Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa
File: LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa (raw, json)
Hash identifier: 9n/67vL5oEzQr0e0QpRPNiUeFthS39iPOINayeok1Qo=
Subject key identifier: 2C:0A:04:2A:18:77:41:D5:79:63:DB:C0:77:E4:87:C5:1C:FD:41:B3
Certificate issuer: /CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
Certificate serial: 01856C65DA92CAA70AE113031D4CEAEA80EF
Authority key identifier: EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa
Signing time: Sun 01 Jan 2023 08:14:52 +0000
ROA not before: Sun 01 Jan 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200547
IP address blocks: 185.236.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:da:92:ca:a7:0a:e1:13:03:1d:4c:ea:ea:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
Validity
Not Before: Jan 1 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c0a042a187741d57963dbc077e487c51cfd41b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:93:de:c4:6c:0c:e1:e4:db:1c:f7:ed:e5:
54:37:a4:f0:9a:1d:52:18:11:2c:b3:45:8b:ed:84:
43:e1:77:c2:80:59:a2:7a:cc:4e:24:45:bf:31:d7:
17:b5:e3:63:81:9d:4d:60:4b:fb:d5:81:63:92:b3:
74:5a:f3:24:cc:16:e0:61:bc:39:a5:df:bf:96:09:
6e:2f:82:b9:88:ec:10:b0:40:f2:81:91:14:9b:12:
98:3f:23:8d:f2:d3:e8:6e:e6:85:9e:8d:eb:ee:3a:
56:71:cc:59:58:fd:b7:e6:ab:53:25:dd:2f:79:d5:
51:00:e3:a9:65:c2:2c:d8:43:03:d0:e5:fb:a0:de:
69:4f:df:57:0d:88:c6:78:f6:7e:84:8c:b8:2c:a4:
43:d4:e9:07:c3:13:24:19:aa:70:3f:b2:58:78:9c:
19:b4:15:25:4e:52:27:c6:07:75:0e:c4:4a:c1:6e:
79:20:4a:26:1d:12:5e:6c:e0:7d:0d:12:4e:77:0b:
78:5b:31:ef:e5:a7:8b:ce:b6:ec:f7:53:e8:a0:a5:
40:b4:7b:b7:15:fd:b0:82:6b:f5:2a:36:e1:d5:6d:
f6:b4:a6:d1:4d:71:d6:c2:6e:cc:2b:1f:51:95:40:
56:0c:94:c2:74:15:78:2e:42:80:47:05:4a:e3:d8:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:04:2A:18:77:41:D5:79:63:DB:C0:77:E4:87:C5:1C:FD:41:B3
X509v3 Authority Key Identifier:
keyid:EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.52.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f5:55:d3:ba:24:75:d0:df:db:e8:dc:05:a2:a0:49:ee:e9:
0d:9f:c3:ac:1e:c2:cc:50:fc:bb:57:ed:eb:f5:f9:9c:66:41:
7d:eb:89:57:07:4e:f7:86:33:23:4f:77:f2:6f:d2:5a:69:3d:
82:d9:6a:8a:02:e5:ab:7f:e3:45:76:12:02:90:8e:3b:5f:5a:
72:f4:0f:c8:f5:4d:8c:e7:8d:e5:59:02:bf:d3:a6:f8:f0:1d:
05:e2:d0:54:85:38:e9:5a:94:85:43:f7:6e:2f:63:54:b1:24:
61:4c:ef:29:53:ce:e2:54:33:ae:47:7c:80:6f:d6:3e:c5:ff:
cb:92:c5:2c:b0:5a:2f:b2:5b:75:03:03:61:c1:a4:60:46:21:
67:38:2c:8d:26:27:d2:31:dc:2a:86:59:c8:63:99:93:c4:59:
58:ab:44:5c:5c:99:de:12:91:cb:6b:fe:94:9f:a3:be:f1:04:
c5:66:87:a2:06:93:65:d4:d4:f6:54:23:f4:7b:ea:4f:ff:47:
f3:d7:72:f6:1e:2b:54:32:83:b2:5b:67:42:60:f5:97:bf:ad:
2e:bd:40:37:bb:3b:80:d8:67:36:03:58:9c:c1:60:d1:fd:a4:
c9:88:6b:09:3b:33:84:94:6c:7e:b1:54:10:8d:5b:d0:4a:a8:
43:a6:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net