Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/KOpyDGTJWD34iy9YjKBw8LKKJF4.roa
File: KOpyDGTJWD34iy9YjKBw8LKKJF4.roa (raw, json)
Hash identifier: 94HPWHYwsWim+dpL2AuAJNLs7B57wloek8l4eexnOY0=
Subject key identifier: 28:EA:72:0C:64:C9:58:3D:F8:8B:2F:58:8C:A0:70:F0:B2:8A:24:5E
Certificate issuer: /CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
Certificate serial: 01856F66EE3A3731BF0ACA0B8B0AF02DCEAB
Authority key identifier: A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/KOpyDGTJWD34iy9YjKBw8LKKJF4.roa
Signing time: Sun 01 Jan 2023 22:14:54 +0000
ROA not before: Sun 01 Jan 2023 22:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.116.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ee:3a:37:31:bf:0a:ca:0b:8b:0a:f0:2d:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
Validity
Not Before: Jan 1 22:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28ea720c64c9583df88b2f588ca070f0b28a245e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:9c:a6:6d:2c:4b:b6:2b:d3:2f:c4:4a:1f:
ab:06:c3:20:f3:93:7c:cd:ba:bd:1c:53:a1:17:e3:
8f:72:b2:dd:0f:b1:33:c7:f9:c1:57:4e:8f:80:b6:
c2:0e:42:0c:77:91:0d:2e:8e:92:61:69:61:cf:83:
65:52:2d:36:6d:2d:65:11:a5:12:db:09:a2:3a:52:
b5:1e:7a:73:33:83:ed:42:b5:e2:22:75:5a:58:2a:
17:42:d8:e6:97:9f:41:50:57:5a:4f:63:97:d7:be:
81:33:a3:a8:ef:c8:8a:98:d5:92:fd:72:eb:45:c4:
32:c9:68:f9:76:7d:c5:07:f9:31:3e:8c:ed:26:13:
0c:a4:4b:7e:50:d0:4e:52:28:4d:1b:f0:67:60:71:
de:2e:d4:1c:ee:52:d4:30:37:88:bb:9a:55:fe:45:
cc:b7:e3:ff:8d:ce:14:97:c4:33:0e:85:09:38:a4:
54:ab:f6:21:94:db:20:9f:ed:29:54:2b:40:4d:d6:
1d:cd:94:54:97:2c:88:51:39:39:5d:47:9b:ba:20:
f0:00:ce:eb:1a:8d:8f:5f:ad:52:b5:13:ed:b4:39:
2e:df:98:7c:1d:3f:33:e1:83:fe:da:3d:22:19:f5:
02:fe:21:61:a9:15:e1:2a:4f:6d:69:86:18:ca:ce:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:72:0C:64:C9:58:3D:F8:8B:2F:58:8C:A0:70:F0:B2:8A:24:5E
X509v3 Authority Key Identifier:
keyid:A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/KOpyDGTJWD34iy9YjKBw8LKKJF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:66:96:19:54:95:7f:3a:3e:3b:eb:01:2c:02:20:10:08:20:
fb:09:6f:a2:56:47:08:75:f1:d7:15:05:a4:95:b9:7e:9e:da:
04:8f:fa:94:7f:cf:d1:cd:ec:23:f8:00:5a:d2:62:51:fb:4b:
d7:1a:49:7d:c4:cd:35:28:7e:41:25:cf:a6:2a:34:94:51:b5:
02:12:19:8c:cd:ee:f2:51:47:07:75:f6:91:38:05:5b:31:16:
9a:82:70:c4:b9:23:59:e3:7c:d6:5a:28:5b:80:9f:ad:e3:f9:
0f:f7:e4:23:d7:03:a2:06:30:92:2c:d4:6a:b4:6f:74:42:1d:
24:7a:27:13:89:ba:a4:e9:eb:db:00:28:6a:99:4b:36:c5:0f:
8e:c7:be:2c:f3:4d:ce:84:2e:58:e3:13:17:5a:ed:2a:a6:af:
c0:1e:8e:cc:d3:b9:19:a5:25:2f:1d:57:54:c1:35:49:91:aa:
9e:68:75:ca:9c:26:b1:7a:0f:6a:bb:ee:27:6d:08:fa:b6:25:
61:50:46:e9:92:9e:92:c1:56:40:cd:45:cc:46:bc:80:fe:e4:
16:4c:22:e6:0d:ab:e8:fe:ea:3b:ff:de:b0:17:8b:5c:e0:ca:
7d:45:f2:23:4c:49:88:63:4c:5c:3f:dd:13:fb:83:c2:77:c4:
d1:28:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net