Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/STT56LAMiqNNiEivh42EIw7rHeg.roa
File: STT56LAMiqNNiEivh42EIw7rHeg.roa (raw, json)
Hash identifier: S6McwkSso4ObW0sFeKPenj55E9AWl8+JvVOI1ap6sLg=
Subject key identifier: 49:34:F9:E8:B0:0C:8A:A3:4D:88:48:AF:87:8D:84:23:0E:EB:1D:E8
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 018CC7956AEB563AA89F2F15CDDFFB8DDD26
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/STT56LAMiqNNiEivh42EIw7rHeg.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204958
IP address blocks: 152.89.169.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6a:eb:56:3a:a8:9f:2f:15:cd:df:fb:8d:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4934f9e8b00c8aa34d8848af878d84230eeb1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:7b:7f:6f:ce:c9:c3:08:1b:31:e2:a3:e7:
81:5e:36:26:7c:2a:7a:e4:99:da:20:d3:a8:3e:7e:
82:33:3c:cd:a1:97:6a:b3:3b:7b:9c:2b:b5:31:3e:
29:66:aa:b2:ba:b9:63:70:51:a4:ed:6b:2b:74:0b:
6c:3a:82:88:00:12:ec:7f:60:2f:ca:e6:b6:21:f5:
60:70:c2:e4:9c:02:f4:0b:32:27:34:40:ee:c9:fd:
49:23:a1:1f:73:be:74:4b:6d:4e:26:3d:64:e4:2a:
e0:f0:cd:01:8b:dd:f7:c7:22:e8:05:e0:0a:6f:29:
f8:34:9d:ec:2e:2f:6e:96:dd:0e:56:e4:f5:61:bb:
4c:22:de:76:a5:49:1b:3b:76:c0:7c:5b:1c:b3:98:
55:3b:22:fe:9b:29:4a:40:01:8e:c5:12:3c:f9:c3:
67:3b:4d:91:34:f4:1f:e1:cd:a7:5d:4f:ca:ee:09:
7d:64:6d:0c:d4:4f:74:2b:62:5a:69:81:e2:d3:92:
ba:de:b8:f2:fe:5e:6c:b7:ae:17:3b:a6:85:8f:fa:
1f:ed:73:f3:0a:2e:d7:16:d3:27:1e:fd:af:3d:8f:
13:15:c2:51:d6:97:b3:2c:2e:9e:c5:e0:87:47:1a:
c1:89:89:32:20:02:b5:8d:e5:d1:3c:20:9a:85:4a:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:F9:E8:B0:0C:8A:A3:4D:88:48:AF:87:8D:84:23:0E:EB:1D:E8
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/STT56LAMiqNNiEivh42EIw7rHeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.169.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b0:a7:14:7b:89:8f:4d:4a:80:0e:2d:ec:bb:77:df:5f:96:
53:5f:be:08:6a:4b:fc:e3:62:8b:c0:58:8f:33:8f:ef:7b:2a:
76:ce:77:dd:74:cc:05:5b:e6:d5:f7:5a:3b:4a:93:ca:6a:47:
6a:77:f5:9a:a7:69:7f:76:f9:d6:5d:ba:e8:a0:a4:78:c6:91:
50:5f:13:f1:c6:5d:89:88:af:6c:da:e1:af:fc:52:2e:76:5f:
28:28:38:ad:45:01:6e:aa:10:ea:8f:36:57:3a:55:26:e8:f8:
6d:6c:39:d0:09:3a:92:e4:ec:09:09:fe:f8:92:e8:65:b4:cf:
fa:57:98:b4:b9:53:c1:c7:0d:d0:d9:01:65:b7:15:3f:31:ba:
88:16:5d:25:24:52:ed:e2:76:e0:52:98:a6:7d:9c:6c:86:aa:
ca:0a:54:ae:35:9c:55:b8:0b:e3:22:2e:43:8e:72:4f:cf:ca:
13:70:e7:c3:36:b2:e3:e4:6a:c5:13:85:90:ee:86:c1:fa:d6:
b8:ee:0b:0a:a1:20:3c:85:8e:87:22:a5:4c:1d:89:83:ac:9b:
5c:fa:3e:56:17:0f:59:69:37:fb:b4:3e:67:c4:cf:e7:68:c1:
b4:3d:7b:aa:dc:bb:2f:23:03:d6:be:94:55:87:a5:08:39:2b:
a3:25:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:06:08 2024 by rpki-client on console.sobornost.net