Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7M9UVbFBqvVHuWz_8tPMNg_0xjM.roa
File: 7M9UVbFBqvVHuWz_8tPMNg_0xjM.roa (raw, json)
Hash identifier: VEd1huqLz8Ofd3R+nkHvcsERMC196FJht6Fj9UOpek4=
Subject key identifier: EC:CF:54:55:B1:41:AA:F5:47:B9:6C:FF:F2:D3:CC:36:0F:F4:C6:33
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01935580852E6DCFDE2BF5B274614C0505AF
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7M9UVbFBqvVHuWz_8tPMNg_0xjM.roa
Signing time: Fri 22 Nov 2024 20:11:46 +0000
ROA not before: Fri 22 Nov 2024 20:11:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215645
IP address blocks: 85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:80:85:2e:6d:cf:de:2b:f5:b2:74:61:4c:05:05:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 22 20:11:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eccf5455b141aaf547b96cfff2d3cc360ff4c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:58:6b:3b:7c:e5:ce:a1:60:fb:eb:79:78:
82:62:98:3f:df:d8:de:68:a4:c9:fb:6a:06:ba:ea:
65:30:6e:cf:7f:af:f1:9f:97:e6:97:86:a1:45:56:
57:18:2a:41:6c:d0:d0:f1:af:b6:fa:af:8e:d9:ea:
ea:56:65:87:7a:10:7d:47:51:30:a1:43:60:ae:d5:
46:57:01:eb:78:f9:92:13:d3:38:88:c2:98:d4:d6:
66:e9:95:ce:e7:9f:00:3e:05:2e:39:7c:d0:49:b8:
a2:6e:58:a2:50:42:ca:03:57:a9:19:18:d2:a7:e2:
33:37:fe:41:99:88:f9:35:69:d6:44:de:87:65:3a:
3a:2b:41:54:d2:0f:6f:4a:95:a2:61:e2:49:b7:69:
81:c1:24:2b:7f:8a:98:af:6e:3f:8d:9f:27:6d:ce:
e2:5a:ab:c8:66:8f:53:80:e9:47:18:7c:b7:75:8a:
05:15:4d:80:61:6e:5a:87:65:d2:b6:b6:67:d2:1e:
db:4f:63:71:87:4e:ac:ed:f3:89:ef:1f:52:48:97:
c7:2d:9a:47:9f:61:62:2b:f7:9b:17:7d:8b:9a:16:
c7:06:04:4a:97:59:08:84:b3:f7:2f:63:47:85:86:
d2:69:a5:c7:c5:57:c6:4b:98:80:1d:fc:48:f8:bd:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:54:55:B1:41:AA:F5:47:B9:6C:FF:F2:D3:CC:36:0F:F4:C6:33
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7M9UVbFBqvVHuWz_8tPMNg_0xjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.74.0/24
93.190.8.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:43:0f:c1:c4:6a:83:d5:2f:cb:b8:3e:f9:9a:ca:ef:b7:00:
a9:9b:53:16:0f:67:d1:5a:7a:d9:e1:99:4b:66:a8:6a:18:36:
ef:d1:0d:de:48:7e:9c:ed:40:d6:eb:2f:6b:3e:0d:af:38:30:
cb:25:02:54:bb:b2:59:10:96:98:a6:ef:44:93:21:43:2c:ce:
5b:02:2f:cf:85:91:94:91:4e:12:0d:62:9d:10:45:15:26:43:
d0:75:62:ed:7f:9f:c4:70:02:17:03:eb:01:0e:a9:14:7b:9e:
13:61:1f:eb:4d:db:97:fb:dc:05:f2:6f:85:c3:6a:e7:03:0c:
2b:4d:8c:11:99:57:85:ad:69:68:4c:2b:92:4f:96:66:8e:16:
41:91:76:85:37:fc:87:61:e5:24:af:8d:e0:cd:20:92:c9:c5:
f8:66:02:40:b8:43:eb:25:9f:a4:06:2d:cb:6b:42:e7:28:16:
09:7c:3b:b0:40:e7:28:96:24:be:a9:31:7b:47:5c:c2:aa:13:
43:b5:1a:c8:d2:fa:31:8a:1f:3b:a3:18:e0:e8:97:2c:ba:0f:
8e:6e:4f:b6:7f:28:9e:a7:97:e2:4a:5c:99:01:65:80:57:56:
cc:7d:a4:81:fb:fb:7e:4f:db:60:1e:73:62:0c:43:cb:82:76:
af:66:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net