Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XIIplKda3JjUq7xhZ41bPD3pygs.roa
File: XIIplKda3JjUq7xhZ41bPD3pygs.roa (raw, json)
Hash identifier: KVaLJmeVs1KS1dtp4jARqLrkQN3z2HqABxjtkNcAXT8=
Subject key identifier: 5C:82:29:94:A7:5A:DC:98:D4:AB:BC:61:67:8D:5B:3C:3D:E9:CA:0B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0193BAD2E0C4BC0A6B0C121622B9B044AFF0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XIIplKda3JjUq7xhZ41bPD3pygs.roa
Signing time: Thu 12 Dec 2024 12:23:22 +0000
ROA not before: Thu 12 Dec 2024 12:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213737
IP address blocks: 2.56.111.0/24 maxlen: 24
45.9.28.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:d2:e0:c4:bc:0a:6b:0c:12:16:22:b9:b0:44:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 12 12:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c822994a75adc98d4abbc61678d5b3c3de9ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:cd:67:5e:46:f1:4f:ae:4c:de:8d:5a:2d:
e5:ee:73:4c:39:8d:54:3f:98:29:81:cd:9f:23:98:
73:e4:78:86:bd:34:af:d7:0a:d1:59:04:e1:ef:04:
50:c8:31:88:95:0b:74:e1:db:e7:8a:61:8e:4c:7e:
98:0c:20:fd:d0:04:41:9b:c2:51:96:96:a0:68:32:
3b:fd:85:1f:e6:78:6e:9f:50:04:20:a0:72:73:a4:
3e:46:67:62:ce:7f:62:d4:d4:08:03:4e:8e:cf:19:
54:54:fe:3c:75:45:7c:c9:4a:6c:70:c8:e7:f4:a1:
43:c0:f3:e0:b9:b2:58:d1:44:5b:61:1b:36:4e:77:
43:55:99:d6:39:c0:c9:c2:55:cd:21:f4:32:21:22:
e7:83:20:f9:f8:4d:be:fc:ee:a6:ce:1e:a5:f9:3a:
4e:df:c5:fd:8a:12:9f:e0:a5:71:8e:d1:17:2d:52:
67:11:95:03:7f:20:c9:ce:e5:21:c3:98:8f:cb:a3:
a3:3b:88:b1:ab:0b:91:b5:f5:da:73:e0:59:b7:46:
c9:b7:18:c2:53:cf:cc:39:67:76:4f:3f:05:5c:fa:
c2:38:39:3c:45:46:86:e7:e5:1e:2b:5d:cb:24:a1:
3b:40:75:4b:ac:5e:b4:a0:a0:ca:2a:88:59:c5:77:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:29:94:A7:5A:DC:98:D4:AB:BC:61:67:8D:5B:3C:3D:E9:CA:0B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XIIplKda3JjUq7xhZ41bPD3pygs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.9.28.0/24
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
99:13:02:29:18:6e:e2:f0:26:1e:e7:30:49:b4:41:a7:da:39:
7f:99:72:e0:26:9a:2e:ac:e2:37:55:d3:b5:f9:7a:20:45:9d:
8b:91:39:5b:8d:87:e8:55:70:94:7e:3b:5e:25:30:11:14:db:
1f:49:b3:dc:35:76:1f:7a:9d:d9:b4:b3:f7:87:87:92:a6:7f:
88:93:a8:0f:d5:0a:57:d7:45:70:b1:ff:c2:f0:6e:fc:2c:74:
ec:9e:d2:d1:4b:59:27:dd:cd:30:17:e1:50:35:ec:01:b1:ea:
de:ef:36:57:96:ef:35:e3:90:6b:14:fa:78:80:d8:26:9c:21:
77:d3:a2:2d:bb:f4:a3:74:7b:0b:5f:97:52:7f:f3:9d:ff:b9:
f1:16:a0:1e:e7:d0:4b:f5:45:54:ca:1c:6e:8c:35:d5:b1:b7:
d5:29:04:92:fc:70:f1:f6:0a:3e:7c:fb:a7:84:33:29:76:14:
c1:60:59:13:d3:bd:74:79:04:44:c7:2b:c2:70:23:4f:c8:10:
05:c1:21:7b:6c:cf:7d:2e:e1:3f:7c:b4:63:38:a4:92:69:18:
15:e8:dc:43:f1:68:14:d9:c6:44:ab:ac:3a:09:f9:a3:9f:c7:
a7:1b:bf:5c:08:4b:90:2c:c2:06:d2:93:25:bc:c1:d5:d2:5b:
3a:a8:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net