Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xYhXxvF2oULhcwpxwDzaZdkdnAE.roa
File: xYhXxvF2oULhcwpxwDzaZdkdnAE.roa (raw, json)
Hash identifier: /r8PHneXXCKwrDmSa4P0xBcc+FCI2xN7PjsqJX5RQnA=
Subject key identifier: C5:88:57:C6:F1:76:A1:42:E1:73:0A:71:C0:3C:DA:65:D9:1D:9C:01
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0193F816D1AA6335CFBE1FCB668A361C2F8A
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xYhXxvF2oULhcwpxwDzaZdkdnAE.roa
Signing time: Tue 24 Dec 2024 09:54:25 +0000
ROA not before: Tue 24 Dec 2024 09:54:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.131.195.0/24 maxlen: 24
92.119.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:16:d1:aa:63:35:cf:be:1f:cb:66:8a:36:1c:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Dec 24 09:54:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c58857c6f176a142e1730a71c03cda65d91d9c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:e3:08:42:57:40:3d:fa:6a:a4:f0:05:c4:
f2:56:71:39:dd:69:a8:41:f2:7b:4d:6f:a5:92:5d:
cf:38:34:0b:77:4b:1d:97:79:57:55:ec:47:c4:53:
7e:64:d9:c5:01:6a:cd:bb:8c:ac:4f:62:f3:3f:49:
49:04:6d:98:cd:e4:90:8c:88:47:ca:75:de:6d:f2:
0e:4b:fb:0a:cf:39:0d:35:ed:35:c3:e6:5e:eb:ec:
ef:0d:d5:0c:c6:6e:85:6f:d9:22:8f:c2:b0:1b:0b:
df:42:5c:6c:cc:f3:57:8c:03:b0:0e:c5:e8:c4:ad:
be:6f:47:54:fc:78:e4:38:e9:45:06:d8:41:85:f2:
67:38:3f:3c:1c:18:45:f4:a1:68:63:08:36:bc:73:
bd:f1:d2:20:0a:a9:76:bf:fc:f9:06:8e:5c:87:4f:
5a:02:d0:e2:85:8d:8b:2a:82:cb:da:d6:8f:b5:34:
ab:af:70:75:a3:99:ae:71:ca:06:57:35:54:f9:ca:
d2:e7:93:7a:bc:e9:be:c8:ff:78:1e:b7:55:d6:f4:
1a:04:0d:e9:04:9c:a5:ad:bd:ea:8f:f8:4a:47:e7:
af:36:41:99:79:10:e5:15:b8:ae:ef:c7:71:ce:7f:
9b:7f:51:eb:34:c7:4d:49:45:b0:6f:0e:4b:77:df:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:88:57:C6:F1:76:A1:42:E1:73:0A:71:C0:3C:DA:65:D9:1D:9C:01
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xYhXxvF2oULhcwpxwDzaZdkdnAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.195.0/24
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f3:64:d7:01:3d:f3:fa:7f:53:f3:bc:73:ea:18:40:f0:f6:
a7:ba:61:ca:19:a3:d1:9d:c8:83:51:a3:a0:51:b7:9f:b6:15:
63:75:b2:47:18:03:b8:00:73:a2:d3:c7:3c:a4:a4:05:4d:c4:
7f:e6:74:4f:0d:18:ed:3f:95:a6:8c:2b:63:80:33:93:e8:81:
c6:61:ec:96:c7:95:af:a1:46:78:cb:59:fd:4c:e6:7b:22:93:
69:3f:39:3f:87:ef:73:ca:c7:90:54:b0:2b:dd:31:30:d9:b2:
5e:82:64:79:70:b8:dd:85:94:07:e8:b4:8d:07:c3:18:6c:de:
fd:a8:32:cf:ed:3a:57:a9:d1:37:a8:3a:d4:0f:00:99:12:8e:
c5:fd:65:ae:66:ce:26:16:00:0b:d9:0b:3e:c8:de:8a:47:bf:
fd:e3:37:dc:8e:a3:df:11:73:d0:1a:66:4f:76:b1:9a:f0:46:
e6:7b:49:ea:41:54:0f:cb:a7:45:c2:83:4c:5c:56:b5:35:89:
17:72:d0:3c:2b:b3:de:6f:ed:22:94:a3:f1:87:93:51:99:b1:
62:3e:de:5c:e0:39:b2:54:a8:d7:be:d1:c4:2d:46:a6:65:bb:
99:e8:88:ff:e9:3c:f4:c5:2c:08:51:f5:7f:93:98:37:90:f5:
22:7d:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:02 2024 by rpki-client on console.sobornost.net