Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/l8ZvQSv30Stzz46vcSDUIECC-P4.roa
File: l8ZvQSv30Stzz46vcSDUIECC-P4.roa (raw, json)
Hash identifier: OW3azlv4r4v5MOt+pFnqSC3e2PrMVjIqtGDF7pBozrQ=
Subject key identifier: 97:C6:6F:41:2B:F7:D1:2B:73:CF:8E:AF:71:20:D4:20:40:82:F8:FE
Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial: 0193D4A23D04AC007B0B0F928ED1A78A805E
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/l8ZvQSv30Stzz46vcSDUIECC-P4.roa
Signing time: Tue 17 Dec 2024 12:40:22 +0000
ROA not before: Tue 17 Dec 2024 12:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42678
IP address blocks: 46.228.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:a2:3d:04:ac:00:7b:0b:0f:92:8e:d1:a7:8a:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Validity
Not Before: Dec 17 12:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c66f412bf7d12b73cf8eaf7120d4204082f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:5d:ae:1a:f7:af:0d:77:69:00:63:9e:7b:
9f:47:ef:82:39:8e:4b:62:fe:e9:6f:aa:2a:31:2a:
ec:fc:07:b3:4b:16:eb:86:90:dc:94:ec:04:7f:08:
04:f2:aa:f9:73:67:b1:05:2e:85:85:20:53:c9:a6:
d8:59:a8:7d:5f:c8:a9:f5:45:ab:37:e0:a0:86:b5:
65:1a:06:70:87:b5:f0:dc:5d:7d:54:a1:a0:fb:dd:
ba:ce:e0:b5:a9:90:7f:ff:45:ea:4c:e2:3d:ed:b7:
bd:e2:68:ce:75:70:6c:92:c8:d2:cb:50:3b:9e:85:
47:f5:3a:92:e9:c8:4c:21:98:36:af:79:15:45:83:
35:98:ee:4d:a2:bf:e0:cb:31:cb:2c:47:11:b8:01:
b0:8d:14:51:bc:5c:47:12:81:e7:93:ef:59:2e:85:
e7:06:c5:00:14:df:99:e5:5e:da:44:70:39:dc:66:
0b:32:01:50:61:cb:ad:68:81:24:d8:03:10:68:e3:
41:55:de:b5:0a:91:47:64:fb:76:09:7d:01:dd:25:
b6:cb:64:c4:98:19:49:69:84:1d:8e:e7:3d:94:0b:
3e:27:fd:a9:4a:96:f4:01:81:5e:4c:7a:a0:a1:d9:
9c:c6:76:79:8c:fe:2d:83:9a:81:e8:25:7e:f4:a1:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:6F:41:2B:F7:D1:2B:73:CF:8E:AF:71:20:D4:20:40:82:F8:FE
X509v3 Authority Key Identifier:
keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/l8ZvQSv30Stzz46vcSDUIECC-P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.112.0/20
Signature Algorithm: sha256WithRSAEncryption
07:08:ac:aa:9c:09:cd:fe:22:01:2f:ea:3d:5a:4f:8b:9b:54:
90:29:6c:76:b7:5f:e9:28:f0:da:8d:1c:cb:85:57:c2:81:71:
5f:98:4f:67:f8:58:e6:84:6a:2b:dc:97:1f:49:33:5f:70:61:
5d:56:92:4c:0c:08:8a:6e:45:42:28:5a:3b:c5:74:f8:53:1c:
c7:9f:69:fe:f6:ce:dc:b1:aa:76:ed:b6:c7:ae:d2:e1:98:30:
84:e1:1b:f6:26:e5:6a:7b:75:1e:31:44:35:89:3f:ea:a1:e4:
90:8a:e3:5e:30:97:3e:b1:53:ec:cf:f0:68:d9:26:f3:cf:2e:
ef:22:fe:e3:70:bc:a2:58:db:28:22:2b:21:df:21:e1:a7:3c:
fe:f5:78:95:62:32:28:52:02:cc:ea:82:55:b3:26:1c:1a:89:
d7:65:6d:ee:b6:87:ef:53:25:4e:39:66:c2:46:a1:7a:77:96:
38:46:14:c4:a8:47:e9:7e:7d:f9:a8:c0:fe:ec:f7:34:4e:47:
46:50:25:b5:58:a0:be:6b:bc:c3:37:6d:24:07:81:87:bb:9a:
6d:9b:ac:d5:a2:25:6d:ed:a2:db:50:b5:52:dc:aa:f3:e0:38:
fa:ca:f2:df:fc:23:f2:69:4b:0c:5f:aa:ca:1d:c6:d9:43:16:
05:32:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net