Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jI6PubbA18BJiT44nMpkn7shrHI.roa
File: jI6PubbA18BJiT44nMpkn7shrHI.roa (raw, json)
Hash identifier: 4veui/FyqrjReEqNah/YrhpJ5WUCpYU7KUQeKbJ2LAs=
Subject key identifier: 8C:8E:8F:B9:B6:C0:D7:C0:49:89:3E:38:9C:CA:64:9F:BB:21:AC:72
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193C1B804C1A6BF53A73A9A1AFF452F5698
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jI6PubbA18BJiT44nMpkn7shrHI.roa
Signing time: Fri 13 Dec 2024 20:31:22 +0000
ROA not before: Fri 13 Dec 2024 20:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c1:b8:04:c1:a6:bf:53:a7:3a:9a:1a:ff:45:2f:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 13 20:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c8e8fb9b6c0d7c049893e389cca649fbb21ac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a3:61:4c:b5:b1:84:e0:ad:05:54:c1:bd:
71:92:65:c7:c0:37:e6:4f:e1:07:7c:8a:f5:7d:ee:
53:bf:fc:ce:be:2d:83:10:a7:5a:89:42:19:db:e7:
30:ec:71:21:83:6d:74:23:10:3d:4c:ac:b5:b8:ab:
d3:d4:a6:22:4e:df:42:0e:61:5a:5a:09:c5:06:7f:
72:61:3d:23:f1:ef:90:a2:a6:0d:ed:8b:15:8c:34:
c3:ee:6f:93:99:ed:56:3d:1c:84:2e:59:a3:6c:74:
ef:4e:38:c9:e8:21:3d:66:f8:d3:46:91:46:97:19:
ec:02:d5:7e:5a:94:a9:63:63:75:4d:a2:03:2e:b9:
ec:01:32:07:89:69:e4:88:4b:4f:2c:52:57:eb:20:
b2:7a:8b:f6:df:51:7c:f5:4f:c5:9b:44:7f:ed:0d:
a8:04:ad:e5:0b:7d:b1:a2:85:1e:cf:f6:aa:3d:72:
0a:f3:e9:04:c7:4b:58:06:e0:6a:c0:9a:f5:e2:34:
38:06:31:b5:de:13:95:a8:03:8b:54:f2:58:fd:6f:
db:60:88:8e:8f:5a:a1:b8:d2:7b:f5:d5:81:84:f2:
7e:13:24:60:e6:f8:f9:9c:71:bd:dd:95:16:8d:84:
b1:99:87:d8:73:52:bc:47:11:fb:ba:b7:60:0f:4e:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:8F:B9:B6:C0:D7:C0:49:89:3E:38:9C:CA:64:9F:BB:21:AC:72
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jI6PubbA18BJiT44nMpkn7shrHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e9:63:8b:ba:f0:f3:b5:77:ed:43:29:f4:70:c2:1d:ff:8c:
70:c1:33:eb:b4:8f:b7:93:62:a4:93:65:69:4d:a1:cc:3b:3f:
d7:73:d9:13:6c:04:0c:90:ef:fa:75:0b:74:36:a2:49:71:06:
e1:a8:a5:eb:13:d9:2b:5d:6a:8a:29:37:99:47:6b:65:d9:42:
3e:4e:37:3d:bb:c1:7d:22:ac:62:f7:b7:52:93:fd:23:93:6d:
21:56:3b:ee:f2:49:01:b9:11:3f:68:4d:97:9b:86:34:73:6a:
26:5d:80:bd:c5:b5:d2:97:67:b0:dc:44:af:1b:53:60:c5:98:
0d:c0:80:ec:5a:b6:5a:c5:08:06:99:b8:e8:86:36:f6:eb:92:
77:36:6d:cc:70:b5:3a:28:8e:c2:b6:ee:46:6a:a6:a5:25:9d:
75:04:83:53:05:b9:33:18:f4:fd:4b:fb:fe:75:18:0c:9a:81:
6f:bb:e8:0b:f6:8d:90:1c:30:26:5a:84:16:88:3e:c1:c1:4e:
01:85:bc:1b:da:24:96:c4:01:f0:83:d4:59:a5:53:ee:8f:35:
ea:bf:f4:14:f0:c5:bd:3b:d1:d6:45:6b:a7:42:a5:41:b5:69:
9b:b1:4c:40:29:42:24:45:7c:fd:6e:25:d6:1b:ce:4c:03:23:
67:a0:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:45 2024 by rpki-client on console.sobornost.net