Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/3mFP0_WBovE3Y_l_tAvXokzqvc8.roa
File: 3mFP0_WBovE3Y_l_tAvXokzqvc8.roa (raw, json)
Hash identifier: tXPzcGcfF2oh9QGnvf///8JtT9O+iOiKjamjtmJ3CS8=
Subject key identifier: DE:61:4F:D3:F5:81:A2:F1:37:63:F9:7F:B4:0B:D7:A2:4C:EA:BD:CF
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 018CC6B89C2293D9C36EB8EBAEB224FCCAE9
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/3mFP0_WBovE3Y_l_tAvXokzqvc8.roa
Signing time: Mon 01 Jan 2024 20:30:36 +0000
ROA not before: Mon 01 Jan 2024 20:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209772
IP address blocks: 185.68.130.0/23 maxlen: 23
185.68.128.0/23 maxlen: 23
185.207.162.0/23 maxlen: 23
185.207.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9c:22:93:d9:c3:6e:b8:eb:ae:b2:24:fc:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jan 1 20:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de614fd3f581a2f13763f97fb40bd7a24ceabdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:1b:98:2b:24:f9:af:f2:e8:f7:82:c0:b9:
d2:30:d1:3b:f3:32:f1:14:bd:73:10:15:03:ed:50:
07:b0:9c:c6:fe:8e:d4:2c:a2:82:75:0c:79:3f:36:
4d:07:3a:33:83:43:c8:df:b5:44:3c:3b:24:a0:85:
91:67:de:52:49:60:89:a7:77:97:d5:ab:7f:a5:82:
8c:26:e2:ec:7e:f2:13:b2:e6:ca:bc:50:0a:2c:74:
c8:76:a4:a0:ed:28:12:aa:d3:0b:6b:51:43:df:a7:
4d:77:d3:4e:e9:52:fd:49:4e:2b:0d:94:9d:d5:ba:
9e:89:a4:4e:9b:e2:1b:2d:e7:30:8a:81:de:39:ff:
d1:95:f1:1e:f7:87:f8:0d:31:b1:71:f8:a7:cb:e0:
fb:80:67:b2:21:eb:10:36:ce:7e:64:2d:aa:04:44:
c2:3e:44:60:a1:fb:81:f8:55:b9:7f:ae:be:0f:f4:
96:fe:96:f6:ee:24:75:81:b8:50:4b:57:68:7e:77:
b1:25:81:80:fe:19:8d:39:ac:b9:70:b2:b2:e9:0a:
71:cd:65:6e:3e:33:04:63:0a:7c:27:b0:19:07:db:
15:03:26:b8:67:c1:d7:bc:6f:50:a6:91:42:cf:72:
16:f1:2d:dc:06:7a:a3:00:12:c4:fd:e8:0a:99:e6:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:4F:D3:F5:81:A2:F1:37:63:F9:7F:B4:0B:D7:A2:4C:EA:BD:CF
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/3mFP0_WBovE3Y_l_tAvXokzqvc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.128.0/22
185.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:8e:e1:1c:b7:f2:e8:c1:70:a6:71:24:98:3b:e2:08:8b:f4:
a7:6a:0e:cd:f9:28:d1:28:61:c5:eb:b3:ce:ef:fc:92:3f:a7:
b7:27:dc:b2:70:33:98:38:86:62:8a:83:78:0b:ed:31:a0:c2:
ed:65:7b:ac:7d:83:c2:88:7f:fe:e1:08:89:3c:48:b8:7e:f4:
5e:43:dd:14:11:f0:10:db:bb:99:26:d0:8d:e5:d1:70:2e:4f:
fa:8f:e5:94:46:c3:d7:9c:db:7d:f1:a7:01:4d:da:d0:a5:67:
cf:d0:42:63:22:16:db:46:d7:fe:bf:a0:63:32:6c:29:aa:b0:
2c:67:8f:61:e8:52:d7:1b:86:6f:39:83:ef:80:ac:55:28:9f:
89:38:fa:6d:47:52:20:a8:9e:17:15:0e:d0:e6:fc:f2:49:75:
71:bf:b4:84:ef:b3:07:1c:87:fa:17:06:72:c0:39:88:d3:b5:
4c:c6:dc:f7:82:63:cb:49:bf:5a:b0:be:59:ef:a1:25:00:b1:
58:cf:e4:13:8d:84:6a:14:25:b7:19:3e:f4:b6:5e:cb:7c:fd:
3c:70:09:30:f0:52:30:21:f2:24:60:b6:ca:b0:4a:61:89:70:
ed:2d:bc:cc:0c:6a:88:41:24:fb:48:73:55:39:cf:87:51:27:
07:c7:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:33:59 2024 by rpki-client on console.sobornost.net