Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/ZzHFvvxOUCAruMwP-7jJYYRFMmQ.roa
File: ZzHFvvxOUCAruMwP-7jJYYRFMmQ.roa (raw, json)
Hash identifier: XwfAL3nPUnVIHP6Yn5LmVCdw7opeVpQOUWVsw3tdZbk=
Subject key identifier: 67:31:C5:BE:FC:4E:50:20:2B:B8:CC:0F:FB:B8:C9:61:84:45:32:64
Certificate issuer: /CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Certificate serial: 01823B853A51728D9E271A636A13940339E7
Authority key identifier: 34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/ZzHFvvxOUCAruMwP-7jJYYRFMmQ.roa
Signing time: Tue 26 Jul 2022 17:19:23 +0000
ROA not before: Tue 26 Jul 2022 17:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 185.138.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:85:3a:51:72:8d:9e:27:1a:63:6a:13:94:03:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Validity
Not Before: Jul 26 17:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6731c5befc4e50202bb8cc0ffbb8c96184453264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:fb:03:b8:bd:43:da:d8:95:64:ca:bf:fd:
e6:2c:43:7e:d5:66:86:cf:69:64:6d:a0:0a:af:0b:
9b:86:d6:87:7f:8b:8e:98:ff:05:87:57:65:af:d6:
a9:3c:fe:68:01:be:9d:f9:4f:11:a3:a4:99:9d:f5:
1c:34:9a:60:46:c7:30:ad:bb:bf:ca:65:0b:62:0a:
be:5a:09:2b:14:c5:01:46:22:c5:53:85:8a:ca:2d:
83:f1:a9:2b:f5:47:21:42:15:54:1b:db:09:48:61:
c3:c3:5f:18:92:76:b2:76:65:cb:be:36:e3:0d:67:
5c:9b:60:5a:de:05:72:c9:9d:64:c1:97:f3:43:9d:
69:52:9e:b4:59:12:bf:57:4c:91:5b:73:22:36:b9:
1c:51:a2:10:5e:00:1d:6c:4a:da:e9:58:7f:3d:03:
ae:0a:ca:e2:cb:03:1b:a4:ec:8d:ff:5e:78:c3:e4:
d1:de:0b:04:8e:81:95:f1:9e:57:7a:9f:92:c4:e4:
54:7d:ad:5a:9e:24:54:5a:50:93:b9:31:72:ef:a2:
b0:0a:c9:86:af:99:d5:f1:df:48:61:c9:b7:ca:9f:
78:0a:7b:0f:72:ed:a1:0d:8a:13:c5:34:ea:39:42:
09:a5:a3:ae:1f:53:80:06:c3:60:1e:0a:94:db:8a:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:C5:BE:FC:4E:50:20:2B:B8:CC:0F:FB:B8:C9:61:84:45:32:64
X509v3 Authority Key Identifier:
keyid:34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/ZzHFvvxOUCAruMwP-7jJYYRFMmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.164.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a6:c0:2b:81:11:d6:f8:51:27:e8:d3:30:8b:15:19:63:2f:
f6:79:f5:2a:23:cd:54:f4:5c:21:65:b4:c6:72:65:a9:ad:bb:
67:ca:b9:b1:63:a4:86:34:95:95:a2:db:e6:43:38:6d:40:b7:
0b:2c:1a:34:25:50:63:9d:d2:bb:09:56:85:93:77:f8:a7:a0:
cb:df:8d:00:b4:89:63:98:78:97:dc:4f:d9:c1:29:29:bf:1e:
35:d2:dd:6e:f2:21:85:bc:6a:20:b3:4c:06:07:d1:f7:a1:4a:
35:5b:02:c5:cb:0e:ca:bd:9d:14:3b:6e:f4:01:0d:56:9e:71:
a6:a0:30:a6:a8:4a:89:14:24:3b:6f:48:9b:6e:ac:c6:78:28:
03:00:76:b7:e3:b6:03:46:ee:fa:e1:98:87:d5:b7:14:5d:ce:
90:f6:b3:12:ae:d8:85:73:6b:74:a6:db:f0:2b:5c:d3:2d:ea:
17:17:86:b1:2a:d6:53:7d:ec:8d:12:c2:0a:11:e7:0c:47:00:
ec:bf:16:5a:5d:b0:d2:c7:85:dd:c0:b2:cc:dc:a1:7f:c2:d6:
67:9f:91:b2:f8:0d:62:1c:bd:f4:93:c1:66:37:c9:c3:91:0b:
9f:60:56:18:92:21:83:ac:a0:e4:6d:dc:a5:a2:25:18:f2:64:
45:89:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:40 2023 by rpki-client on console.sobornost.net