Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xvA6YcWGh6kubP2TFvpanyZDY9U.roa
File: xvA6YcWGh6kubP2TFvpanyZDY9U.roa (raw, json)
Hash identifier: /kPL8RH8Lj122qcuZvZcfUN9NpEJ96MrlJx9gXWMdL8=
Subject key identifier: C6:F0:3A:61:C5:86:87:A9:2E:6C:FD:93:16:FA:5A:9F:26:43:63:D5
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01936D7341E10F5FC69250FC6A796FE08F17
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xvA6YcWGh6kubP2TFvpanyZDY9U.roa
Signing time: Wed 27 Nov 2024 11:48:10 +0000
ROA not before: Wed 27 Nov 2024 11:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:73:41:e1:0f:5f:c6:92:50:fc:6a:79:6f:e0:8f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 27 11:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f03a61c58687a92e6cfd9316fa5a9f264363d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:3e:4e:45:cf:42:21:a1:75:f4:1a:a8:dd:
8d:78:37:56:a5:7a:91:2c:c6:a5:5e:8e:b9:67:ca:
12:6a:d1:d9:e4:51:f4:90:d4:62:99:21:e8:3c:29:
ef:0e:7f:8e:da:4a:cb:d7:58:c5:9a:f4:5f:e8:fb:
24:34:ff:a7:29:ee:dc:aa:3c:bb:2a:7b:24:c7:7f:
d0:f9:84:e9:2a:99:83:b6:bc:e1:82:ca:0c:af:6b:
c4:ce:7d:ae:b3:24:1a:47:08:6d:0f:0f:73:2e:12:
6b:b3:51:c2:e8:62:fb:b7:31:e9:60:cc:b7:1a:a7:
ed:22:18:4b:57:47:04:d2:2a:34:40:03:74:c8:d1:
99:b3:2b:7b:10:3d:02:3b:10:41:8e:ff:68:c4:18:
7e:37:81:b7:4c:c2:bd:7b:ec:03:75:91:9e:a4:4a:
d0:1b:7c:41:2e:bc:39:aa:c7:94:2e:db:9e:da:b3:
67:75:48:87:b7:8b:ec:58:aa:48:30:d9:57:8a:d5:
05:33:61:c6:0e:3b:92:4c:c3:07:e6:94:cf:97:1e:
c8:8b:e7:3a:d0:04:64:26:9e:dc:58:99:74:45:ab:
f1:f3:d9:ae:2e:0a:c4:e3:55:fe:31:01:42:47:e3:
c0:60:26:03:6c:80:68:1d:db:d2:f0:11:d7:fb:91:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:3A:61:C5:86:87:A9:2E:6C:FD:93:16:FA:5A:9F:26:43:63:D5
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xvA6YcWGh6kubP2TFvpanyZDY9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
13:cc:fc:13:4c:46:18:f7:37:76:36:d5:31:6c:37:4d:31:9c:
9a:1e:be:73:f4:d0:7a:7d:ec:38:f2:21:01:ad:f7:5a:a2:63:
91:89:31:13:a4:06:0a:94:7c:c4:db:e3:69:f7:ed:e0:23:36:
4d:a3:93:02:3d:74:d3:a7:36:c6:53:03:5f:fe:b9:62:14:f8:
56:99:c2:f6:34:76:fc:ed:c2:fe:92:84:e7:5e:d7:b7:6c:7b:
e7:39:51:2d:5a:ff:58:71:d0:eb:3b:cf:6e:1e:d2:34:f8:82:
f4:5a:26:6f:4a:f0:06:11:5a:35:16:a2:34:ca:d1:2f:c0:98:
cb:a9:73:91:b3:37:b3:40:39:3f:b8:71:70:6a:66:61:33:16:
a9:54:59:72:08:68:55:57:e8:89:42:04:0c:ac:63:d1:d7:8a:
bb:e4:1d:19:c4:63:7b:24:f6:c1:06:b2:b3:2b:a3:e2:52:a1:
a7:c6:d9:0b:f5:39:e4:0b:a4:eb:ec:50:e6:95:7c:ee:ac:6a:
c0:eb:0d:bc:09:d8:f1:eb:17:97:a7:c6:ad:e3:63:1f:a9:74:
58:bc:7a:e5:2c:c3:b7:1d:89:70:f9:5e:32:b4:91:2d:e7:79:
38:95:a5:72:df:9d:fd:61:53:78:fa:cd:73:8b:34:96:05:f9:
e9:19:2a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net