Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BIBBR3jOpE1RZAtCMqhxzwLxPz4.roa
File: BIBBR3jOpE1RZAtCMqhxzwLxPz4.roa (raw, json)
Hash identifier: OPrBiijRhQrCK+rlrqzwrLt73CnoB/GOTGJCJ1v49e8=
Subject key identifier: 04:80:41:47:78:CE:A4:4D:51:64:0B:42:32:A8:71:CF:02:F1:3F:3E
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F5623E9F3D000DA5335F75A86656
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BIBBR3jOpE1RZAtCMqhxzwLxPz4.roa
Signing time: Fri 20 Dec 2024 16:10:47 +0000
ROA not before: Fri 20 Dec 2024 16:10:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51235
IP address blocks: 92.242.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f5:62:3e:9f:3d:00:0d:a5:33:5f:75:a8:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0480414778cea44d51640b4232a871cf02f13f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:94:17:7e:16:91:c4:12:8c:70:a4:9d:ea:
ad:cd:1a:c6:4d:94:e1:f0:60:ba:48:75:f6:aa:01:
11:af:92:38:9f:d2:d1:50:c7:a3:a5:cc:fd:a7:2d:
24:11:3f:af:73:38:17:2b:08:5b:af:b2:5a:77:c9:
54:7a:13:39:d4:9c:b5:f8:15:8e:75:42:7f:0c:fa:
15:5c:2d:58:30:9b:24:d0:e0:89:55:1d:98:63:77:
0d:2c:28:e8:0f:5c:c5:cc:6a:a1:b9:4b:57:b1:a9:
84:71:6d:39:56:3b:f1:bd:9f:78:fb:36:42:5f:e0:
23:a5:c7:a1:9c:a3:44:45:86:8a:ae:86:e0:3f:7e:
57:53:1a:5e:e9:cc:f0:ad:1f:48:f6:8a:79:bf:18:
27:f7:fb:18:30:85:90:a3:2d:7d:e7:a4:3b:1d:dc:
86:49:bb:80:91:91:ad:8a:a7:f3:b5:85:44:df:8c:
4c:7d:2a:16:00:fc:7b:19:8a:31:e0:e4:3d:ab:16:
ad:46:99:e6:32:ba:dd:da:9c:91:62:24:c9:06:ed:
d1:6b:ba:14:0f:11:11:06:67:6d:bb:67:d3:96:6e:
bc:93:dd:ea:1c:ee:74:61:cb:87:02:76:63:fa:a0:
72:2a:4d:0d:32:65:70:91:fd:84:17:49:e4:03:4b:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:41:47:78:CE:A4:4D:51:64:0B:42:32:A8:71:CF:02:F1:3F:3E
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BIBBR3jOpE1RZAtCMqhxzwLxPz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:32:5c:53:60:60:00:d5:c0:02:d8:5a:aa:4d:4a:24:43:b3:
e1:8f:87:04:bb:68:69:2a:c1:f8:4a:09:9e:5a:15:47:24:6e:
29:50:91:01:5b:a3:d1:21:64:27:03:ad:9d:e4:e9:0e:d0:6c:
62:dd:5b:7e:f0:1d:8d:9d:82:88:04:f1:42:4a:8c:cc:62:4e:
8d:7b:1a:36:36:93:d2:20:cc:05:c9:1b:01:db:04:69:0a:e6:
d1:60:f0:4f:71:79:08:27:66:1c:cb:11:fd:c7:c1:d6:a9:b1:
63:85:75:d4:af:59:bf:2e:aa:99:e3:ef:61:11:d7:a9:e1:96:
93:79:2c:0f:6b:67:4d:73:0e:98:2a:85:a2:67:8a:99:ac:f4:
ff:f7:6d:d0:ad:3e:ec:a5:24:f1:a6:1d:ab:a5:e3:79:32:7b:
b3:a8:f8:8e:a5:85:57:12:24:0e:9b:1f:68:43:5d:3b:38:f2:
55:fd:bb:2d:39:19:f7:2b:a3:22:96:60:64:1b:70:09:b8:4f:
a4:5b:a0:10:a2:5d:0b:dd:7a:8e:e6:44:a1:ac:32:1e:bd:c6:
43:a1:46:4e:c3:c6:23:a0:ad:19:c0:5c:7e:96:d2:69:bc:61:
46:6f:fb:96:a3:55:42:d9:aa:0f:10:f8:23:e2:75:61:e6:f5:
c7:f3:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net