Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/sRCAB3fTZmH9MfT9i7-TmAj78ww.roa
File: sRCAB3fTZmH9MfT9i7-TmAj78ww.roa (raw, json)
Hash identifier: KpASgdDh+rqlXfmzJr0GQJqmi/c2rsrPDNyS89lm2xs=
Subject key identifier: B1:10:80:07:77:D3:66:61:FD:31:F4:FD:8B:BF:93:98:08:FB:F3:0C
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142FAD8BBB06B3F15DBA77C3EBFDB15
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/sRCAB3fTZmH9MfT9i7-TmAj78ww.roa
Signing time: Mon 02 Jan 2023 06:54:52 +0000
ROA not before: Mon 02 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 85.209.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:fa:d8:bb:b0:6b:3f:15:db:a7:7c:3e:bf:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b110800777d36661fd31f4fd8bbf939808fbf30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:a6:2c:25:93:9b:09:f9:61:a6:70:54:9a:
c1:86:e3:13:04:0a:64:cb:f1:7a:1e:16:c0:bc:19:
3f:0d:e0:fd:78:4c:59:9e:cb:3e:85:25:3e:85:c4:
95:93:e5:56:d8:c5:c2:0f:b4:14:73:cb:3e:5c:3b:
df:fa:de:7b:5e:c2:9b:8a:48:91:ae:ef:47:1e:d1:
e6:fa:e1:87:c9:3d:76:f2:d2:2a:90:31:d5:9f:f0:
04:e0:61:ce:33:31:e1:45:6d:f4:08:e7:1b:34:45:
f4:a9:78:61:66:e3:24:97:2d:53:bc:4f:5f:7e:be:
52:19:d3:8d:95:1a:fb:42:0d:cd:38:66:bd:42:3b:
44:4d:38:8e:e4:c9:ea:48:d7:69:2e:5f:ec:85:f4:
1a:80:8a:b0:56:25:15:4a:57:a5:a3:67:ff:c4:fb:
2b:8a:da:e9:cd:91:29:34:ce:2b:70:31:01:f7:14:
a3:fc:b9:fb:0d:ae:ac:43:2f:06:f6:dd:9f:92:90:
9b:31:e9:32:70:5c:ae:01:3b:21:77:7b:1b:fd:eb:
c1:68:ca:a2:67:3e:cd:83:68:4a:a6:10:06:39:76:
d6:86:5e:d3:8f:f3:5f:e3:79:63:74:3e:3b:a7:f4:
6b:d0:df:72:b9:0c:9d:f4:9b:c2:f4:62:47:22:44:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:80:07:77:D3:66:61:FD:31:F4:FD:8B:BF:93:98:08:FB:F3:0C
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/sRCAB3fTZmH9MfT9i7-TmAj78ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5e:95:4f:97:75:be:80:22:66:1e:9a:45:39:05:75:cf:9f:
54:f1:ef:c6:c5:ea:91:12:66:6d:2e:71:d2:e8:9b:dc:63:c4:
a8:ed:4d:ca:21:41:0e:8d:ff:6b:16:89:e2:77:44:c9:7a:a1:
b7:60:77:f4:34:9e:2a:82:e1:bf:15:f4:3a:d4:b8:02:f7:2b:
36:46:3a:21:4a:95:2e:9b:c8:56:f7:c8:8c:fe:fc:bc:09:0c:
84:01:b2:d7:8d:94:d9:3c:6d:16:7c:e9:0e:39:90:98:22:15:
a9:3f:62:bf:e2:39:e9:71:e9:11:2d:48:d2:9d:16:88:9b:dd:
d8:9e:33:d1:51:75:47:7f:3f:ba:fa:54:67:f5:62:a7:c1:47:
6d:ee:33:64:8a:02:48:4f:ba:63:52:3c:da:71:ae:e6:d5:9a:
bf:a3:42:23:ba:34:6b:8e:80:cc:fb:dd:bb:76:7c:53:cd:20:
5d:59:c2:72:49:d2:84:7b:52:f4:b6:41:40:81:ae:de:e5:6a:
4c:5c:f0:46:ee:69:8b:3a:b9:67:96:55:fa:28:9e:fb:f2:7c:
48:b6:8d:9a:63:f4:54:41:6f:ab:ba:4d:a7:89:fe:37:12:3f:
e4:6b:1d:01:64:07:a9:ec:ea:47:a5:26:9a:a1:dc:f6:bd:37:
69:ed:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net