Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/g2Ieyu6cumtrkUjXEaR8n3fV3ew.roa
File: g2Ieyu6cumtrkUjXEaR8n3fV3ew.roa (raw, json)
Hash identifier: HukqysVWtoP5hbMa2VuBjdvNKtOz5YyXXmFv17xiqH8=
Subject key identifier: 83:62:1E:CA:EE:9C:BA:6B:6B:91:48:D7:11:A4:7C:9F:77:D5:DD:EC
Certificate issuer: /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial: 0191DAE81742BF10B5B844E9FDBB19F8D112
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/g2Ieyu6cumtrkUjXEaR8n3fV3ew.roa
Signing time: Tue 10 Sep 2024 07:48:49 +0000
ROA not before: Tue 10 Sep 2024 07:48:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202345
IP address blocks: 185.201.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:e8:17:42:bf:10:b5:b8:44:e9:fd:bb:19:f8:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Validity
Not Before: Sep 10 07:48:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83621ecaee9cba6b6b9148d711a47c9f77d5ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:88:e5:a1:a7:82:b3:3d:00:37:cd:d2:70:
a0:0e:d8:8b:68:b7:d8:d7:9d:19:90:dc:14:00:a8:
57:cb:0c:c0:fa:b1:5a:5e:09:10:25:63:e9:78:5d:
ee:70:96:e7:ef:23:35:c2:fa:2e:05:6e:74:21:a0:
28:e7:78:07:d8:86:d1:8d:31:e2:9b:b3:31:04:bb:
84:08:53:5f:a7:94:7c:07:8c:c5:23:49:a9:c4:95:
a3:9f:b3:57:c1:6a:ed:e7:d3:56:90:21:ba:a5:8c:
e3:d1:b2:c4:79:3c:49:dd:cc:e6:5c:63:8f:e6:b3:
12:89:eb:aa:20:dc:68:7a:c3:c8:83:fb:81:a1:45:
99:21:ec:6f:ed:e9:f2:04:ad:19:21:71:c8:06:3d:
a9:7a:23:7b:7c:55:ec:b8:7b:0b:f0:fb:67:21:e7:
5a:43:85:77:f8:ad:8b:41:7e:a4:ef:fb:7a:98:40:
5e:ca:11:dd:cd:37:ff:11:62:ff:84:ea:98:1b:d2:
0c:be:ef:aa:dc:55:e8:79:9c:3f:7a:90:af:54:f2:
fd:6e:1a:5f:60:a5:83:82:d3:b8:d2:32:ec:20:37:
c6:be:a8:e8:35:96:96:2a:57:20:2d:76:3f:70:57:
8d:20:11:6e:0b:64:ee:e6:a8:af:a7:29:66:34:c2:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:1E:CA:EE:9C:BA:6B:6B:91:48:D7:11:A4:7C:9F:77:D5:DD:EC
X509v3 Authority Key Identifier:
keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/g2Ieyu6cumtrkUjXEaR8n3fV3ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:f1:55:f8:bd:f5:71:e5:2e:1b:5e:52:4c:63:f3:45:f7:25:
be:86:64:9b:bb:e7:49:c2:c7:24:15:76:1b:1d:fc:7f:4c:9d:
e8:c3:f5:ab:eb:a6:ce:0f:68:fd:c8:59:e3:36:08:3f:77:80:
92:6c:2b:57:42:45:95:95:da:07:55:1a:78:21:42:41:37:f5:
fc:9d:66:29:de:40:4d:23:4f:24:7a:48:65:38:b9:4f:8c:f1:
4c:f3:8c:2b:c9:66:6d:b2:99:d5:2b:85:e7:b9:30:cf:f3:66:
e9:a9:50:5f:0e:62:0f:77:7f:96:94:9e:1c:10:4e:69:f6:be:
39:4b:2d:2a:ff:ed:4f:c0:f0:ff:c8:b6:cf:a9:b2:39:b2:53:
7d:70:10:b2:2c:82:79:6b:4f:da:ed:63:fa:ff:71:f4:88:18:
a9:fe:4e:5c:3c:af:e7:61:79:50:28:c5:0e:f3:5b:5d:91:5a:
f2:e2:f7:b2:bb:83:92:72:56:aa:94:c4:6f:7e:58:80:be:93:
80:89:a6:be:99:c9:79:02:98:df:0f:70:ed:4a:a3:d5:8f:91:
95:45:f7:5c:15:e9:3b:86:2c:fe:e2:06:59:0c:b6:1f:c7:4a:
a4:77:9b:d7:20:8e:bd:31:0f:a8:97:e9:b6:b2:44:29:db:9a:
58:10:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net