Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/8axP9JcktLUKPKy08X_eONgzMcY.roa
File: 8axP9JcktLUKPKy08X_eONgzMcY.roa (raw, json)
Hash identifier: O/Ipzpbd6S2flYJCNiW5TPFEay21ZNCKffWXVMAFVfo=
Subject key identifier: F1:AC:4F:F4:97:24:B4:B5:0A:3C:AC:B4:F1:7F:DE:38:D8:33:31:C6
Certificate issuer: /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Certificate serial: 0193AED8F18555EE1BC5EC157A35B9E16112
Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/8axP9JcktLUKPKy08X_eONgzMcY.roa
Signing time: Tue 10 Dec 2024 04:34:33 +0000
ROA not before: Tue 10 Dec 2024 04:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 185.140.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:d8:f1:85:55:ee:1b:c5:ec:15:7a:35:b9:e1:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Validity
Not Before: Dec 10 04:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ac4ff49724b4b50a3cacb4f17fde38d83331c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:1a:a4:25:46:20:60:41:00:ac:4d:00:ea:
97:ad:04:9a:8f:fb:f4:4c:1f:97:06:d8:48:0b:2e:
d1:b7:63:87:b4:4e:f5:37:21:52:91:7b:2d:87:3c:
0e:f5:9e:84:f5:52:22:99:ae:87:57:50:78:ca:6c:
aa:58:4c:8a:2a:34:8f:33:1f:41:53:32:95:db:15:
47:6b:f1:4d:f7:6f:31:f2:48:16:a6:41:c8:9c:f5:
72:c1:b8:0f:bd:6f:6d:e8:a1:22:a3:bb:cb:42:ee:
ef:bd:ce:c2:af:76:6e:d4:a4:5b:d6:79:4b:de:21:
c2:b9:c0:76:62:36:be:39:66:4d:da:9f:83:61:21:
6b:ed:df:8f:28:dd:46:24:f4:7b:96:f5:bc:68:3d:
9b:b9:70:61:0c:4f:fc:cd:b6:8c:5a:fa:5b:1b:30:
b7:c8:60:b2:8b:03:5c:50:a0:7b:c7:fe:3b:55:f2:
02:11:16:6a:98:5e:e1:7a:03:f0:b1:58:48:de:4a:
3c:b9:61:3d:34:7b:86:bb:84:cc:cd:13:64:24:da:
8f:ad:92:0d:90:de:a1:e0:1b:32:aa:ac:3d:8f:24:
46:64:d8:ac:be:2a:7c:c0:de:83:ae:48:65:6c:6d:
36:c8:ad:b3:31:4f:19:00:fc:55:3b:14:4b:9a:b6:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:4F:F4:97:24:B4:B5:0A:3C:AC:B4:F1:7F:DE:38:D8:33:31:C6
X509v3 Authority Key Identifier:
keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/8axP9JcktLUKPKy08X_eONgzMcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.251.0/24
Signature Algorithm: sha256WithRSAEncryption
56:33:cc:cf:ca:d4:f4:c9:4e:ec:dc:2c:4f:03:cc:7d:af:86:
0a:20:1e:b1:00:34:5a:58:d5:97:d4:5d:15:94:cf:26:a5:82:
32:8b:6a:96:ae:6b:c1:62:ba:eb:9a:74:3b:11:34:6d:c0:e1:
59:ae:2d:50:0e:73:83:4c:ad:a8:ee:08:3e:bc:b0:bd:38:e5:
dc:e4:31:d0:7c:2b:7b:59:72:53:93:01:80:2b:63:d8:ab:35:
f5:83:92:98:b1:7b:c6:63:20:42:6d:49:7f:cb:d4:0c:ae:32:
e6:32:40:25:c2:99:c4:b7:8f:58:91:3a:56:74:96:e7:fe:69:
ca:80:35:ed:bf:8a:51:a8:8c:22:9f:e6:76:e0:41:65:ef:55:
56:f3:46:84:36:c7:2b:a2:54:07:21:b3:91:45:e7:db:b4:84:
70:d2:3e:f0:2d:65:bf:a4:87:de:04:b5:df:87:55:b3:29:c5:
f1:32:63:df:d9:25:8f:7e:d3:15:92:78:be:50:1d:78:39:90:
f1:95:b1:0a:2a:2c:e5:f3:10:3c:fb:2e:da:bd:ed:72:d1:8b:
3d:65:bc:9b:89:cb:ea:23:72:86:8d:b1:eb:42:b2:06:da:5d:
8d:cd:16:e1:e5:e7:f0:5d:68:ec:a1:ce:01:6c:2c:ab:05:d0:
41:fd:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net