Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/0noBCWdeq7uALFbcuiw_sobdtbc.roa
File: 0noBCWdeq7uALFbcuiw_sobdtbc.roa (raw, json)
Hash identifier: 9AUllFu08attdRtUq1Szj/ycZiPuz4w0xq4zS3d55dI=
Subject key identifier: D2:7A:01:09:67:5E:AB:BB:80:2C:56:DC:BA:2C:3F:B2:86:DD:B5:B7
Certificate issuer: /CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
Certificate serial: 024DE1
Authority key identifier: DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/0noBCWdeq7uALFbcuiw_sobdtbc.roa
Signing time: Thu 24 Mar 2022 11:36:45 +0000
ROA not before: Thu 24 Mar 2022 11:36:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205888
IP address blocks: 79.142.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151009 (0x24de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
Validity
Not Before: Mar 24 11:36:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d27a0109675eabbb802c56dcba2c3fb286ddb5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:38:56:5f:a7:0f:5e:4a:4c:d2:01:db:38:
15:c6:b6:b8:28:75:32:91:5e:6d:a7:a0:7f:6f:2d:
98:53:9c:88:b7:6e:aa:4e:2e:77:24:b0:9e:17:a1:
e5:a4:3e:2e:93:d0:77:49:08:d2:ca:c2:86:c5:77:
52:f1:43:49:b8:1d:53:37:cc:78:eb:ba:9a:be:70:
29:fa:6e:14:dc:d4:d6:f9:ee:bb:ee:05:a6:f6:bf:
f5:ab:3d:50:ad:8f:25:2d:70:63:80:84:76:89:84:
29:fd:9f:c6:5a:f3:60:0d:e4:82:f9:8b:4d:dc:46:
55:34:88:c2:34:a8:64:4e:49:0f:ee:b8:98:9e:30:
87:4a:28:f3:bb:90:5e:b8:9c:59:c3:b3:b5:a3:2a:
5b:b9:45:83:46:b6:94:13:72:ef:70:ef:92:40:87:
c2:88:3c:93:dc:20:41:62:a9:ee:0d:7c:96:91:9d:
48:57:77:23:fd:c9:3f:85:b4:14:f9:bd:23:23:5a:
28:b5:28:78:e4:57:64:54:8b:35:a8:46:85:4b:b0:
25:1c:8c:f0:ac:7e:ed:c2:00:68:a5:a5:ac:fe:af:
62:77:f7:62:fd:2d:bf:fd:06:63:d3:fb:d6:d5:ab:
39:9f:3c:61:a6:95:1e:e4:a0:5b:5b:2f:c0:6d:19:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:01:09:67:5E:AB:BB:80:2C:56:DC:BA:2C:3F:B2:86:DD:B5:B7
X509v3 Authority Key Identifier:
keyid:DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/0noBCWdeq7uALFbcuiw_sobdtbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.184.0/22
Signature Algorithm: sha256WithRSAEncryption
25:16:b0:33:72:eb:53:bd:3f:1b:37:74:5d:90:46:ee:b9:6f:
d9:ba:de:a4:dd:0a:86:a8:a0:1c:d6:c5:0d:29:b7:cd:53:32:
01:bc:fb:85:d1:90:d0:89:a2:ec:8b:29:bb:73:34:ae:90:84:
e3:95:dc:36:8e:b3:dc:01:56:b9:71:7f:4e:3d:80:0d:0b:c5:
92:1a:5d:46:71:12:f6:47:24:85:79:5c:3f:64:a9:71:01:a4:
4a:bf:55:52:a2:80:da:3c:ee:27:0e:98:9e:34:84:0a:f5:5b:
9c:8e:26:3a:93:99:67:d8:92:27:d9:cb:b6:46:bb:5f:23:50:
62:d2:28:b0:5e:f9:3e:bf:c9:60:82:d2:cf:cb:85:93:6f:05:
0a:ad:04:77:13:52:20:c6:1d:92:aa:4e:d3:31:2b:0d:b3:96:
cf:1d:09:2a:b4:6a:e5:1e:6c:da:77:55:5a:dc:96:c9:b5:15:
d2:ce:d6:9d:e9:e6:58:cc:e5:42:26:df:8d:31:b2:b4:0d:68:
34:31:a2:c9:7a:95:bb:a6:1a:8b:36:38:7d:c1:c3:cf:8e:07:
3f:16:bb:ae:0a:1a:1a:b3:ae:1f:c9:58:7b:4c:e6:f3:f5:39:
e5:9a:1b:3f:b9:d9:32:c4:a3:cd:0c:39:02:f4:99:63:86:bc:
a2:f4:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:00 2024 by rpki-client on console-ams.rpki-client.org