Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/y4XsnrHzuO82HAQ-MVMlPSRcZn0.roa
File: y4XsnrHzuO82HAQ-MVMlPSRcZn0.roa (raw, json)
Hash identifier: EfMCiz298MhgTtcUMr5NICO4E11f8lV5XKxcGo+KgbM=
Subject key identifier: CB:85:EC:9E:B1:F3:B8:EF:36:1C:04:3E:31:53:25:3D:24:5C:66:7D
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 08479FE2
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/y4XsnrHzuO82HAQ-MVMlPSRcZn0.roa
Signing time: Wed 30 Mar 2022 11:03:55 +0000
ROA not before: Wed 30 Mar 2022 11:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138911714 (0x8479fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 30 11:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb85ec9eb1f3b8ef361c043e3153253d245c667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:27:88:f4:f8:a0:f8:8b:eb:94:81:58:92:
c3:5f:19:d3:7f:e1:72:fa:9b:a1:7d:f0:41:04:7d:
30:0c:2f:8c:5e:ce:d6:d1:ba:d1:7e:f8:ec:7b:53:
b8:4f:e5:b1:07:ea:dd:53:62:71:ea:5f:56:77:53:
2c:89:fc:b7:4b:94:0e:9f:6a:4f:6f:b5:6f:9f:12:
ee:06:24:6b:60:17:27:53:50:ad:04:7e:44:5f:c6:
90:eb:02:f0:2a:f2:e0:69:d4:23:d6:40:37:45:f2:
89:2a:30:02:67:83:25:d0:bd:41:55:23:31:10:c9:
91:3f:ad:77:72:38:72:da:e4:e6:07:72:f8:19:8b:
b9:1b:45:d4:b5:8e:2e:85:45:a4:27:c9:b2:5e:9b:
63:c1:26:75:5f:2b:2f:cb:1c:aa:c7:bc:9e:e8:fa:
cb:c9:cf:d2:41:f6:2e:fd:d2:59:20:a5:ef:7c:66:
0e:68:0f:dd:57:29:8f:c9:33:72:af:be:1d:b8:0a:
76:4e:5d:ee:97:54:5c:0c:04:e5:30:5a:8e:bf:2b:
94:c3:0f:93:06:4e:84:5a:43:33:cd:22:cf:94:f7:
09:74:c6:80:e9:ef:9f:80:10:a0:e3:76:3b:5f:aa:
da:ef:3e:99:cf:da:f9:6d:35:70:7b:81:5b:ab:88:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:EC:9E:B1:F3:B8:EF:36:1C:04:3E:31:53:25:3D:24:5C:66:7D
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/y4XsnrHzuO82HAQ-MVMlPSRcZn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:07:f2:33:5b:c3:8b:a4:1e:50:a5:b5:d7:33:ab:47:34:c9:
0d:bc:85:91:6e:cb:7c:8e:00:13:a3:a1:32:52:43:38:21:77:
c0:bc:93:22:79:4a:c4:d3:82:6d:17:c2:2f:96:6e:52:6b:78:
fc:a3:44:4d:be:05:43:43:17:57:32:6b:ae:84:c0:82:f8:88:
01:90:54:07:06:ff:2d:8b:0f:d3:3b:fb:fd:f9:a3:0d:20:8e:
22:01:c5:1d:81:5f:9a:55:be:17:1f:e5:4a:ab:2e:67:56:b8:
23:b9:76:e7:01:f8:7a:f0:bf:de:3b:9b:37:1f:9f:ba:55:cf:
64:98:dd:bd:76:a6:07:33:c9:b6:13:c2:d2:01:e6:5f:6e:45:
d8:e9:34:28:b4:4c:92:52:2a:b0:8f:ef:1f:ae:a1:cb:2d:c5:
ca:5a:ab:28:55:d4:f7:f5:71:76:f8:c9:78:fd:c4:d7:6b:96:
72:f8:79:0e:cc:43:ee:ce:d6:0b:6c:fc:52:a6:64:cd:2d:b1:
61:31:77:76:6f:6f:0d:77:25:f7:85:53:80:fd:72:86:f4:84:
ab:e8:cb:c2:ca:2a:96:17:3e:f7:6b:87:0f:6c:bf:82:f3:1e:
1d:bf:dc:bc:15:35:63:3d:ae:ab:1c:ec:00:ea:94:7d:55:f3:
ee:3f:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net