Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/9WgRkN2ksLVyB-L0_1QZSiXnpQM.roa
File: 9WgRkN2ksLVyB-L0_1QZSiXnpQM.roa (raw, json)
Hash identifier: NdSJvI428vXYNG7HSZ5y+3y+XrjC5OodbweQKP1JT8w=
Subject key identifier: F5:68:11:90:DD:A4:B0:B5:72:07:E2:F4:FF:54:19:4A:25:E7:A5:03
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 018CC3B6F4D9F822BFEE88E9F1FB876F0984
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/9WgRkN2ksLVyB-L0_1QZSiXnpQM.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211678
IP address blocks: 193.239.202.0/24 maxlen: 24
5.145.178.0/23 maxlen: 23
2a10:a8c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f4:d9:f8:22:bf:ee:88:e9:f1:fb:87:6f:09:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5681190dda4b0b57207e2f4ff54194a25e7a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:e1:cc:6f:0e:60:5a:a2:64:07:d8:7f:f6:
8c:55:4f:e1:45:bf:a3:7a:ea:d7:2c:b3:1c:ec:07:
87:39:10:5b:57:85:e6:bf:e4:b5:e4:15:c7:c7:8d:
01:4f:9e:e6:10:0d:89:cb:da:37:95:7f:ff:49:28:
ad:3e:8b:bd:d5:9f:5f:96:ef:97:74:ad:f3:0c:2c:
9b:c6:b8:72:5d:7d:63:c0:b1:e6:da:f7:4e:c3:3f:
14:98:8d:b8:5f:b6:dc:2b:5e:3f:88:77:f0:09:8f:
25:69:83:f6:4b:08:1b:73:e5:36:1d:6d:ff:4f:cd:
87:fa:12:f1:86:88:ed:0c:fc:60:41:4f:21:7c:2d:
48:91:ba:20:ec:cc:5e:e3:6c:95:dc:96:21:df:5e:
80:f0:8c:b1:b5:af:be:e3:57:ab:7f:00:49:46:89:
e5:8a:37:03:3c:2c:d2:36:f9:ac:55:6d:67:f1:01:
1a:d6:f7:80:58:f4:1e:58:2a:04:e0:58:3c:84:ae:
5a:e3:6a:67:cf:c2:43:aa:de:ca:92:00:94:f2:e3:
34:c8:b8:54:fb:d0:5d:3f:bc:36:88:94:b5:43:4f:
61:91:ea:ff:68:1d:ba:bf:d7:76:fd:ff:8d:97:ec:
97:f1:61:d4:bc:b2:1f:77:af:c9:f0:44:5f:ad:47:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:11:90:DD:A4:B0:B5:72:07:E2:F4:FF:54:19:4A:25:E7:A5:03
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/9WgRkN2ksLVyB-L0_1QZSiXnpQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.178.0/23
193.239.202.0/24
IPv6:
2a10:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:75:6f:ef:d5:dc:20:30:b9:69:32:4a:a6:ca:c4:c6:08:38:
1e:70:32:7e:66:a7:a0:ae:42:9d:c5:8a:10:b2:7b:52:ac:45:
4c:ee:86:1b:30:9d:2c:e4:4d:fe:a8:49:e7:64:eb:49:1d:57:
ce:05:da:9e:4a:70:4e:c6:b1:51:d8:01:73:a7:f9:f9:0b:6d:
75:29:0a:7e:29:65:23:36:f7:cb:d0:30:15:0f:96:4d:eb:48:
c3:69:59:75:99:78:ca:5d:a5:f9:0e:ea:db:9a:6e:43:fe:22:
10:b7:8c:db:8e:cd:00:c7:4f:8c:7a:73:1e:a0:02:08:8b:11:
81:23:fd:f0:07:14:3f:a0:85:3c:5a:7d:ba:19:61:74:1a:ba:
8a:15:1e:e7:80:53:c8:69:d5:51:a5:66:c1:0c:3a:ed:36:3d:
3f:e8:f9:6b:4e:1a:a9:f2:60:78:d2:50:b4:c6:f2:67:3b:ac:
4b:65:fd:8c:38:f2:90:8c:5d:8a:c3:3a:c6:32:66:1f:5b:61:
24:c0:80:20:f6:54:0c:29:59:96:88:c4:a7:23:93:02:f2:df:
15:82:54:ff:10:9e:54:dc:63:44:ec:14:6d:53:72:32:73:18:
5f:43:7d:7d:a8:13:91:e4:c4:b1:89:a7:b4:f0:41:dc:9b:6c:
19:1e:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:19 2024 by rpki-client on console.sobornost.net