Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/yGDjDnvlE_Hlhs0OZwW1WFmuWv0.roa
File: yGDjDnvlE_Hlhs0OZwW1WFmuWv0.roa (raw, json)
Hash identifier: F+tu3Tp8lhl5O12ipjIqNAJTN+oG6M/o4BNoCZAfMxg=
Subject key identifier: C8:60:E3:0E:7B:E5:13:F1:E5:86:CD:0E:67:05:B5:58:59:AE:5A:FD
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 01920EC5FAAB80FFBA468E8D09E209CBA792
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/yGDjDnvlE_Hlhs0OZwW1WFmuWv0.roa
Signing time: Fri 20 Sep 2024 09:31:48 +0000
ROA not before: Fri 20 Sep 2024 09:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31693
IP address blocks: 62.244.76.0/24 maxlen: 24
164.138.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:c5:fa:ab:80:ff:ba:46:8e:8d:09:e2:09:cb:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Sep 20 09:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c860e30e7be513f1e586cd0e6705b55859ae5afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:65:44:00:5c:05:6d:d8:e3:88:88:98:c1:
4b:b7:f4:8e:81:2a:e8:5f:75:1e:58:a5:7a:d7:f3:
ec:ee:7c:b7:6e:1a:01:e8:e9:b8:87:5d:3b:ca:ac:
2e:66:a0:e0:0c:fb:33:09:33:a6:e2:27:0d:4b:38:
b2:0c:79:c7:c3:7d:7f:54:93:e2:6d:90:49:af:33:
44:1a:29:c6:d1:34:0a:42:e6:e2:cd:af:05:23:31:
4b:ee:0e:ce:ef:07:74:d8:98:ec:27:ca:5c:53:d2:
48:bb:18:29:37:12:41:28:a0:8f:8a:f7:fa:ec:49:
0a:4d:22:e4:51:e1:ae:51:38:68:c4:fc:98:52:3e:
c3:aa:c4:8d:8a:d7:0e:18:1e:e0:45:24:9f:c6:47:
3b:de:38:49:66:26:56:a5:a9:cb:a8:fe:56:ff:56:
82:6f:e3:e6:9a:93:e9:9d:a2:55:84:3e:f2:a0:85:
8b:3b:84:c4:42:10:ce:e3:72:0f:6c:3a:d1:f6:5d:
54:f5:b8:c0:55:90:52:7e:59:83:09:0f:99:15:d9:
6d:b1:1c:42:2c:a7:71:3f:d5:c2:9a:10:32:c7:84:
17:36:ff:55:a9:86:ce:eb:66:94:a5:ef:c2:0a:5c:
57:c1:7a:c6:bd:39:02:32:f9:87:41:c1:78:bb:a6:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:E3:0E:7B:E5:13:F1:E5:86:CD:0E:67:05:B5:58:59:AE:5A:FD
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/yGDjDnvlE_Hlhs0OZwW1WFmuWv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/24
164.138.56.0/21
Signature Algorithm: sha256WithRSAEncryption
32:aa:7d:81:4f:a7:ac:1a:3e:6a:a8:6d:97:5e:be:de:d6:d9:
f7:ae:41:b1:69:34:ad:66:66:2c:36:00:1d:58:51:14:24:ad:
71:60:f2:f0:ff:83:07:e4:21:be:c3:97:98:49:03:e6:fd:de:
61:ed:cc:d9:3b:c8:70:5f:f6:1a:ae:06:dc:cc:e0:11:58:8b:
96:8c:91:de:bf:36:c0:4c:86:54:49:3f:f2:bf:33:1f:41:28:
89:46:2d:14:bd:8d:af:0a:a9:af:88:6c:f3:05:92:f3:b4:51:
b1:e4:b9:f2:60:64:b5:c2:4c:bf:df:d7:bb:73:1b:07:0f:f6:
10:c8:69:f5:c0:e9:19:93:a6:5e:6f:7f:a5:da:3c:5f:df:3d:
a0:56:7b:a6:1d:d5:62:31:19:f3:9c:a6:4c:ff:55:f4:b4:f5:
39:a7:ff:0f:61:85:60:91:be:31:f4:9f:8e:14:54:82:91:89:
7b:5f:6b:30:df:b5:70:dc:9c:49:b6:b4:dd:b2:91:e4:3c:77:
4d:4c:c5:d3:04:58:1e:67:b2:f4:4f:93:04:de:84:35:82:75:
41:55:7b:86:9f:e5:a8:6a:dd:04:08:d1:ae:29:fc:4d:e4:17:
fb:27:43:f5:16:c5:92:5f:bf:2d:c1:2b:de:6a:94:6b:f3:9d:
48:b5:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:07:25 2024 by rpki-client on console.sobornost.net