Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/9kx7bZtFpSsPEd8FKtk47S0Abok.roa
File: 9kx7bZtFpSsPEd8FKtk47S0Abok.roa (raw, json)
Hash identifier: sQCxsMWzjJJoqERo2zeJPqGUm3llPay8PhtvMSXlteQ=
Subject key identifier: F6:4C:7B:6D:9B:45:A5:2B:0F:11:DF:05:2A:D9:38:ED:2D:00:6E:89
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 018CCA29D768C99C758797B3426FE8CB87D4
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/9kx7bZtFpSsPEd8FKtk47S0Abok.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3241
IP address blocks: 5.179.30.0/24 maxlen: 24
5.179.31.0/24 maxlen: 24
5.179.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d7:68:c9:9c:75:87:97:b3:42:6f:e8:cb:87:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f64c7b6d9b45a52b0f11df052ad938ed2d006e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:c7:5b:f1:ef:1a:28:99:24:d6:fc:5d:80:
c4:ac:da:f7:ac:fc:9d:60:f2:02:d8:35:62:75:cb:
b6:e7:ee:49:ef:6b:6e:81:9b:37:19:5d:3c:67:54:
9b:13:0b:de:23:2f:2f:ce:12:43:fe:2f:85:c7:32:
f5:e8:1b:6d:ec:73:a0:d3:39:90:be:67:44:e4:c7:
e9:bb:0c:f8:bb:fb:8f:28:7e:11:4d:c5:ab:a9:17:
b8:b3:1c:63:21:a0:87:9e:17:7c:d0:11:84:ff:de:
ee:a3:a9:1a:d5:9b:2a:3a:aa:e2:ce:da:9f:4c:e7:
58:79:b5:ce:02:df:af:66:3b:e0:f0:cf:eb:e9:c5:
75:43:b8:70:84:90:3b:fd:f5:dd:11:bc:ad:b3:ce:
ca:10:97:2c:f7:da:0d:b5:94:22:91:aa:f3:bb:03:
59:99:89:29:2d:e0:97:22:89:36:d5:bd:7a:32:68:
13:5d:ab:e1:8a:54:e7:3b:8d:a3:57:0f:37:95:35:
a8:12:02:9c:2a:10:0e:f5:b6:6b:28:ac:a9:59:9e:
fc:ed:94:f6:9b:ae:16:0b:b0:6f:4a:3b:97:0c:15:
84:53:98:7b:95:1c:6f:6f:23:25:8e:0a:87:94:f1:
6c:7f:50:67:ec:b0:24:58:2b:fb:2e:9a:83:62:1e:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:7B:6D:9B:45:A5:2B:0F:11:DF:05:2A:D9:38:ED:2D:00:6E:89
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/9kx7bZtFpSsPEd8FKtk47S0Abok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.29.0-5.179.31.255
Signature Algorithm: sha256WithRSAEncryption
7d:f0:51:28:e2:fb:e1:dc:62:36:1e:4a:59:72:1b:d9:16:40:
7a:84:54:75:08:d3:46:78:d7:8f:c4:f4:3d:d6:6f:73:c4:f8:
c8:bc:7e:b2:24:fa:2b:bd:92:70:59:50:20:aa:f0:97:81:f7:
2d:af:7e:d5:47:1e:73:c3:02:e5:87:f5:5a:2b:58:d2:f0:fb:
b9:a8:8b:2c:59:80:66:24:10:6a:a7:8e:23:cc:a8:f1:c2:9f:
b1:dc:2b:40:d2:81:95:66:10:92:b3:7b:7a:33:61:9c:15:86:
c1:09:75:40:be:1c:ee:a5:39:80:08:3c:06:00:d1:90:e9:78:
1d:c8:b8:b8:df:89:7c:b4:81:62:6f:11:f8:6c:41:6e:db:11:
54:d1:ee:1f:53:58:6d:75:1a:ff:e2:75:40:62:85:93:de:1d:
cd:9c:cc:98:48:6b:70:b5:7d:db:53:11:37:37:da:04:db:2d:
ce:e6:5b:e0:d4:65:ac:c2:24:45:bc:62:40:e2:cb:d8:83:f6:
ca:60:9c:f8:48:84:3c:74:fb:36:3f:a9:24:56:92:17:a1:63:
f5:e8:80:68:90:5f:29:b6:66:8d:56:18:5a:62:90:fe:73:7f:
5c:98:36:f1:75:4c:11:02:aa:47:9d:4d:82:34:9c:53:14:1e:
ec:6a:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:27 2024 by rpki-client on console.sobornost.net