Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/UdF6MZ72zWo7gRclA33X_qRn50c.roa
File: UdF6MZ72zWo7gRclA33X_qRn50c.roa (raw, json)
Hash identifier: pxQc6zgAAz27B4k8qf2TdTF2xpZYwJZWthZ6Q+bCfWk=
Subject key identifier: 51:D1:7A:31:9E:F6:CD:6A:3B:81:17:25:03:7D:D7:FE:A4:67:E7:47
Certificate issuer: /CN=dc62c84850750e2aa68930f164b0c522073aead8
Certificate serial: 01856F9DE529854211F99A5E577A06A5775E
Authority key identifier: DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/UdF6MZ72zWo7gRclA33X_qRn50c.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60945
IP address blocks: 194.69.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e5:29:85:42:11:f9:9a:5e:57:7a:06:a5:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc62c84850750e2aa68930f164b0c522073aead8
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51d17a319ef6cd6a3b811725037dd7fea467e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:29:c0:2c:e2:da:0e:33:c4:06:22:ad:f3:
7f:0a:ec:1f:1c:41:e8:b7:ed:6b:b0:3e:de:e4:77:
86:0e:ad:46:1e:2c:54:b8:fe:c8:1a:78:ff:01:d6:
b2:1f:a8:df:25:a2:d0:4c:5d:bc:e8:7c:e2:df:85:
df:fe:62:f9:93:1e:d6:cc:ca:c1:13:33:67:cc:69:
7e:20:29:22:d2:88:71:be:a9:e5:01:5a:29:1b:56:
7e:99:7d:82:36:45:2e:6b:2e:0e:ae:c3:e4:df:4f:
a4:5a:51:69:29:e6:c1:a4:90:aa:b2:1b:1c:d9:9e:
a5:74:d5:64:a7:c0:37:80:79:62:95:6f:7b:5d:62:
74:9f:b9:81:6f:14:f3:e7:af:75:1a:fc:d6:a8:0a:
fa:e9:5f:ad:a0:12:df:5e:32:72:8d:60:ca:1b:ff:
75:35:a5:52:78:26:7c:30:8b:66:5c:a9:94:8a:07:
a8:f1:53:cc:09:3b:c6:e1:3d:ed:26:f1:d0:0a:48:
3e:32:34:a2:ab:df:81:02:1a:b7:20:0d:41:c6:33:
49:dc:a3:3d:ab:0f:1a:ef:dd:86:03:6b:71:82:ca:
75:b7:ce:aa:aa:bc:1c:96:f4:df:5c:4b:1a:01:24:
5e:c5:8b:8a:ad:11:a4:07:c4:e7:26:48:b0:39:ef:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:7A:31:9E:F6:CD:6A:3B:81:17:25:03:7D:D7:FE:A4:67:E7:47
X509v3 Authority Key Identifier:
keyid:DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/UdF6MZ72zWo7gRclA33X_qRn50c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/3GLISFB1DiqmiTDxZLDFIgc66tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.165.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f4:33:20:b3:f3:00:e5:c5:66:03:59:1a:c1:a7:d3:4f:0c:
27:a9:fc:59:2d:14:bd:00:40:8d:e4:11:ac:ab:3d:ec:25:de:
17:4e:21:19:c2:1b:99:03:50:93:c7:d6:18:50:65:5c:9d:82:
e3:e6:65:6e:b3:dd:8f:e8:a1:47:0f:b2:b7:3d:93:db:60:20:
c6:d0:07:02:4f:39:64:f0:c4:3c:30:30:c7:b8:4d:bf:b3:56:
f8:31:9a:47:29:d8:67:fb:ab:0f:70:84:06:ab:d9:9d:ac:e1:
69:b1:6b:2d:8c:d7:27:c0:2d:6b:9d:26:21:53:4e:b4:f4:35:
d5:12:48:50:c8:cb:42:ca:20:48:bf:a3:39:01:9d:39:ca:fa:
43:32:a9:af:7d:a4:e1:32:e5:28:ca:e8:6a:d8:2c:5d:cb:89:
7e:c6:91:8c:9e:cf:d0:7c:27:c5:6a:fd:4f:99:b5:ee:41:bc:
8a:e7:e3:82:79:5a:88:99:bf:90:07:40:3a:40:2d:d1:73:22:
67:5d:4b:ae:af:a3:da:5c:63:8f:f5:7f:0a:5c:73:81:97:73:
f6:98:60:2e:b0:e8:0d:5b:a6:10:ff:d6:0d:e3:21:72:75:47:
0c:58:85:61:af:58:f8:0d:9a:35:fd:e5:70:0d:03:49:6a:8e:
67:09:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net