Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/CnxtK-eRaJLTbWRTibQg7bwwgFQ.roa
File: CnxtK-eRaJLTbWRTibQg7bwwgFQ.roa (raw, json)
Hash identifier: g04DoHvjy0czwla254dwIl5fQ3xkJRgF/OcQ0CCiQ24=
Subject key identifier: 0A:7C:6D:2B:E7:91:68:92:D3:6D:64:53:89:B4:20:ED:BC:30:80:54
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0185708CE49FD83203AF1E2F88DCFC66E0FB
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/CnxtK-eRaJLTbWRTibQg7bwwgFQ.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204019
IP address blocks: 185.107.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e4:9f:d8:32:03:af:1e:2f:88:dc:fc:66:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a7c6d2be7916892d36d645389b420edbc308054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:be:0a:b3:7a:fc:63:07:9d:7b:b6:12:f7:
b3:0b:f7:c2:73:4e:49:06:e1:52:6f:9b:13:a6:77:
ad:40:c0:60:70:1f:e0:73:b9:9a:b4:7e:28:f7:73:
d3:9e:07:8a:34:d3:6e:c8:66:0a:d3:e4:7d:c3:a2:
83:ae:76:7f:3d:46:6a:9a:58:0f:89:73:48:11:cf:
4e:da:ae:fc:c4:66:27:c8:85:58:a8:62:62:77:f8:
45:45:dd:b5:04:2f:40:db:50:86:7e:9c:8a:f1:cb:
cf:7a:04:f3:9f:a8:37:13:45:02:34:66:ca:67:b7:
b7:ce:ea:c2:7f:47:79:6c:9e:cb:49:bf:e2:ba:ad:
2b:e3:1f:34:af:c3:eb:d6:cb:67:e2:73:65:99:ce:
76:c1:8f:34:d3:87:fc:64:70:2d:98:4f:28:aa:b9:
41:c7:8a:3f:5f:e6:04:49:5d:b9:9c:9e:43:a4:7f:
5e:6b:a9:74:57:cd:e5:0d:38:34:d1:7a:ab:07:d0:
e9:46:fd:4e:27:6d:da:15:8c:93:ea:32:75:9b:41:
cd:71:34:94:6c:23:81:fd:b9:66:55:03:62:6f:ca:
04:73:df:c3:67:3c:fd:35:ca:08:b6:0a:51:f8:00:
b9:d7:fb:df:c7:f7:3e:80:58:ac:02:de:35:fc:0d:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:6D:2B:E7:91:68:92:D3:6D:64:53:89:B4:20:ED:BC:30:80:54
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/CnxtK-eRaJLTbWRTibQg7bwwgFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.66.0/24
Signature Algorithm: sha256WithRSAEncryption
85:87:26:d1:86:66:97:1f:aa:85:3e:69:b3:11:a8:d4:b5:a2:
3e:f0:99:3d:47:d0:19:6c:1c:82:87:b2:4a:f4:5f:60:99:d7:
f0:93:03:37:7c:94:18:30:f2:ec:97:ad:dd:75:1a:a2:d6:b1:
2c:01:1b:0b:92:4d:e0:7b:cd:8d:25:12:75:bb:31:0e:d4:fe:
2d:4d:23:fa:d0:d8:dd:38:d7:2b:7f:11:d8:6e:4f:d9:ee:cb:
ce:8c:32:6f:41:07:3f:cd:9f:ea:15:1e:25:25:36:2c:2c:21:
2a:7f:ac:61:24:5b:f3:a2:32:23:0a:50:2c:58:4d:51:65:6a:
79:ca:e7:b0:6d:f5:7a:f5:72:85:4b:b3:c9:43:c3:c5:99:49:
a2:ab:e1:24:4b:40:6a:b6:33:79:6c:de:06:6d:42:62:bb:16:
4d:b8:8c:c0:4e:35:80:1f:fa:17:71:64:12:72:7c:38:77:ef:
b0:be:01:2d:cc:49:e0:da:53:f6:bb:cd:78:05:41:d8:7b:56:
2f:10:94:6b:91:5e:d5:73:a3:8e:27:7c:5e:b9:3f:96:2c:b7:
2e:4c:21:96:d3:cc:f6:fd:47:91:c2:71:06:30:83:e2:78:3e:
0d:00:8b:73:29:a4:be:77:e4:0e:de:fb:58:33:87:82:3f:7f:
40:90:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:02 2023 by rpki-client on console.sobornost.net