Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FsnNLr70kL1vIEFnE4pwI87tGbw.roa
File: FsnNLr70kL1vIEFnE4pwI87tGbw.roa (raw, json)
Hash identifier: sivh+R/7v1qLBBsHhu1v6Smz9x1cPp21uM1dBIIe9so=
Subject key identifier: 16:C9:CD:2E:BE:F4:90:BD:6F:20:41:67:13:8A:70:23:CE:ED:19:BC
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018360B107EBB71451C259E8A04CE2834902
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FsnNLr70kL1vIEFnE4pwI87tGbw.roa
Signing time: Wed 21 Sep 2022 15:35:58 +0000
ROA not before: Wed 21 Sep 2022 15:35:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.230.0/24 maxlen: 24
45.95.214.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:b1:07:eb:b7:14:51:c2:59:e8:a0:4c:e2:83:49:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 21 15:35:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c9cd2ebef490bd6f204167138a7023ceed19bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:a8:0b:e4:61:bf:82:a9:7b:32:c3:f0:c3:
ca:a7:4f:9f:b3:62:dc:94:5c:9c:c8:c8:1e:07:3d:
cb:08:37:b3:45:73:c1:ff:65:3a:82:ef:15:30:45:
7f:b7:a4:63:1a:7a:6f:28:8a:03:13:cb:e4:83:e4:
25:11:40:e9:85:0d:d6:c2:fd:ba:c9:cd:c4:f9:cd:
e1:4d:b3:a8:4d:89:e4:fa:85:19:68:dd:56:2d:3e:
14:f8:d9:ca:7f:9a:88:b2:43:3f:e6:df:a3:17:bd:
6c:4d:00:08:c0:18:64:da:1d:f4:d0:90:ec:17:ab:
99:77:6b:e0:a6:c1:c6:3c:7a:86:ec:be:9b:29:49:
fb:21:2e:25:de:27:1a:b4:e2:e6:ba:2d:42:f9:1a:
cd:ef:09:29:ff:44:df:a2:a7:92:e6:dd:b4:b8:0b:
d7:9f:4c:35:43:87:8b:ac:00:da:d5:26:ad:cb:40:
c8:fb:f4:00:3e:47:94:70:e7:da:83:7b:d1:c1:13:
76:65:a7:fe:1c:f8:7e:43:95:da:da:92:b9:2e:2a:
d7:1b:43:2b:5b:27:51:74:bf:70:b2:5b:7c:fd:68:
20:a0:7a:08:58:02:e5:79:a9:43:9d:bd:a9:31:70:
80:31:ab:9e:67:5d:23:88:91:68:6d:f9:3a:69:78:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:CD:2E:BE:F4:90:BD:6F:20:41:67:13:8A:70:23:CE:ED:19:BC
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FsnNLr70kL1vIEFnE4pwI87tGbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.214.0/24
85.209.230.0/24
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
94:30:6c:9c:e1:ba:04:a1:6f:e1:8d:29:19:1f:c6:05:36:73:
6b:c6:73:4d:08:cb:f6:ec:e3:ba:e3:7c:0d:e6:1e:6d:71:ac:
46:0a:4f:51:a3:d3:96:9f:79:0a:06:2f:a8:c3:82:da:c7:1c:
c2:e3:e2:06:25:90:04:12:6a:6d:60:c4:7f:0b:73:70:7e:ba:
0c:02:0c:39:4f:d2:50:6f:22:54:83:f9:3b:07:ec:96:bd:21:
d5:e1:27:74:95:ef:40:49:90:f9:a7:90:b7:19:a1:51:02:f3:
02:0f:cb:4d:97:d7:6a:b3:89:4c:25:de:0a:4e:3b:d9:10:7c:
b4:6c:46:79:82:62:1d:ac:4d:c4:06:d2:ee:6c:e4:79:b1:05:
2b:d3:09:41:e1:3a:0d:83:87:e7:0f:d7:67:18:6e:31:61:8a:
4e:8c:92:63:9b:9b:ab:67:78:92:a5:28:b4:ed:de:0b:7e:75:
d2:46:29:bf:b4:29:22:b3:82:b7:b7:05:14:9a:b5:66:1c:41:
23:da:5c:f4:9b:a1:ce:8e:59:38:49:3c:38:0d:cb:d5:36:6f:
9f:ec:eb:4c:5f:1b:cf:2f:cc:69:15:cf:84:f3:1f:a2:4d:45:
da:f2:01:06:12:a1:ce:81:de:c9:27:a6:25:58:f3:9c:c4:d6:
59:9e:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net