Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa
File: JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa (raw, json)
Hash identifier: P8V1toZtFGQpMdjFvEkRs4/DCGy5DcZx1g0+dmDSKzY=
Subject key identifier: 24:58:07:D2:E0:05:4D:B5:6B:A5:0C:F9:CD:0F:FC:A7:02:74:57:56
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 018CCA2BAF5E3052C5185211973AAFC10641
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa
Signing time: Tue 02 Jan 2024 12:35:09 +0000
ROA not before: Tue 02 Jan 2024 12:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12779
IP address blocks: 185.128.77.0/24 maxlen: 24
185.128.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:af:5e:30:52:c5:18:52:11:97:3a:af:c1:06:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jan 2 12:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=245807d2e0054db56ba50cf9cd0ffca702745756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:cc:df:cb:9b:4a:6c:f0:b3:e3:17:f6:f7:
6d:2a:6e:6b:a2:5a:57:f2:bd:65:f5:08:94:a4:7f:
39:0b:2d:93:af:e5:43:8f:f7:f4:b0:76:7c:a2:e5:
83:8f:b2:67:b2:6c:96:09:ec:76:7e:fd:aa:7b:bf:
6b:45:53:d2:75:09:6e:86:d0:b8:c6:f0:37:11:d6:
fc:14:73:f9:d6:af:ee:95:cb:71:3f:cf:15:17:18:
2f:e8:6e:87:68:ba:89:fc:56:99:2f:1c:6c:b8:15:
60:94:32:92:31:80:70:80:c7:9a:c5:dd:17:92:f3:
cf:c4:9f:ce:68:88:2f:4e:f8:d0:e8:72:31:e5:9a:
3f:af:d2:9c:b6:12:a9:c8:13:4b:66:1c:92:b1:93:
10:fe:31:ff:6a:f1:a8:39:f3:d3:0e:ec:e4:0d:17:
01:13:42:39:de:7d:ac:fd:61:4c:1c:60:57:69:0f:
09:b9:98:8f:0a:e0:eb:b0:27:18:b1:66:f7:8e:9b:
64:28:f0:77:00:e4:97:b3:cc:00:b0:d9:56:5c:82:
d5:2d:51:bb:8a:d6:04:e2:5b:6b:7a:c1:3b:81:a6:
3b:9d:6d:9c:3b:ab:16:75:38:de:b5:a1:4e:50:9f:
57:85:8d:3f:c7:3e:c8:a2:43:c1:f1:93:16:a3:6a:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:07:D2:E0:05:4D:B5:6B:A5:0C:F9:CD:0F:FC:A7:02:74:57:56
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:83:98:31:cb:df:3f:90:39:a5:05:ca:00:e0:af:70:72:e0:
34:8e:af:73:99:06:43:d3:9d:c7:3b:3d:e6:aa:04:e8:13:6f:
16:6b:58:7f:de:c6:8f:b0:ac:2c:e8:24:f2:af:b2:5f:e1:80:
3c:d9:96:36:2c:5a:de:c6:33:48:b6:5d:52:7f:4e:b2:48:e5:
6b:0b:b4:b1:03:06:36:fa:35:8f:b6:3c:a5:2b:ec:73:6c:39:
13:da:37:3e:95:e7:85:d0:49:5e:5d:61:b8:d9:38:9f:47:c6:
d7:b8:00:c1:be:bb:06:3f:78:08:3c:f4:6c:b8:98:56:93:d0:
ec:0c:12:7a:19:0c:80:ea:33:6c:79:4b:f9:2a:c0:d2:c1:c0:
4d:64:8b:90:c3:66:fa:a6:bf:45:0f:42:21:20:27:f8:a2:73:
66:ad:cc:85:e8:5a:61:4e:85:55:2b:f8:80:1d:b8:60:45:23:
37:7d:a6:b3:de:74:d9:2c:8b:11:de:8f:3d:b2:8c:c8:51:69:
76:7c:bd:d3:7f:a6:00:80:1f:ac:7e:54:44:af:65:c7:94:7e:
f8:00:78:58:4a:85:e7:7a:5f:c7:69:c0:50:b1:12:11:f8:d8:
e0:67:e7:29:37:42:1d:67:a8:08:e9:12:69:81:5a:dc:65:e5:
1c:31:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net