Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/npuxtgM5xo3pVke7rU7CL10cdzg.roa
File: npuxtgM5xo3pVke7rU7CL10cdzg.roa (raw, json)
Hash identifier: F5fymjZpQpZ/oOZY3JIOG3K7JJPeTzeOLr+isuUwZ8E=
Subject key identifier: 9E:9B:B1:B6:03:39:C6:8D:E9:56:47:BB:AD:4E:C2:2F:5D:1C:77:38
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01910D7C707F80E48A5F1070F486CFD3F46D
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/npuxtgM5xo3pVke7rU7CL10cdzg.roa
Signing time: Thu 01 Aug 2024 10:29:04 +0000
ROA not before: Thu 01 Aug 2024 10:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 46.253.4.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:7c:70:7f:80:e4:8a:5f:10:70:f4:86:cf:d3:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Aug 1 10:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9bb1b60339c68de95647bbad4ec22f5d1c7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:9d:26:9a:fa:c5:e2:48:f1:47:42:87:f7:
33:b0:04:f7:f7:ce:6f:5c:3f:e8:cf:b9:8f:9f:12:
36:68:56:f7:bf:aa:4f:ee:f2:95:32:67:70:b3:97:
39:4d:95:4e:f3:60:e0:1e:60:9b:d8:a7:f6:f7:d1:
41:35:72:00:24:4a:ca:02:05:3f:4a:39:92:e4:1a:
24:7a:37:d0:a0:0d:a2:3f:ad:24:76:c0:f0:cd:58:
1d:18:f1:57:02:d9:c8:2a:1c:5b:59:d6:cb:b0:73:
d0:7f:21:5e:eb:a0:49:a9:5b:9b:a6:72:68:a5:79:
19:12:95:df:a4:8d:27:b9:e6:25:55:15:6f:de:92:
5f:72:a1:0c:e4:34:09:d6:cb:17:fc:c6:e0:70:e4:
9e:80:91:86:ad:06:74:61:0d:fb:b3:cf:b5:5f:b4:
fa:e1:9c:e9:48:a8:ab:18:57:8b:d4:7e:f0:60:fe:
93:36:b4:75:b1:7f:6f:df:36:68:80:a4:b5:54:ec:
2c:20:9a:9f:13:d5:13:f4:08:9b:e5:1f:f1:9b:33:
eb:41:d4:be:bc:a2:db:29:9b:7a:7e:ff:40:0a:22:
b5:4a:c4:b8:e1:61:71:8d:f2:1a:7f:dc:b4:71:2c:
17:05:a4:d1:63:a3:ef:5e:a1:ca:c1:eb:e4:c5:2a:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:B1:B6:03:39:C6:8D:E9:56:47:BB:AD:4E:C2:2F:5D:1C:77:38
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/npuxtgM5xo3pVke7rU7CL10cdzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/23
95.169.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:63:a8:0d:09:34:98:9e:cf:c3:9f:e6:af:3c:14:38:39:6f:
b7:9c:3c:1a:fa:c9:5a:66:79:68:46:d0:d7:64:7b:86:9a:85:
1f:f1:c6:c0:1c:69:ec:f2:a6:7e:9f:10:15:18:8c:f7:98:01:
a0:30:4b:1a:7d:54:13:63:00:95:f5:8b:2e:fc:b3:41:79:d3:
e1:35:64:62:61:34:06:c6:e0:a3:c6:1a:50:47:a6:0b:3e:79:
2e:0f:3c:6f:be:96:f6:8f:7d:ae:31:43:17:d4:79:18:31:9f:
3d:d3:5a:bd:4c:71:2b:e3:3f:25:50:56:43:8b:87:37:50:cc:
89:32:5c:06:fc:b1:37:d8:97:50:8d:b2:52:30:f0:84:bf:3a:
fe:6d:0a:43:f3:a4:89:4c:5f:fe:77:a4:f0:eb:21:25:45:23:
cf:c0:81:54:3f:25:c1:2c:b6:db:8a:98:e2:17:a9:cf:cb:0c:
92:57:e6:b6:09:40:fd:0c:fb:75:df:cb:21:1e:d7:ee:45:fd:
3e:e0:f9:da:76:93:fe:40:5c:65:e6:fc:8c:30:1b:99:50:91:
c5:5c:97:a4:dd:4c:e8:4a:85:b6:a8:ce:fa:c1:45:bb:ea:eb:
65:5f:9c:ac:9a:ed:8b:4f:f2:f6:46:62:6a:e8:b4:ce:79:64:
c2:0b:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:11:06 2024 by rpki-client on console.sobornost.net