Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/JhaFx5z3wUS2iPCQNCXIHwpaALk.roa
File: JhaFx5z3wUS2iPCQNCXIHwpaALk.roa (raw, json)
Hash identifier: gWXf0txE1m2PSHx1gvp7TwZTuBk8HKDmPQkkcU+dwj4=
Subject key identifier: 26:16:85:C7:9C:F7:C1:44:B6:88:F0:90:34:25:C8:1F:0A:5A:00:B9
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 018CCA9925173D6FEBF1666381DD17B4BE10
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/JhaFx5z3wUS2iPCQNCXIHwpaALk.roa
Signing time: Tue 02 Jan 2024 14:34:43 +0000
ROA not before: Tue 02 Jan 2024 14:34:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48208
IP address blocks: 46.238.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:25:17:3d:6f:eb:f1:66:63:81:dd:17:b4:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 14:34:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=261685c79cf7c144b688f0903425c81f0a5a00b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:0d:94:f1:50:9a:7a:04:f2:29:7b:40:a4:
05:15:37:44:24:4a:86:af:b9:37:c8:9b:03:26:70:
a8:89:21:b3:ae:cd:76:36:b5:c0:d1:1f:ed:4b:70:
8b:e4:f7:9e:60:ea:b0:90:10:96:87:ba:8a:c6:e1:
6b:4d:9d:28:b3:9f:92:1a:2f:30:79:15:07:67:cd:
09:40:7b:dd:6b:9f:1c:ad:62:9b:37:ed:08:48:9b:
b3:f4:4e:10:41:53:0f:f0:a2:fd:1f:95:88:82:fc:
2b:2c:c6:b7:8b:00:86:94:f9:02:c0:ea:89:d5:5d:
71:5c:80:1e:0a:34:ea:bb:11:ee:69:56:51:7c:bf:
53:d6:e5:b5:51:4d:91:18:5e:93:d0:78:9a:15:7b:
a1:f4:b1:a3:fb:96:98:b6:17:da:99:4c:3d:13:86:
fd:81:cb:75:7c:0c:f2:ae:09:f4:5d:96:25:08:cc:
b4:82:7f:20:11:50:91:a8:5d:79:70:95:96:61:0c:
be:79:b3:3a:d1:81:b8:d4:d0:66:47:20:f2:94:46:
6c:4f:de:2b:63:4b:11:c6:9d:61:09:75:16:e2:11:
cc:d6:1d:23:63:a5:0f:d1:15:85:9d:b7:ab:52:f8:
6d:00:7c:06:6f:f6:fe:f5:31:6e:84:bc:ed:e9:3f:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:16:85:C7:9C:F7:C1:44:B6:88:F0:90:34:25:C8:1F:0A:5A:00:B9
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/JhaFx5z3wUS2iPCQNCXIHwpaALk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.233.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9b:94:60:4b:3d:24:fb:71:d5:58:b7:7c:b1:df:e3:a7:81:
92:8d:99:81:7d:5b:02:24:75:63:93:09:9c:23:65:b4:7a:f5:
84:dd:fc:e6:78:87:bb:87:8e:f6:1e:13:2c:e7:c8:47:79:49:
b9:66:af:dd:b2:f5:a4:4c:51:41:d1:af:97:fd:eb:77:7c:2f:
b8:bc:2a:4a:f0:a9:4a:1a:28:26:78:fe:b2:5e:d6:e2:f1:4c:
d8:fa:ff:a9:90:cb:13:aa:86:d9:3d:63:a1:d3:ad:5c:f2:f6:
13:48:32:a7:9f:f2:55:ec:1c:fe:5d:32:86:8c:78:56:2b:d5:
9b:02:62:84:d1:b7:e4:ed:04:04:4a:ca:f6:74:e8:cb:2c:b2:
c5:2f:54:1f:7a:a3:64:73:ed:60:76:60:06:a0:ff:25:f7:73:
91:d1:d9:db:5a:72:8a:a4:b0:21:05:57:a9:75:e1:50:e7:d0:
c4:b0:68:2c:bc:7b:12:50:2e:a1:03:2d:b0:54:96:93:67:ed:
51:94:e0:20:46:5f:32:3b:0d:05:b3:d7:f6:46:26:db:3d:49:
61:97:89:8f:aa:42:be:a7:0a:21:98:63:a3:db:15:72:d7:7f:
83:54:66:31:b0:a4:b8:f9:a2:64:56:82:e4:b9:69:64:20:4d:
dc:20:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:07 2024 by rpki-client on console.sobornost.net