Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fBNT8NScO25c_JXvMS-jSvEJO34.roa
File: fBNT8NScO25c_JXvMS-jSvEJO34.roa (raw, json)
Hash identifier: oVPQ6AvrL6jQY5FeDCyzTGiMUO4X3AE2Nws/hpaq8Bs=
Subject key identifier: 7C:13:53:F0:D4:9C:3B:6E:5C:FC:95:EF:31:2F:A3:4A:F1:09:3B:7E
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0193E89504694D3D8E391D2BFB32D2B5B666
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fBNT8NScO25c_JXvMS-jSvEJO34.roa
Signing time: Sat 21 Dec 2024 09:38:20 +0000
ROA not before: Sat 21 Dec 2024 09:38:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212280
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:95:04:69:4d:3d:8e:39:1d:2b:fb:32:d2:b5:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Dec 21 09:38:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c1353f0d49c3b6e5cfc95ef312fa34af1093b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:9f:c7:7d:c7:c2:15:35:08:fe:8a:2e:d0:
df:0d:3f:8c:38:37:06:53:05:94:12:5e:dc:c7:4b:
99:f7:fe:9f:ba:ff:cd:43:3f:7e:aa:f9:5e:d3:cd:
bf:68:3d:0d:ff:cb:a0:57:de:d1:38:b6:94:a8:3e:
f4:e8:52:51:49:5f:9f:ff:6e:2a:9b:88:c0:b9:56:
ca:d0:19:d8:e7:41:a9:bc:91:09:15:64:7e:a4:30:
70:b2:eb:ac:1a:d3:1c:8b:21:68:1c:de:c1:96:cb:
08:36:fe:37:3d:2f:5e:17:a9:ae:00:8e:d5:6e:8a:
33:67:df:b9:6b:7a:9b:14:78:e3:10:37:72:e7:30:
df:07:99:71:96:e8:bd:e6:4b:24:79:ed:0b:92:a4:
1b:b6:33:75:09:b9:07:9a:fc:bc:d8:b9:8f:ae:b9:
2d:83:b6:c3:b2:ed:5a:db:68:aa:aa:f4:47:2e:83:
c6:46:4a:b9:7a:4b:80:fb:79:d4:a2:3c:da:3f:76:
7e:f9:5a:9f:69:b7:b6:78:d3:3e:72:5e:37:dd:af:
10:36:71:d8:23:4c:0d:99:de:03:b4:4f:7f:74:65:
34:f4:5e:4c:9f:ac:54:a9:af:8c:1d:0b:77:db:a8:
31:2d:4b:4a:88:2f:08:18:db:22:0c:cf:2f:65:bc:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:53:F0:D4:9C:3B:6E:5C:FC:95:EF:31:2F:A3:4A:F1:09:3B:7E
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fBNT8NScO25c_JXvMS-jSvEJO34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c8:0e:30:63:78:44:c1:b1:5a:02:2b:9f:7b:fc:f1:6d:3d:
fa:89:cf:49:3f:48:05:91:49:06:42:f3:ed:a9:77:48:a9:85:
4b:d9:8c:6b:88:19:38:e1:53:c1:07:57:45:e0:e8:09:a0:03:
ec:08:3d:4b:13:87:5b:58:a9:e6:52:00:6c:3f:8a:57:3a:90:
22:5a:9f:5b:93:4d:c7:00:0a:7a:4d:10:48:71:47:3a:98:8e:
43:16:cc:10:bb:07:87:a1:1e:a5:86:de:24:e6:29:89:9f:3c:
ad:f4:d6:2d:8a:3d:9c:55:33:9b:6a:d7:f3:fb:14:d0:17:e0:
b7:02:f5:a3:7e:88:8f:ba:90:fd:13:d2:76:4e:99:83:af:ea:
86:5a:01:45:47:18:44:b8:9a:1f:92:14:60:31:06:0f:7c:ac:
ba:06:4f:1a:e9:9d:3d:2d:77:38:3d:40:20:87:d4:d7:3c:85:
42:56:c7:e2:9c:2a:38:7f:8d:bf:c5:62:d4:7f:80:03:d2:88:
c2:46:e9:7e:b4:a5:96:f1:79:e5:ca:d1:28:26:54:aa:a5:33:
80:c4:9d:05:e7:2d:a1:25:a7:95:79:0f:96:31:e1:dc:de:38:
50:32:9c:0a:69:2c:c6:0f:9d:57:4e:c0:ac:78:4e:fb:b9:d0:
80:9c:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net