Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xtgub64gXUUyg13IVspd6_FrYCQ.roa
File: xtgub64gXUUyg13IVspd6_FrYCQ.roa (raw, json)
Hash identifier: pztqp+OH7XYrFvnGIXC4IHVV5Ybt7pj+64omX3fje7M=
Subject key identifier: C6:D8:2E:6F:AE:20:5D:45:32:83:5D:C8:56:CA:5D:EB:F1:6B:60:24
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0193C122873328EE8D0FCF591E79091EFDF9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xtgub64gXUUyg13IVspd6_FrYCQ.roa
Signing time: Fri 13 Dec 2024 17:48:05 +0000
ROA not before: Fri 13 Dec 2024 17:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c1:22:87:33:28:ee:8d:0f:cf:59:1e:79:09:1e:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 13 17:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d82e6fae205d4532835dc856ca5debf16b6024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:7e:4e:8f:51:3a:b1:eb:cd:fd:30:42:d3:
27:fc:be:b3:41:42:aa:49:4f:27:e8:36:02:81:a1:
e5:f3:d3:77:a3:bb:12:df:31:53:91:4b:21:39:f5:
4d:fd:31:cb:c8:92:c1:d8:73:40:4a:9b:9a:69:35:
ab:07:26:1e:d3:05:47:28:59:cb:c6:95:7d:86:9f:
4b:35:fa:d8:a5:31:70:3b:72:04:34:af:48:23:f3:
a7:ae:8d:23:27:e6:02:33:15:31:14:24:53:45:fa:
ca:84:10:6f:30:9f:18:dc:ca:72:76:bb:30:9f:b1:
aa:ea:3a:77:3a:b5:55:a0:fe:bc:81:cd:55:97:b1:
1c:27:f3:5f:65:82:62:4c:16:aa:d0:a6:b3:67:4b:
0e:80:3a:49:a4:3e:e1:5c:cb:ab:43:ab:20:6a:d6:
8e:77:ee:6a:6f:55:7d:53:05:f8:aa:b6:ac:71:cd:
02:6c:e8:0a:6a:7b:b1:17:eb:76:12:06:5b:fc:f4:
8e:e0:a7:48:d8:c0:ef:c7:5b:62:7d:b7:88:e9:c4:
24:07:67:ea:96:a9:61:b0:97:90:93:7e:a7:39:2a:
bf:c2:10:ba:be:a0:d7:59:52:7d:39:ee:aa:5d:27:
96:7e:3a:f2:ef:af:03:d2:d1:10:5b:88:08:dc:f8:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:2E:6F:AE:20:5D:45:32:83:5D:C8:56:CA:5D:EB:F1:6B:60:24
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xtgub64gXUUyg13IVspd6_FrYCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:31:91:4b:3f:1f:93:92:26:c3:0b:23:48:8b:ee:09:97:a4:
df:55:dc:8c:48:07:31:fd:db:3e:33:c2:b5:01:68:42:74:fc:
7a:6b:5a:df:92:08:88:e1:d8:34:e1:4b:6d:73:7d:43:2a:25:
d1:36:e3:ac:ff:a2:8f:7d:e9:df:1c:10:d4:95:57:1e:5a:0a:
99:6b:81:f6:62:62:e1:80:32:e1:73:8c:de:8f:fd:49:96:e6:
a1:74:ad:f4:38:fc:36:d7:03:fb:fd:b0:2c:d4:99:57:a4:5f:
f2:11:ef:fa:75:3d:e0:56:e4:a3:92:14:12:0c:68:9a:d2:56:
b2:87:05:46:c9:a1:ec:3b:ef:97:e2:02:a3:74:43:6d:8f:c3:
55:0b:da:1f:f4:d2:fe:d2:74:5c:cf:0f:3c:a9:d0:ef:06:02:
d1:7e:21:fa:c8:2d:c5:44:6e:04:7a:d0:53:90:f0:92:22:e6:
12:ba:f2:f1:2c:79:ed:7a:14:ed:8f:5b:03:03:a9:d7:f8:41:
8c:1a:57:4a:76:3b:eb:29:df:00:b4:81:80:2c:d2:90:fd:f1:
67:c4:95:a0:4d:a7:a4:dc:12:f1:b0:49:c1:2f:31:a7:9c:91:
03:1f:e4:66:0d:ec:b9:4c:b4:fd:f9:08:70:4f:60:17:25:90:
79:bc:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net