Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/dSun0bLeYzCoajf17y0xK-pC8oM.roa
File: dSun0bLeYzCoajf17y0xK-pC8oM.roa (raw, json)
Hash identifier: zCFWrKojZganDZGYjfWMDb4xsxCj7D5D/VbAAVtDr5s=
Subject key identifier: 75:2B:A7:D1:B2:DE:63:30:A8:6A:37:F5:EF:2D:31:2B:EA:42:F2:83
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 01931BFE7057BFD45C0DCDE15840E748E683
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/dSun0bLeYzCoajf17y0xK-pC8oM.roa
Signing time: Mon 11 Nov 2024 16:11:19 +0000
ROA not before: Mon 11 Nov 2024 16:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3232
IP address blocks: 193.17.43.0/24 maxlen: 24
193.105.132.0/24 maxlen: 24
194.165.45.0/24 maxlen: 24
194.165.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:fe:70:57:bf:d4:5c:0d:cd:e1:58:40:e7:48:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Nov 11 16:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752ba7d1b2de6330a86a37f5ef2d312bea42f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:f4:f7:e7:92:0a:da:7f:18:74:28:7d:72:
b0:3e:04:6c:ab:19:63:1c:bd:32:e9:ad:8b:7e:a1:
5d:fd:ae:ab:6a:96:2b:ef:56:ae:00:c4:af:b8:b2:
d0:15:4a:cc:ba:c5:4e:fe:df:f1:8e:56:c7:67:4f:
c2:99:85:ce:85:ee:b1:3c:dd:8d:ca:85:c7:b7:5f:
09:c1:66:c8:66:28:5d:62:61:e3:6d:38:37:62:75:
da:cd:c4:91:c6:25:2d:09:2f:83:ed:65:e7:44:2f:
27:28:47:08:02:a7:e6:5d:02:5c:42:c3:8b:27:23:
db:3e:5a:99:57:91:6b:59:fe:80:c0:d7:0b:11:25:
7b:d7:13:21:3a:02:09:3b:c7:ee:c6:6a:f2:6c:b9:
a9:ac:e3:b3:ce:ed:6f:57:61:98:c6:7e:94:6d:78:
37:27:26:c1:dc:fa:a4:3e:e7:b8:0c:bf:50:63:6c:
a2:85:dd:a0:be:fb:9c:6e:ac:8c:0d:d5:b4:73:8e:
09:00:3d:b9:70:fa:b8:97:b1:2f:ba:82:fd:6b:a9:
07:50:a0:8e:38:18:38:94:d0:a1:f1:01:bc:32:e8:
8c:30:f0:60:a5:b5:73:36:c8:36:a6:20:1f:fa:48:
db:a3:52:77:7b:59:03:81:e5:02:7c:84:88:4e:a1:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:A7:D1:B2:DE:63:30:A8:6A:37:F5:EF:2D:31:2B:EA:42:F2:83
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/dSun0bLeYzCoajf17y0xK-pC8oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.43.0/24
193.105.132.0/24
194.165.45.0/24
194.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f0:d5:a5:5a:ce:79:be:75:e9:0a:ed:d2:76:ca:cb:ff:c7:
2f:31:be:f7:68:3e:99:31:6f:0c:d3:b2:f1:b5:3d:06:c7:21:
4e:4a:fb:21:4c:e6:07:1c:26:5e:32:9a:9a:a8:29:4b:e4:c7:
bc:d4:ed:d9:fc:f6:bc:6a:c3:f9:06:1d:3a:3f:3e:43:69:71:
b3:bd:62:a8:1d:3c:1e:d1:b9:e2:08:4a:5d:79:5d:48:e4:bb:
82:90:5d:0b:0a:d5:fa:3a:a9:ad:9e:b8:42:b4:fc:af:ce:c7:
50:04:45:e3:68:5a:2b:1c:47:ea:25:7b:72:88:0e:31:de:7a:
e8:17:9e:8c:ea:05:ba:2f:ad:a4:d2:f3:9c:ac:f2:fd:54:8e:
1f:44:9a:2e:3d:47:d5:82:0b:9a:8c:f1:14:d5:c7:02:97:41:
09:97:2c:c1:90:69:98:59:d1:91:bc:8d:b8:21:c8:0d:2a:5b:
f0:fb:24:c7:58:90:e0:1d:f9:fa:df:1d:d4:39:79:fd:8f:44:
0b:3a:87:d1:9c:71:8e:8e:00:7b:69:45:29:48:78:b5:76:f4:
a0:a7:4b:4e:24:0d:43:6e:1c:e4:8d:f7:e8:74:31:f6:de:32:
66:95:1d:fd:32:6b:6d:af:09:c3:2c:c9:a5:e3:cf:ea:e4:9c:
e3:88:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net