Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/i-Vw10FsHH3NuVw7pqIXKyLeRls.roa
File: i-Vw10FsHH3NuVw7pqIXKyLeRls.roa (raw, json)
Hash identifier: OCiTqTmonI/Fvz8iR6J3SG+q8g8ZEOWHAofIYB63a8U=
Subject key identifier: 8B:E5:70:D7:41:6C:1C:7D:CD:B9:5C:3B:A6:A2:17:2B:22:DE:46:5B
Certificate issuer: /CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
Certificate serial: 018805C9772305F1A2BAF30B431578231F34
Authority key identifier: A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/i-Vw10FsHH3NuVw7pqIXKyLeRls.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 176.116.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:23:05:f1:a2:ba:f3:0b:43:15:78:23:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8be570d7416c1c7dcdb95c3ba6a2172b22de465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:d6:8f:b1:50:d1:b2:14:4b:a6:3f:f8:ff:
12:ea:67:71:de:2f:fb:f2:36:85:53:17:15:d6:49:
0c:2d:30:27:c2:5c:29:6d:06:cd:f3:e5:f3:a4:3c:
01:fe:23:83:75:93:e6:7b:e7:54:1c:d6:27:ca:5e:
47:28:7e:6a:49:68:68:90:ac:de:90:af:e2:29:90:
e2:03:8c:de:2c:b3:b6:15:62:a8:e8:5a:5b:a5:91:
1d:3e:ff:75:83:48:f9:24:ee:03:e1:27:c3:d8:8d:
ac:d5:e2:5f:9d:00:eb:60:20:d9:48:3f:94:79:ce:
4a:b7:fb:dd:b6:33:be:26:f8:2f:cf:72:38:d3:be:
5a:07:74:4d:aa:e9:8c:cb:27:fe:67:80:fc:61:0b:
c1:79:f1:5c:5b:a7:49:c0:c4:39:7f:04:a9:f3:b0:
ef:2d:cb:34:e2:4d:16:e2:2a:e7:e6:a6:7a:78:97:
d5:d8:cd:5a:0b:6a:fb:c6:9a:2d:3b:e1:ed:6c:14:
81:d3:0a:0f:f5:2f:21:3f:80:f3:85:26:62:9e:7d:
14:74:c7:7a:f7:93:60:c4:7d:d5:39:da:0b:7a:d2:
ac:f1:46:87:e2:1d:cd:41:3b:e6:5a:d6:05:1c:65:
1a:57:60:4b:a2:15:ae:6f:7f:6a:85:38:d5:cf:57:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:70:D7:41:6C:1C:7D:CD:B9:5C:3B:A6:A2:17:2B:22:DE:46:5B
X509v3 Authority Key Identifier:
keyid:A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/i-Vw10FsHH3NuVw7pqIXKyLeRls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:20:2f:a1:85:7d:12:83:51:dd:ad:d3:61:4e:9e:60:63:56:
ee:cd:e1:0a:db:e6:0d:73:35:e0:d1:a7:a2:3d:96:95:9c:17:
e4:ad:e2:47:76:93:20:08:db:ac:7f:69:1d:1a:ba:99:cd:ac:
73:76:f6:a4:8f:49:15:48:eb:86:5b:43:5f:50:7f:b2:3c:6c:
fb:9d:4c:7a:2f:db:e1:0b:68:39:e4:c1:ad:c6:74:37:b9:05:
cf:7d:f5:a4:ad:11:08:a1:36:79:3f:bb:e3:c6:1c:5d:d5:8e:
96:c9:00:27:15:a0:c0:d1:6d:21:ab:24:e2:68:b6:66:de:d5:
d4:ac:1a:f0:9a:42:3b:64:78:24:ae:bf:f0:ab:37:3e:dd:9e:
91:3f:e9:41:e1:0f:b0:c2:ca:1c:84:ea:56:65:c1:72:25:50:
0d:f7:74:66:eb:75:8b:23:25:cf:82:51:b2:de:f9:fd:ce:06:
90:e6:7b:1d:4b:d3:2d:7d:8a:a5:4f:a0:a6:52:6d:4d:ef:66:
27:dc:05:40:54:07:a2:84:6c:83:61:97:ce:6f:d6:a7:f6:2a:
3c:f5:ee:56:15:e4:af:55:d0:eb:ec:db:b7:6c:5a:19:f8:76:
65:ea:95:85:91:16:90:b4:0a:59:a0:01:c1:95:c1:0b:f9:c1:
b8:68:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net