Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/AIaFnSek5MiCjPJgrwvAFRQPdps.roa
File: AIaFnSek5MiCjPJgrwvAFRQPdps.roa (raw, json)
Hash identifier: 4UngA7u1u5+er6SgcqDeA1PBPWyMxIBpgzHowPRr4rI=
Subject key identifier: 00:86:85:9D:27:A4:E4:C8:82:8C:F2:60:AF:0B:C0:15:14:0F:76:9B
Certificate issuer: /CN=b70012047c6e2d2108065fb872fa5783159a362d
Certificate serial: 013B466D
Authority key identifier: B7:00:12:04:7C:6E:2D:21:08:06:5F:B8:72:FA:57:83:15:9A:36:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twASBHxuLSEIBl-4cvpXgxWaNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/AIaFnSek5MiCjPJgrwvAFRQPdps.roa
Signing time: Sat 01 Jan 2022 06:03:43 +0000
ROA not before: Sat 01 Jan 2022 06:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64429
IP address blocks: 77.72.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20661869 (0x13b466d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70012047c6e2d2108065fb872fa5783159a362d
Validity
Not Before: Jan 1 06:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0086859d27a4e4c8828cf260af0bc015140f769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:1f:31:1d:19:7b:91:7f:ac:aa:99:57:c2:
2f:e0:8a:67:34:d0:2a:b5:14:20:9e:ab:f0:81:4f:
48:68:58:c2:fa:16:02:5f:49:f8:db:93:2f:3f:b6:
f8:3d:b8:5a:ef:76:c1:9c:0e:58:ec:51:27:96:c0:
c6:f5:9c:31:82:53:d9:c9:87:1c:cc:38:81:5f:05:
5e:c1:27:ad:b6:0a:73:f1:32:b9:75:96:3f:e3:0b:
d7:ac:3e:f9:dc:55:1c:88:cb:d1:f0:1a:33:39:c8:
d7:69:40:4f:da:b0:d3:ed:0d:d9:2d:84:1d:a1:68:
54:5a:7d:23:f4:c0:b0:56:e4:8d:83:16:57:b2:b7:
ea:8b:98:20:2c:1f:b4:25:fe:c1:56:6d:67:0f:89:
ab:67:9a:3a:3e:37:71:62:0e:34:ba:cf:5b:7f:fc:
ce:1f:ab:c1:1d:c4:2e:6b:fa:01:54:f0:8a:41:7a:
c0:57:bc:9b:a1:18:85:0c:1e:c6:cc:1c:48:80:0c:
b1:ff:34:b7:e9:92:a4:3a:a3:78:11:ff:c7:96:e9:
e6:3f:b9:11:74:6c:d1:95:d9:fe:07:e4:42:9c:50:
11:9b:f1:42:e7:29:2d:75:da:c3:b7:7e:65:a9:a4:
ac:83:b1:f1:53:8e:8f:9d:78:a9:8c:d2:3a:09:57:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:85:9D:27:A4:E4:C8:82:8C:F2:60:AF:0B:C0:15:14:0F:76:9B
X509v3 Authority Key Identifier:
keyid:B7:00:12:04:7C:6E:2D:21:08:06:5F:B8:72:FA:57:83:15:9A:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twASBHxuLSEIBl-4cvpXgxWaNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/AIaFnSek5MiCjPJgrwvAFRQPdps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/twASBHxuLSEIBl-4cvpXgxWaNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:2e:fc:8f:d5:27:df:2b:55:bd:0c:46:0c:0b:c2:01:d0:
79:8c:0c:35:ab:db:4e:3d:a9:2d:be:52:f0:53:43:3e:26:10:
e7:c5:d2:84:44:3f:ba:6a:4a:d3:de:dd:94:a3:85:e0:6c:48:
a5:a3:e1:09:25:06:59:a9:4c:c5:ac:27:50:27:85:1c:72:17:
05:2e:1c:f0:3d:65:4a:92:53:17:08:eb:45:86:ca:8f:6d:4b:
ba:dd:5a:a0:b0:3f:e9:9d:eb:74:30:fb:82:3d:f2:6c:54:69:
28:87:ff:a6:52:65:c3:ab:6b:46:77:ad:d4:21:a8:9b:b5:69:
3f:8a:79:30:d4:4b:62:be:9a:0c:56:55:ba:4a:1f:fe:6d:e7:
a4:e3:e1:a4:8e:ae:96:9c:a6:4b:39:ed:cd:63:48:34:61:29:
93:74:42:96:bc:7d:fa:60:bb:02:98:cc:23:ca:7b:82:3e:13:
78:73:61:3d:10:42:fe:c2:f8:b5:20:ef:99:d9:f0:49:4f:69:
9c:15:4a:ea:a5:b6:49:2f:07:36:e2:97:13:ce:5b:62:8e:50:
2d:15:d0:26:b1:2b:52:4a:e9:54:90:24:64:4c:4c:cb:1f:e6:
c2:0a:de:db:92:31:fd:3b:75:2e:ad:6f:85:c4:67:86:4b:b0:
45:c2:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:59 2023 by rpki-client on console.sobornost.net