Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/NkNFUvpQV2o42BjCGILO5YiTV5c.roa
File: NkNFUvpQV2o42BjCGILO5YiTV5c.roa (raw, json)
Hash identifier: ssoGHVYlUCZ3h534OfPMeuAb6d8jh4Kjl4eD/aX+7pg=
Subject key identifier: 36:43:45:52:FA:50:57:6A:38:D8:18:C2:18:82:CE:E5:88:93:57:97
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 08A8E48A
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/NkNFUvpQV2o42BjCGILO5YiTV5c.roa
Signing time: Thu 12 May 2022 07:51:02 +0000
ROA not before: Thu 12 May 2022 07:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145286282 (0x8a8e48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 12 07:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36434552fa50576a38d818c21882cee588935797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:2a:73:1f:b7:76:8f:43:d0:85:b1:af:d4:
65:ab:8e:d4:31:52:e9:9e:29:92:af:ef:e6:0d:d1:
34:b9:65:79:92:ca:8f:f6:90:46:d4:70:8b:98:9b:
0c:90:69:29:35:4e:53:23:b0:e7:54:fc:60:e9:38:
73:f5:79:6e:e5:f7:a0:79:09:1e:da:76:6c:9e:dc:
1a:e8:94:4a:33:5d:00:a2:75:e1:ba:20:96:66:de:
f2:3b:73:d1:fd:37:da:f0:d3:d0:b3:7b:98:8f:46:
4b:e7:cf:e9:54:1a:19:4a:ae:81:bc:a4:32:20:e9:
bd:02:0d:1a:3a:0d:41:f9:b6:0e:1b:75:fe:98:86:
7a:1d:27:c2:5f:8d:d0:28:71:1b:04:de:c1:6b:38:
8d:42:09:3b:73:f1:b9:42:75:4e:32:2d:1e:85:50:
46:2b:db:67:87:e9:15:88:2b:d5:e7:22:55:8a:63:
5b:e3:99:07:8b:4a:3f:a0:42:d9:fe:63:d6:07:e0:
ca:c8:45:a5:26:5d:e9:0e:76:2f:77:54:c3:51:5d:
7f:fc:dd:dd:8b:53:cb:a1:16:c1:91:e6:6c:2f:b6:
0c:cc:4b:cb:35:56:e9:2d:d3:0b:95:cc:2c:e6:b5:
eb:bf:2f:bf:98:f8:65:e5:24:8d:64:d7:61:f6:c4:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:45:52:FA:50:57:6A:38:D8:18:C2:18:82:CE:E5:88:93:57:97
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/NkNFUvpQV2o42BjCGILO5YiTV5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bd:26:aa:c0:bc:63:79:51:4f:42:ce:52:67:52:47:43:2d:
b0:43:dc:94:8b:d4:9e:b9:8a:ab:1a:45:35:0a:74:fd:2c:c9:
1e:aa:5d:82:c1:a1:6c:13:94:40:00:16:33:b0:4a:55:b3:79:
ec:a5:be:18:5a:d0:a5:8c:f8:0d:35:1c:26:67:ca:c6:66:5e:
5d:23:af:76:47:2a:6d:98:c7:aa:d1:c5:c3:42:c9:c4:30:ea:
e9:50:7f:57:de:4d:6f:ff:5b:9e:ec:9e:43:24:33:27:97:e2:
7d:85:27:e4:b3:78:06:f2:bb:7b:a2:5f:f1:5f:43:b6:4f:3d:
65:e4:a7:f6:e7:47:9d:82:20:58:d1:45:f0:88:51:47:a1:50:
f2:f5:db:72:23:6a:7a:dd:0d:71:d1:bd:2c:41:b3:73:a5:52:
14:82:16:ee:2e:e6:a2:d9:6e:51:b6:20:75:75:f6:fa:32:fd:
d9:9f:0a:59:98:36:dc:58:f6:54:38:6a:81:f5:d8:46:54:05:
66:a7:9f:83:3d:d9:0a:ff:a7:b6:80:0c:b6:ca:98:8b:2d:40:
c9:1d:da:13:12:c9:48:b6:05:51:9d:e3:16:07:e9:7b:ed:3e:
7d:78:03:db:3d:d3:47:a2:8d:fc:b9:89:36:51:f2:fa:87:ea:
2a:45:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net