Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/42lsWwbV3B0BXaqV32LB6slntCw.roa
File: 42lsWwbV3B0BXaqV32LB6slntCw.roa (raw, json)
Hash identifier: 0CF33saWBVqizcCBrisgHDc/aCLflOAd5ivhA3/u9HQ=
Subject key identifier: E3:69:6C:5B:06:D5:DC:1D:01:5D:AA:95:DF:62:C1:EA:C9:67:B4:2C
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 01925CCECA85F81AEB1D6A569364F2F57722
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/42lsWwbV3B0BXaqV32LB6slntCw.roa
Signing time: Sat 05 Oct 2024 13:11:49 +0000
ROA not before: Sat 05 Oct 2024 13:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209061
IP address blocks: 212.40.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5c:ce:ca:85:f8:1a:eb:1d:6a:56:93:64:f2:f5:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Oct 5 13:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3696c5b06d5dc1d015daa95df62c1eac967b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:43:ce:38:b1:d9:25:51:54:b2:4f:a0:8c:
09:d2:36:2b:88:35:66:c1:b6:f9:c0:09:7c:e8:d0:
0d:e1:cb:c8:33:65:92:83:0a:9f:7e:70:80:63:aa:
53:40:73:00:ca:e0:2d:b3:c2:68:91:97:a8:8d:6b:
43:2b:78:26:5f:d3:55:2b:2f:1d:bb:59:f3:0e:c8:
28:a1:2e:5f:ca:c7:82:18:e3:7a:97:6d:03:64:65:
a6:c1:24:2b:83:3b:d4:99:bd:4e:8b:71:13:c6:00:
cb:fd:1c:f7:69:65:b7:b6:a1:02:38:83:c8:32:a7:
18:a2:01:0a:dc:e0:b4:8d:92:4c:ab:fe:11:ba:b0:
47:95:3e:df:b6:5a:d1:e9:35:56:66:22:d7:fc:20:
54:1e:f6:da:92:82:2e:72:13:48:45:2f:85:5c:6d:
31:1d:41:e4:57:30:d2:80:ee:9f:43:b1:a1:f1:bc:
0e:c6:02:d3:5d:83:f7:53:de:6a:74:ba:be:1c:25:
24:1a:5b:d6:00:18:4f:13:48:3e:37:44:dd:98:4f:
5e:0b:73:b7:10:ee:e0:2d:60:43:5d:fc:1c:b3:df:
a5:9a:76:62:6f:86:ca:1f:3c:75:94:8f:cd:bf:3b:
64:85:9c:fb:ae:34:2d:9c:98:cb:2f:ae:f6:c3:d8:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:6C:5B:06:D5:DC:1D:01:5D:AA:95:DF:62:C1:EA:C9:67:B4:2C
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/42lsWwbV3B0BXaqV32LB6slntCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.64.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d8:53:c0:e8:58:b4:52:53:32:dd:ad:a1:50:c6:5b:98:de:
d8:20:d2:e7:82:7a:88:f2:75:83:56:18:e6:08:07:da:a9:87:
17:31:28:d0:c1:c3:5e:2b:b2:88:d8:a7:0a:c7:a8:12:99:ae:
24:13:80:fc:6c:54:94:a5:eb:f7:d8:db:0b:eb:11:3b:4d:eb:
47:7d:8e:84:71:56:c3:13:3f:3b:f7:b9:9d:2b:24:41:34:47:
28:60:b0:33:b4:bf:4d:a0:5a:86:5b:dd:bb:f3:20:40:2a:16:
06:a5:d3:ee:ef:4c:fe:5a:c1:64:bd:63:20:f7:a6:6d:6e:bf:
3a:08:56:5a:8b:c0:89:9e:4b:25:85:a7:9a:b1:32:03:70:60:
06:67:91:e3:90:20:0a:d6:5f:46:5b:60:2f:b7:14:03:98:34:
dc:2c:86:85:0d:8e:3a:78:bb:f4:cf:f2:c2:d2:42:1f:48:b1:
57:6f:a8:25:02:3c:c5:43:4b:2c:b4:5e:c8:22:7f:7e:c3:41:
26:09:c1:62:d5:fe:23:b5:80:79:af:25:0d:3b:9c:50:bc:d9:
70:7c:a7:fb:f4:f9:d2:bf:1b:60:e8:ad:fe:81:64:36:b0:50:
89:40:8a:a3:25:61:32:72:63:e9:2c:1e:39:f2:4d:11:92:84:
92:76:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:12 2024 by rpki-client on console.sobornost.net