Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/Mtmq1IOSF3_JhcULT1qV_5cS0GU.roa
File: Mtmq1IOSF3_JhcULT1qV_5cS0GU.roa (raw, json)
Hash identifier: XmSKZZ9taFrNivLR5t2zkoKvOrhxwrL1AAi3G4VqjUs=
Subject key identifier: 32:D9:AA:D4:83:92:17:7F:C9:85:C5:0B:4F:5A:95:FF:97:12:D0:65
Certificate issuer: /CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Certificate serial: 01856F26F9046C44D7832D1F1B3BF4292739
Authority key identifier: B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/Mtmq1IOSF3_JhcULT1qV_5cS0GU.roa
Signing time: Sun 01 Jan 2023 21:05:03 +0000
ROA not before: Sun 01 Jan 2023 21:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f9:04:6c:44:d7:83:2d:1f:1b:3b:f4:29:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Validity
Not Before: Jan 1 21:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d9aad48392177fc985c50b4f5a95ff9712d065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:cc:3f:8f:98:e9:1a:9f:1a:87:28:97:63:
82:d9:68:14:b9:55:87:e0:b0:a3:9d:97:d9:60:ac:
ec:cf:07:97:24:b7:09:b7:34:03:b7:e6:27:5f:17:
1e:80:32:df:a5:11:78:25:71:88:29:90:3b:38:50:
eb:d9:1b:73:d6:e9:5b:ec:d6:c7:47:03:e3:5a:73:
e0:10:67:1a:23:cb:36:08:04:9f:30:44:2d:9c:d7:
15:56:b7:24:3d:66:87:fb:de:52:5f:fd:d3:08:ec:
3e:15:e3:eb:af:ee:5c:57:f6:4d:11:ea:e4:54:72:
d8:ee:6b:b9:14:a7:3c:53:3e:76:3b:5e:78:46:dd:
a2:e4:71:5a:ab:d7:ab:b9:7c:21:53:93:52:f7:1c:
d4:6e:77:bf:09:1e:90:ba:24:4b:96:68:f1:1c:08:
a4:5c:1e:93:43:0f:d2:0b:9d:85:21:7f:83:64:b1:
1b:a5:7b:6a:23:7a:a0:e2:22:9b:a3:1b:cd:6f:26:
2f:d4:a9:52:ea:56:5c:55:95:37:da:11:4e:ba:04:
f4:d6:a0:74:c6:88:53:0a:fb:7e:cd:54:ee:b4:42:
1e:6d:86:1b:05:3e:6c:7f:58:36:f9:e1:84:c0:40:
bc:40:49:af:b8:70:9e:87:24:92:44:82:87:f4:8f:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:AA:D4:83:92:17:7F:C9:85:C5:0B:4F:5A:95:FF:97:12:D0:65
X509v3 Authority Key Identifier:
keyid:B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/Mtmq1IOSF3_JhcULT1qV_5cS0GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/sZK_CoZ6BKC2B2h66QxEeuYlE6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.135.0/24
Signature Algorithm: sha256WithRSAEncryption
46:24:ba:45:cb:3e:7e:fc:e1:13:30:49:7d:64:5f:09:fa:c0:
8c:be:d1:21:20:04:2a:c7:9b:9d:52:1a:1e:93:48:0c:8a:ac:
63:a4:77:8a:6a:ad:5a:8f:85:8d:b2:f3:b2:cb:19:62:af:18:
02:27:db:3b:5f:b4:cc:af:89:70:45:54:af:27:be:4f:6f:86:
2b:15:84:d4:26:49:b0:ea:f7:42:92:90:24:ee:8c:f1:07:4f:
36:c4:86:ab:c8:64:3d:d1:e4:95:15:43:2b:73:ba:a5:72:3b:
5d:59:0c:ea:2f:23:eb:41:dc:6c:68:d1:3d:2d:14:a0:51:4d:
54:59:43:d2:c3:5e:f1:af:8f:dd:53:14:e2:d4:3c:86:9c:d5:
43:1a:9c:09:63:8b:8e:36:88:1c:70:7a:d6:02:98:f7:5a:b2:
96:1a:53:93:41:1c:da:aa:74:38:b6:f4:dd:f5:21:9c:3b:a2:
bb:f0:5b:10:df:03:61:fe:37:89:61:09:44:f0:a1:eb:7b:c6:
4b:74:0a:19:ef:30:ad:aa:41:85:ce:ac:34:28:6c:68:bc:ea:
74:16:da:8c:73:5d:54:3f:a8:11:fb:75:97:d2:96:5c:9f:1e:
47:0f:48:31:db:e0:f9:47:ff:3b:0e:c5:47:23:e8:b2:98:9d:
e1:9c:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net