Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/fyhOTWebFZQsOebg33Ks0o6cTU8.roa
File: fyhOTWebFZQsOebg33Ks0o6cTU8.roa (raw, json)
Hash identifier: xTld28Dt2umoreINK4s2+cwiUMM+C6/+Nx9RTYIvOIc=
Subject key identifier: 7F:28:4E:4D:67:9B:15:94:2C:39:E6:E0:DF:72:AC:D2:8E:9C:4D:4F
Certificate issuer: /CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Certificate serial: 01856B9C6D6A1443DC69AE213BBE6A1B6314
Authority key identifier: B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/fyhOTWebFZQsOebg33Ks0o6cTU8.roa
Signing time: Sun 01 Jan 2023 04:34:51 +0000
ROA not before: Sun 01 Jan 2023 04:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 146.19.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:6d:6a:14:43:dc:69:ae:21:3b:be:6a:1b:63:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Validity
Not Before: Jan 1 04:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f284e4d679b15942c39e6e0df72acd28e9c4d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:3f:7e:dc:e4:c7:f6:53:cf:8d:09:a3:d0:
21:27:18:80:1f:94:d4:1f:96:ab:d2:2d:c8:02:8f:
7d:60:98:a3:67:a7:5a:7d:98:3f:3b:12:cb:9d:d8:
3b:f3:f3:d8:9c:d8:d9:4b:71:93:9c:9c:a2:b7:8c:
61:ae:f1:9b:7a:dd:0e:82:79:64:e9:bd:91:ae:7e:
1c:ad:18:f0:b8:7e:6d:f7:bc:4e:82:bb:10:c8:ed:
92:e0:08:ae:72:f9:0b:32:4b:2d:3b:cd:1f:e3:c1:
aa:9c:8b:b2:19:a6:b0:8e:b0:f2:31:aa:10:59:fb:
88:c8:b3:d0:6b:56:14:cb:0d:3f:ac:cf:95:f3:16:
ac:69:20:17:ac:f1:01:15:d2:a6:57:7a:38:65:58:
e4:79:00:24:55:e1:b2:ba:60:73:35:c8:3a:06:58:
01:b0:27:7a:d0:98:24:45:3d:83:4a:1a:dd:fe:b1:
74:9d:4e:33:a5:47:1a:d8:5f:c0:2b:40:9d:1e:c2:
a6:7b:7c:b8:8e:d4:93:b1:e6:69:81:35:40:65:78:
e6:eb:5c:5d:3c:2c:d6:b2:4b:95:ab:af:77:6a:77:
6f:63:9d:10:e9:bb:2f:1c:81:bb:3d:33:fb:da:d1:
b2:d4:ee:7c:02:0d:3a:f0:d7:48:8d:59:4c:d8:bf:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:4E:4D:67:9B:15:94:2C:39:E6:E0:DF:72:AC:D2:8E:9C:4D:4F
X509v3 Authority Key Identifier:
keyid:B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/fyhOTWebFZQsOebg33Ks0o6cTU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e4:52:37:58:bf:17:ce:cd:86:5c:f6:00:8d:70:9d:31:b8:
db:48:5e:61:08:39:7f:1a:0f:82:f2:35:94:d0:22:c7:4f:f7:
df:11:4b:a7:ca:4e:14:a0:16:74:65:67:b6:1c:dd:df:a1:be:
6c:19:c9:21:f6:9b:c2:fe:b3:32:1c:e7:f1:03:fd:73:ed:ef:
6c:43:5a:f4:13:0a:2b:67:07:83:5c:a2:bc:4d:39:a3:28:f7:
8b:be:20:22:eb:f7:0b:4e:e8:43:26:60:ca:40:da:f9:10:23:
85:12:a9:0c:be:bd:2e:2a:8e:3f:95:91:a7:4e:3a:34:6c:2e:
a5:67:d8:ea:59:38:3e:70:cb:9a:67:58:69:e3:f8:10:4c:33:
9d:05:c5:0b:35:e5:c7:9b:dd:32:92:7d:af:49:62:aa:2b:fb:
0a:fe:26:dc:d2:3c:06:dc:20:ab:9b:82:e9:b7:f0:25:a4:cb:
48:1a:a9:e5:9a:00:fb:5d:59:64:5c:fd:3a:09:6f:bf:43:49:
9d:72:06:44:c6:33:e2:be:4c:e7:65:9e:fc:08:6e:58:cb:dd:
f8:34:2c:03:ed:2c:d4:2b:dc:8c:eb:28:12:df:da:85:c3:1c:
25:01:2a:b2:43:79:f6:9e:88:41:16:30:3c:e2:1b:0e:b2:dc:
66:57:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net