Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5FlmXxpuU4DJkrkEErtsVh5yJSs.roa
File: 5FlmXxpuU4DJkrkEErtsVh5yJSs.roa (raw, json)
Hash identifier: /c1TS80UtrPZvhh+vwexRQPkkMTrN3p9N9yd8CfeEoM=
Subject key identifier: E4:59:66:5F:1A:6E:53:80:C9:92:B9:04:12:BB:6C:56:1E:72:25:2B
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019395B83F455FD4457C6654F0A88D0649F5
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5FlmXxpuU4DJkrkEErtsVh5yJSs.roa
Signing time: Thu 05 Dec 2024 07:28:20 +0000
ROA not before: Thu 05 Dec 2024 07:28:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204779
IP address blocks: 46.254.212.0/22 maxlen: 22
185.185.168.0/22 maxlen: 22
2a0b:5c80::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:b8:3f:45:5f:d4:45:7c:66:54:f0:a8:8d:06:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Dec 5 07:28:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e459665f1a6e5380c992b90412bb6c561e72252b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:91:c9:fd:3a:e4:85:ff:ef:3c:bb:59:55:
fc:34:1a:76:36:54:2f:5e:35:bc:f1:d7:07:e1:6e:
a4:fd:ca:ac:ad:31:25:b8:15:c5:e0:a2:5f:c3:71:
4e:4d:38:17:d5:7a:0a:c6:4f:3b:8d:70:f6:75:57:
e3:e4:6b:3e:74:95:29:44:ce:6f:5b:bb:75:75:c0:
df:03:3f:0e:46:76:e4:0e:f3:50:b3:ad:09:83:51:
55:6b:cc:e3:e9:bf:9d:25:08:4f:bc:5e:5d:a2:f8:
7c:d2:56:97:0a:7c:c3:86:ca:f9:39:5e:64:d6:b9:
b3:ef:ee:29:04:be:7a:82:1d:fb:c9:f8:88:28:a5:
25:2c:0a:54:df:56:ad:dc:32:d3:38:77:67:ea:4d:
95:b8:9d:8e:c4:8f:21:66:0c:23:72:8b:14:3f:3d:
0a:88:a9:d4:d9:9e:4c:e6:80:da:39:62:1a:74:33:
8a:e9:be:51:77:4a:eb:98:56:f0:bc:54:a4:15:ca:
d1:e6:38:60:ac:02:da:77:96:95:0a:1a:1f:ce:14:
45:59:2b:11:0a:a2:0b:3d:ce:a6:9e:16:0d:89:3b:
00:c9:af:0b:e1:b0:60:d5:a2:c9:a2:e5:58:da:91:
5c:3b:30:ac:a4:37:c1:57:0b:7e:69:31:61:e3:13:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:66:5F:1A:6E:53:80:C9:92:B9:04:12:BB:6C:56:1E:72:25:2B
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5FlmXxpuU4DJkrkEErtsVh5yJSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.212.0/22
185.185.168.0/22
IPv6:
2a0b:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
3c:4d:35:99:af:ae:ee:8d:79:c5:be:bc:43:b4:fa:ab:49:18:
96:2c:d9:a4:c5:b7:53:da:dd:17:5b:ac:8a:7e:e0:00:e3:26:
fd:7f:92:8f:f8:32:e4:01:13:45:39:a1:1e:22:ca:4f:f2:93:
bc:04:02:96:a4:97:00:32:dd:57:5e:3d:79:12:a2:62:c5:7b:
9e:42:0b:9e:34:a0:25:ea:52:e3:6e:29:10:a3:b1:01:5c:2c:
48:2a:25:03:94:08:b9:02:be:3f:19:bd:62:90:45:bc:04:50:
8b:8e:1e:3c:12:16:a0:6d:db:a9:82:43:d3:63:7f:63:55:cb:
a4:8e:11:46:82:f5:cc:41:ce:c5:99:e4:6a:06:4b:cf:97:2c:
c5:92:16:41:16:d3:29:b7:a9:06:c6:04:c7:1d:0b:80:86:73:
0a:3e:6e:29:49:ec:4a:ae:28:90:bd:6f:8c:cc:4f:2d:da:bd:
c1:1b:41:00:37:ff:ee:0a:32:be:5a:23:ce:f5:a2:f9:5e:66:
8e:1e:22:8f:e7:b5:68:4a:7f:f8:63:29:67:4a:65:3e:fd:62:
c7:86:53:84:33:b3:4b:32:9b:83:76:b4:6d:8f:4e:84:cb:27:
05:30:07:13:e4:43:bd:7c:ea:ec:7b:4e:57:8c:85:0f:0a:15:
60:7a:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net