Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/R0H7hEpPErrjMryoflmCRFD3U7U.roa
File: R0H7hEpPErrjMryoflmCRFD3U7U.roa (raw, json)
Hash identifier: qPaS9AelVanYpK6T3KiLWhhZOflrnsPXwx1AIHBtBMo=
Subject key identifier: 47:41:FB:84:4A:4F:12:BA:E3:32:BC:A8:7E:59:82:44:50:F7:53:B5
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 018FC84DAD4024D02F78C8A5FAD0110B1BED
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/R0H7hEpPErrjMryoflmCRFD3U7U.roa
Signing time: Thu 30 May 2024 07:01:24 +0000
ROA not before: Thu 30 May 2024 07:01:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205513
IP address blocks: 31.129.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:4d:ad:40:24:d0:2f:78:c8:a5:fa:d0:11:0b:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: May 30 07:01:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4741fb844a4f12bae332bca87e59824450f753b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:bd:fe:71:cc:e5:ed:21:26:59:d4:c9:32:
dc:4f:ba:46:e7:23:0e:a7:b8:bf:fc:31:9e:52:05:
f7:40:5e:3b:03:12:f9:3e:28:a9:cf:b1:f9:fe:b1:
48:3c:c9:0b:28:db:23:de:6d:2d:d0:85:bf:67:ce:
f3:dc:3f:f9:c4:c4:25:9b:5c:f7:4d:75:cf:c6:63:
2e:df:b0:8f:e9:90:1c:8f:25:a9:e4:be:60:a0:3b:
90:7a:cc:13:d4:34:93:d5:2d:d3:a0:45:6c:c1:5c:
8e:27:17:e4:8f:55:9f:4c:2b:c1:11:25:d7:8f:be:
3f:e5:c9:7d:c3:fb:94:3b:71:d7:b6:ad:17:dd:78:
b5:a4:9e:d0:db:43:20:be:21:ac:dc:ff:4c:34:39:
8a:25:1f:b6:9b:6e:68:06:70:7c:9f:cb:3a:9a:ec:
f0:6c:f0:c7:a6:6a:e4:be:a1:9d:eb:8f:89:75:1e:
89:41:21:4e:20:0a:0e:ad:42:02:ec:e8:5d:78:da:
dc:6c:e4:fa:89:d0:a0:17:64:0b:6f:f7:00:fe:75:
50:3b:1e:d5:73:cc:e8:0e:01:d4:f9:ee:5a:77:f7:
96:e7:c2:5f:ce:1e:35:bb:48:51:9c:ef:46:b4:e4:
6d:51:c8:70:82:5f:17:f3:f5:de:ad:a7:aa:1f:e3:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:FB:84:4A:4F:12:BA:E3:32:BC:A8:7E:59:82:44:50:F7:53:B5
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/R0H7hEpPErrjMryoflmCRFD3U7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
79:aa:68:3a:40:ce:a1:55:1a:c7:c1:e9:91:98:47:f8:7e:32:
7a:ea:5f:9d:f6:f0:1c:fd:fb:1f:12:92:f3:4f:88:54:1b:1e:
26:8e:62:3e:21:45:5d:df:95:90:ee:f8:ea:08:64:8c:90:c5:
7b:c4:b0:9a:f8:df:f1:a5:57:3f:68:b6:df:99:3f:e8:5f:65:
47:7c:ec:d6:5f:fe:2b:ed:11:f3:28:00:0c:bb:dd:2a:3b:8e:
5e:aa:c0:07:0f:f5:e5:fa:c0:cf:4c:af:59:0c:10:ff:3f:66:
3e:04:60:f1:4c:4d:42:4d:ce:08:27:44:89:4e:04:c9:26:d4:
68:18:27:fa:ad:99:a9:01:ee:8a:9a:8a:d1:ef:22:f2:48:ef:
87:12:37:65:df:d9:b0:0b:b0:36:63:a4:99:7d:bf:09:d8:42:
5f:50:6d:d4:5f:3f:11:c4:4c:14:27:94:4b:0c:19:fb:99:7a:
c7:04:62:fe:ec:58:4f:f6:c6:3b:78:9b:48:f1:0b:70:30:13:
a9:84:40:9e:45:33:fb:40:a0:7f:29:6c:4a:14:4a:96:eb:f3:
5b:16:11:48:f1:c1:91:28:d9:37:a3:eb:f5:9e:16:5f:a8:b2:
b6:8e:91:24:89:a8:aa:9d:61:23:51:b5:19:d6:5c:bc:11:cc:
3e:50:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:28 2024 by rpki-client on console.sobornost.net