Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/2vmJ8Xm6jy4uA6z5XeZSVZcn_ww.roa
File: 2vmJ8Xm6jy4uA6z5XeZSVZcn_ww.roa (raw, json)
Hash identifier: D3HqqkS1iUWDvgtQnwHyhoR6jsq8kwnMgKLkk32EAws=
Subject key identifier: DA:F9:89:F1:79:BA:8F:2E:2E:03:AC:F9:5D:E6:52:55:97:27:FF:0C
Certificate issuer: /CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
Certificate serial: 0188DD3A96CA9410C17902F94A45FDD124DA
Authority key identifier: AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/2vmJ8Xm6jy4uA6z5XeZSVZcn_ww.roa
Signing time: Wed 21 Jun 2023 09:13:04 +0000
ROA not before: Wed 21 Jun 2023 09:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209349
IP address blocks: 85.208.218.0/23 maxlen: 24
85.208.216.0/22 maxlen: 23
85.208.216.0/23 maxlen: 24
2a09:8c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:3a:96:ca:94:10:c1:79:02:f9:4a:45:fd:d1:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
Validity
Not Before: Jun 21 09:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf989f179ba8f2e2e03acf95de652559727ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:a2:04:fe:23:7c:96:cf:72:43:d6:fb:27:
9a:b0:f2:84:e1:a8:6d:d8:4a:e0:b2:57:b8:13:92:
2e:f2:82:e8:97:4a:95:dd:80:ce:01:a7:fe:1f:97:
95:fe:42:46:dc:68:dd:aa:30:13:b1:76:05:f9:9f:
f0:d6:bc:bb:b6:d8:76:8d:4e:c0:b4:f3:a0:12:b7:
22:2f:a4:4a:a5:19:58:66:07:ac:6d:ef:87:93:7b:
7f:07:8e:5d:f0:69:74:29:01:d7:8f:0d:37:f6:1a:
38:96:a5:64:ed:0b:0a:3a:15:7b:4a:ce:21:f6:2d:
64:1b:0d:ab:34:cd:69:a0:3c:3b:c1:3c:1c:63:b8:
56:2f:f4:29:57:d9:b8:d6:a7:c4:bb:24:6d:b8:d2:
96:e8:9f:83:e5:7f:2b:80:28:46:72:f9:04:b1:08:
51:22:a4:f9:e4:45:3f:ab:d0:72:ec:51:9c:0e:ab:
e3:45:37:7a:c0:67:41:90:e9:c4:15:22:88:74:5a:
bb:e9:23:72:17:f3:64:30:c5:34:0d:a5:40:5a:cd:
a3:a7:c3:80:cd:5e:67:ba:d7:28:eb:de:8b:88:74:
9d:bd:2d:ac:95:23:95:22:3e:44:e8:73:d2:71:9c:
d4:06:1a:47:8a:9d:80:1d:ed:f6:dc:12:ec:b1:b9:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:89:F1:79:BA:8F:2E:2E:03:AC:F9:5D:E6:52:55:97:27:FF:0C
X509v3 Authority Key Identifier:
keyid:AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/2vmJ8Xm6jy4uA6z5XeZSVZcn_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.216.0/22
IPv6:
2a09:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
40:41:2b:15:5b:67:33:13:78:a7:5b:90:6b:a8:a5:69:ae:ba:
87:91:2c:5c:3a:73:c0:96:1a:c5:d6:6d:57:b6:b2:44:63:63:
33:af:cf:7e:0e:36:c9:35:71:62:df:bf:2f:32:21:9a:ce:f6:
4d:32:f1:cf:83:28:ea:83:0f:1a:d8:4a:a3:b6:67:45:6e:ce:
0b:0d:a8:63:5b:62:41:ad:96:85:43:3a:1e:e1:ba:93:a4:ac:
35:b5:14:1f:ef:9b:58:47:eb:f1:fd:06:7a:94:19:48:e6:25:
f7:42:77:b8:c8:b3:3b:5d:30:dd:9d:91:ce:98:3b:52:82:9d:
f0:d9:88:e9:a2:01:9d:ff:36:34:1c:85:55:78:df:fc:f2:3f:
98:ba:a5:60:12:2c:96:f7:32:e3:01:d4:01:2f:55:43:8a:09:
72:c6:27:6c:2a:0e:a0:fc:e1:91:57:fa:d3:6d:fb:6c:fe:20:
4a:d6:f5:c3:88:31:90:cc:42:88:da:0f:78:46:6c:87:da:b4:
cb:38:d8:9a:5a:31:8d:42:87:a8:89:eb:91:79:29:ae:6f:69:
9d:1b:d8:4d:70:0c:fe:d5:21:5d:20:be:e1:b5:f3:c5:c9:f9:
b0:38:94:6d:08:83:fc:22:a4:d3:56:e5:76:34:36:b4:a4:3a:
e1:66:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net