Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/5O_niBJomNM-_Xz4Ucv2waL_ktE.roa
File: 5O_niBJomNM-_Xz4Ucv2waL_ktE.roa (raw, json)
Hash identifier: QRO9gbMoIivAS1pG/LLFoBJuYDJvTl1Bvrs5/XMLYP8=
Subject key identifier: E4:EF:E7:88:12:68:98:D3:3E:FD:7C:F8:51:CB:F6:C1:A2:FF:92:D1
Certificate issuer: /CN=c27ffe63d667c479cf34dcc083bb7d21fbaca9ba
Certificate serial: 01856E2F7AEAEB28D00EAAACCA5C5C7B6F81
Authority key identifier: C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/5O_niBJomNM-_Xz4Ucv2waL_ktE.roa
Signing time: Sun 01 Jan 2023 16:34:43 +0000
ROA not before: Sun 01 Jan 2023 16:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35132
IP address blocks: 109.235.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:7a:ea:eb:28:d0:0e:aa:ac:ca:5c:5c:7b:6f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27ffe63d667c479cf34dcc083bb7d21fbaca9ba
Validity
Not Before: Jan 1 16:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4efe788126898d33efd7cf851cbf6c1a2ff92d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:23:70:02:82:b3:57:ef:b1:c5:cc:89:83:
ed:1c:c5:32:7e:a2:f6:cc:3b:91:4a:a5:8c:74:0b:
ca:12:24:1d:e3:0d:3e:eb:b6:a7:44:0f:d1:c7:ad:
72:eb:4b:fb:9d:56:e0:a1:8d:ec:a3:bb:be:e7:60:
aa:65:2a:8f:d9:37:ef:81:d5:f6:71:77:6e:d5:b4:
4c:c1:92:7a:66:a0:36:c1:bb:d4:58:8d:88:42:9c:
d2:f8:33:a4:6f:41:a3:41:ac:8e:8c:89:9e:dd:3a:
af:dd:fb:dc:9a:fe:c1:6b:e9:60:47:6e:0f:84:3d:
74:99:fd:36:28:78:0a:4d:ef:47:0e:35:21:0d:eb:
d9:ce:ed:4e:11:ad:58:f7:9a:fe:60:08:46:51:57:
c2:7f:ae:f5:22:5a:d7:33:86:4f:66:2a:c1:58:7a:
44:25:0c:b8:29:53:f7:a1:cc:42:5b:73:55:72:28:
f9:81:d1:7a:c2:13:07:9c:36:96:53:e0:e5:d8:1c:
41:1d:e7:72:19:87:1d:31:6d:8d:d4:87:96:6b:a8:
b1:5c:52:ad:3d:6c:19:c4:08:76:cf:d9:0f:f7:24:
cd:2e:c8:aa:37:66:a0:c4:ff:9b:d8:af:f7:ed:e3:
45:f0:9d:38:7a:f6:da:8d:fb:53:9e:e8:c1:7f:2d:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:E7:88:12:68:98:D3:3E:FD:7C:F8:51:CB:F6:C1:A2:FF:92:D1
X509v3 Authority Key Identifier:
keyid:C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/5O_niBJomNM-_Xz4Ucv2waL_ktE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
93:47:d8:7a:7c:5b:cc:c9:f3:9e:fa:42:9e:fb:f3:6c:b8:cf:
79:8d:c1:dc:4f:af:85:4f:4a:91:39:4c:84:3a:94:2b:15:51:
64:d7:d4:15:b2:fb:bf:e2:e0:ef:05:1b:ab:8b:b3:de:79:d2:
fd:cd:1a:a7:b6:f2:31:2c:0a:ab:02:85:05:c2:07:5e:dc:2e:
e5:2b:5d:6d:83:a0:dc:d1:85:03:3f:8e:d6:38:1d:5b:17:1b:
16:99:ce:79:26:d9:eb:bc:fc:e7:f6:e4:c5:6b:06:e7:aa:0f:
3b:16:49:e6:a2:29:a1:48:6a:9d:c8:79:e0:09:f7:28:3a:9c:
8f:f8:0e:01:95:87:c9:9a:e6:6f:75:12:c4:a4:24:2e:f0:58:
ca:8c:f2:fc:5e:1c:d3:0f:34:ea:5d:ab:83:47:e8:d9:4e:fd:
15:f0:21:e9:61:f8:a1:6a:e4:84:d8:c2:e7:28:a4:74:b6:24:
11:8a:3a:3a:39:06:b1:b2:ad:af:36:4f:24:2e:14:57:5b:f0:
82:ea:65:43:30:c9:0c:31:d5:0a:50:12:a3:7f:ae:a9:ee:59:
19:4a:e0:c8:fc:c5:1c:f1:16:85:e8:ef:0a:c6:d6:91:bb:93:
84:31:bc:ac:87:95:3a:af:21:28:aa:29:4b:2b:2a:19:72:e2:
59:51:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net