Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/LFl4urN5hIEYFSDbLN6_uxXZ1Mg.roa
File: LFl4urN5hIEYFSDbLN6_uxXZ1Mg.roa (raw, json)
Hash identifier: v/CYhs8H7bQSmSUreFsZusMDP/LlrLKUOLm23wm1njk=
Subject key identifier: 2C:59:78:BA:B3:79:84:81:18:15:20:DB:2C:DE:BF:BB:15:D9:D4:C8
Certificate issuer: /CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
Certificate serial: 483876
Authority key identifier: E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/LFl4urN5hIEYFSDbLN6_uxXZ1Mg.roa
Signing time: Sat 01 Jan 2022 02:51:05 +0000
ROA not before: Sat 01 Jan 2022 02:51:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.234.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4733046 (0x483876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
Validity
Not Before: Jan 1 02:51:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c5978bab3798481181520db2cdebfbb15d9d4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:89:42:12:03:93:30:d0:7c:d1:50:a7:85:
5d:d5:d5:5a:04:10:45:82:b1:36:44:4f:27:10:0e:
f0:fd:8a:73:85:30:2a:45:98:a5:06:c0:0e:0a:77:
43:3a:8a:f5:79:76:8a:8c:48:60:0b:3b:80:24:32:
9b:49:a6:a9:cf:a3:af:49:7e:8f:6c:f5:9f:1c:19:
ca:dd:a1:a7:95:6f:50:e3:8a:12:e6:5a:93:6a:0e:
11:df:3b:3b:37:d2:7a:9f:40:69:ec:1b:83:5b:12:
4b:a4:c8:78:59:61:e8:c4:1e:bd:3b:15:aa:f6:bb:
b2:16:27:61:f7:ff:0e:74:e7:cc:7a:5e:fe:40:92:
1c:0a:aa:bb:c8:bc:90:ea:c8:81:87:7b:a2:1b:16:
6b:35:e2:53:8e:4c:14:fa:67:eb:a0:11:95:58:44:
3e:8e:50:61:30:19:b2:53:18:0e:5c:5a:4f:5e:e3:
c7:60:39:7c:91:af:2a:e7:02:a2:92:d4:70:20:37:
5f:69:31:8f:66:37:a0:90:15:f8:24:b9:c1:c6:c3:
d6:44:7a:08:24:a5:e8:3b:fd:40:56:22:e8:aa:d4:
b0:34:ad:5b:5a:66:15:44:bd:56:57:dd:b0:87:30:
7e:12:25:d3:3e:12:7e:8a:a0:7d:b9:92:b1:53:f0:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:78:BA:B3:79:84:81:18:15:20:DB:2C:DE:BF:BB:15:D9:D4:C8
X509v3 Authority Key Identifier:
keyid:E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/LFl4urN5hIEYFSDbLN6_uxXZ1Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.219.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:16:13:ba:65:87:56:01:fb:32:bb:22:d9:fe:7c:1c:ee:
f3:8f:fd:86:50:3b:30:b8:18:b1:43:24:aa:85:79:ff:60:af:
c5:69:79:38:0d:73:a0:af:3f:8b:7d:c8:f8:de:89:21:f0:7c:
ad:f1:fd:c1:83:99:cb:e7:a8:49:c0:7a:6a:54:cc:66:51:1a:
d6:29:b2:89:03:50:41:95:1d:02:36:f7:c6:a7:0d:13:61:9e:
d0:c6:da:43:3c:aa:d0:2c:4b:d6:4d:26:f2:74:1d:47:fd:bc:
2e:d3:3e:82:d1:45:b7:07:f7:52:e5:1a:40:4f:9e:f3:e8:a6:
d5:a0:52:86:98:b6:0c:28:55:1c:98:95:ba:e8:e3:2c:c1:e8:
b9:44:77:de:c3:23:67:98:97:24:d6:13:ad:85:da:13:2e:81:
06:fb:97:f7:0c:8a:cc:c4:41:97:60:92:12:93:3b:d9:1f:dd:
42:36:48:27:9f:97:d7:82:25:18:dc:7f:60:62:9c:72:8a:d4:
83:d3:d8:3a:36:1d:af:69:4e:44:64:0b:10:65:cb:30:93:44:
31:9c:c0:65:bc:5c:a7:80:20:d2:97:c2:36:fb:e5:d2:11:4a:
c6:73:e6:c0:bc:63:eb:ad:b5:50:b9:e2:bf:19:fc:be:f0:65:
6b:94:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net