Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/5HnE5f0crGXSWWgjgvjxRjJM1rk.roa
File: 5HnE5f0crGXSWWgjgvjxRjJM1rk.roa (raw, json)
Hash identifier: wzj3JXVyr33ZfRFaUODMCj+ZtYXAfhoBlFfzlm17YtI=
Subject key identifier: E4:79:C4:E5:FD:1C:AC:65:D2:59:68:23:82:F8:F1:46:32:4C:D6:B9
Certificate issuer: /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial: 0188916E1B1851C3157883B2F063548C8FA4
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/5HnE5f0crGXSWWgjgvjxRjJM1rk.roa
Signing time: Tue 06 Jun 2023 15:58:12 +0000
ROA not before: Tue 06 Jun 2023 15:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 37.72.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6e:1b:18:51:c3:15:78:83:b2:f0:63:54:8c:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Validity
Not Before: Jun 6 15:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e479c4e5fd1cac65d259682382f8f146324cd6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:b0:f1:e0:1d:28:b7:3d:fc:72:35:3c:e3:
9c:21:87:d8:9f:6a:70:30:98:22:a3:47:3a:bc:c0:
fa:1b:de:59:7d:b6:be:0f:c6:5c:9a:56:0a:7c:f1:
e3:5f:c7:8c:22:1b:cb:2c:74:7b:9e:04:1b:b4:0a:
55:a8:84:72:04:f2:06:85:0b:18:41:56:9c:65:b3:
e1:d2:3b:a6:1c:ae:d7:b1:61:4f:1c:ed:d4:dc:57:
a6:d4:86:81:c3:b1:1f:db:6d:70:68:54:ab:31:26:
ef:0c:18:08:81:fe:75:54:33:27:61:99:79:f4:d1:
0d:81:1d:38:3b:7d:74:3a:c2:46:11:5d:8b:02:dd:
55:6a:50:15:76:57:a0:ae:b5:70:1c:9e:83:df:08:
ce:33:af:92:7f:cc:01:b0:a4:f8:d7:d0:19:23:0c:
b7:9d:9c:d1:4d:78:bb:0d:1e:22:d4:91:a4:c8:87:
47:72:25:ac:1d:aa:6a:de:ce:96:c7:9d:93:74:a5:
0a:21:e0:03:39:6f:d4:6d:a5:e4:c5:c8:5e:fd:d5:
35:7b:6c:e5:13:91:cc:ce:29:97:d2:ed:77:74:19:
e6:14:39:ac:8c:d6:f6:09:01:8a:9e:94:49:c1:c3:
c0:73:53:ad:05:35:59:8d:3e:6d:ea:b5:1d:dc:71:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:C4:E5:FD:1C:AC:65:D2:59:68:23:82:F8:F1:46:32:4C:D6:B9
X509v3 Authority Key Identifier:
keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/5HnE5f0crGXSWWgjgvjxRjJM1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:44:47:68:d3:98:7a:90:96:57:6e:95:05:de:16:0c:6f:55:
dd:26:69:cf:14:8a:c5:f8:b7:0f:ad:69:b3:b6:71:5d:f6:a5:
50:08:1a:bf:ec:de:e6:95:db:23:8f:d0:80:f8:51:d2:bd:ad:
71:8b:59:32:61:26:a5:7b:b6:95:97:7a:fd:e5:85:06:ff:6e:
c1:75:72:8b:a6:93:67:31:42:df:8f:e0:b6:d7:01:94:91:4e:
58:d4:b0:47:68:8b:89:20:5f:a2:26:5f:a7:8a:6d:8e:19:9d:
c9:88:74:fb:6b:f1:53:d5:03:39:10:33:73:85:da:87:d6:04:
f6:3e:f0:41:76:7c:f8:a8:36:d2:1b:24:6e:55:77:37:e1:a7:
65:87:62:59:00:4a:24:c1:00:bd:bb:6b:79:96:5b:49:89:89:
b9:ca:6f:2b:9f:14:6e:c3:1d:37:ad:35:54:10:6e:fd:c6:39:
88:68:2e:54:6a:e9:87:4c:74:aa:a9:9a:4e:d7:18:7b:88:eb:
09:3f:0d:c5:d8:fc:19:0d:3d:00:5f:4c:1d:81:39:e5:20:df:
36:c5:fe:be:a9:36:a4:68:68:87:45:73:45:dd:6b:cb:d0:63:
d7:cb:6d:42:6d:cf:c6:2e:94:ee:73:fb:b2:69:25:70:1a:3f:
d0:31:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net