9:B0:28:C4:4E:26:5C:E0:67:80:06:36:CB:C7:1C:C7:C0:DC
Certificate issuer: /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial: 16CF216C
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/i0zJsCjETiZc4GeABjbLxxzHwNw.roa
Signing time: Sat 01 Jan 2022 01:52:54 +0000
ROA not before: Sat 01 Jan 2022 01:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59639
IP address blocks: 46.249.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382673260 (0x16cf216c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
Validity
Not Before: Jan 1 01:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4cc9b028c44e265ce067800636cbc71cc7c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:f5:19:9b:d4:92:52:11:1d:3e:38:21:45:
cd:7c:a0:7f:71:70:6e:b2:88:a2:4d:14:f3:79:a9:
62:d9:4b:01:0d:5d:66:92:07:5c:80:7a:20:e5:b9:
58:08:a6:f6:5c:84:33:bf:6b:8d:70:9c:22:27:82:
86:ea:d8:8f:b2:7e:3e:15:33:15:38:63:43:46:89:
4e:5e:89:67:b9:70:e6:c9:82:f9:7b:cd:14:93:71:
7f:a3:32:f2:89:6a:c6:e6:cd:b9:35:41:cd:37:35:
c1:04:99:c8:11:5d:70:59:14:c0:3e:03:da:c7:21:
21:50:87:fa:ba:a8:15:62:e0:64:12:ae:c5:32:a3:
20:60:8a:a2:f7:56:43:ce:79:b0:b8:c1:f2:ec:f5:
20:74:2b:1e:3d:86:d7:ca:10:4b:77:1c:78:c2:07:
ef:7c:e0:c5:97:80:b3:3a:01:d8:b7:64:dd:b6:01:
5b:26:71:65:b8:31:0b:81:00:8e:14:a3:53:85:01:
9d:36:ec:4a:57:14:a8:ae:d4:62:88:cd:87:e9:79:
96:ff:20:89:87:8f:e6:cf:84:9b:dd:90:9c:48:8e:
c7:e4:de:35:61:a7:6a:c0:45:fe:c5:f8:1f:7a:89:
45:0e:59:1c:14:03:32:3f:d8:36:2f:fa:57:e9:64:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:C9:B0:28:C4:4E:26:5C:E0:67:80:06:36:CB:C7:1C:C7:C0:DC
X509v3 Authority Key Identifier:
keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/i0zJsCjETiZc4GeABjbLxxzHwNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:59:f1:ed:37:0a:8d:12:71:b1:8c:e8:14:00:f1:52:94:e1:
0d:85:00:c6:37:6c:ab:0e:28:01:ea:58:1b:c0:d3:e2:23:25:
85:0f:0e:6c:a6:a1:48:ab:e7:f5:ad:4b:b7:93:68:29:50:a3:
1c:07:20:8f:71:52:88:4a:70:ff:05:0c:06:7e:52:a4:25:3c:
0b:c8:95:84:ff:05:e5:4a:2e:83:c2:56:27:5b:01:a6:45:4c:
29:b4:e8:a1:ef:b4:c1:07:ff:a1:b3:a3:5b:11:ea:97:97:7e:
df:9e:4f:80:9c:9a:db:c3:d0:6b:d7:ac:7f:4f:9a:75:8c:37:
92:40:7e:91:00:a6:53:66:c5:6d:f0:0a:fb:3b:5d:82:21:1e:
ab:5b:b9:d7:01:d5:8e:29:34:df:96:a4:a1:c5:0d:51:07:42:
65:5e:58:e1:0f:63:c0:4e:06:e9:f7:55:ef:1a:65:2f:50:bf:
07:21:83:90:f8:04:cd:08:40:72:f6:41:ac:69:18:67:9f:22:
17:42:44:33:84:37:6f:28:63:e7:1b:86:12:9e:5f:fc:ff:7c:
a0:1c:ef:c1:b3:3a:99:37:38:b5:8e:55:b3:39:86:5f:ca:9b:
b8:6c:fa:2e:a3:eb:45:f1:c1:7d:3b:5c:db:2f:f8:ce:fc:23:
12:4d:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net