Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/VuISZdZSUSdC0k4-m0ynNnp71hs.roa
File: VuISZdZSUSdC0k4-m0ynNnp71hs.roa (raw, json)
Hash identifier: eaQGcv+JL4VikVlC8do0Em3zcRE3ZWqNPL0PHDGcWcg=
Subject key identifier: 56:E2:12:65:D6:52:51:27:42:D2:4E:3E:9B:4C:A7:36:7A:7B:D6:1B
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 018D8ABBE4E2D0037762D19A7548C975B858
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/VuISZdZSUSdC0k4-m0ynNnp71hs.roa
Signing time: Thu 08 Feb 2024 21:59:46 +0000
ROA not before: Thu 08 Feb 2024 21:59:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215946
IP address blocks: 185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:bb:e4:e2:d0:03:77:62:d1:9a:75:48:c9:75:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Feb 8 21:59:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e21265d652512742d24e3e9b4ca7367a7bd61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:49:26:57:ca:cf:ee:7b:6d:66:10:24:ec:
75:26:4b:86:36:49:e2:05:aa:ce:38:73:a7:cc:7a:
56:a3:e6:43:17:43:e5:ca:95:fe:61:b1:4d:02:68:
f6:eb:58:05:d1:d5:fd:7b:85:b3:11:d4:59:09:75:
43:34:5b:6c:a8:4b:ab:79:99:f1:83:da:44:34:b2:
80:20:62:35:95:27:82:80:b1:49:68:17:02:23:a3:
5f:e8:fc:49:f3:be:78:69:2a:0f:e5:20:92:a3:11:
78:32:b4:47:74:24:22:e0:7c:25:66:f1:08:2f:08:
09:2a:9c:66:d4:46:4a:6e:7d:d9:8c:a0:50:42:19:
3d:9b:2c:1a:0f:37:a9:4b:48:10:01:34:c5:aa:6c:
86:5d:9a:ee:76:0d:e3:94:df:6e:5f:12:16:f2:3e:
05:d0:59:dd:5c:cc:fd:a3:86:64:1a:8b:b6:b4:6d:
38:9c:35:25:75:d4:87:5f:98:3d:29:53:40:33:d3:
c9:ca:de:8b:ef:59:fb:2b:63:0b:24:c4:e4:e8:f5:
5b:d4:51:f8:e9:e5:03:08:36:76:ce:bc:c9:fa:8c:
e5:e0:ec:a1:f3:f4:2d:b7:ba:a5:43:b3:63:40:d5:
34:8a:62:2f:87:d9:bc:46:d7:a7:da:bf:cf:59:b7:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:12:65:D6:52:51:27:42:D2:4E:3E:9B:4C:A7:36:7A:7B:D6:1B
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/VuISZdZSUSdC0k4-m0ynNnp71hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f2:d5:bd:17:2d:62:07:04:53:d4:7b:a3:09:2f:06:71:5a:
43:c8:50:ce:03:20:48:a2:71:b6:9b:e4:98:60:3c:af:69:57:
5f:c5:e2:cb:3a:f9:31:aa:0b:23:70:44:61:95:c3:da:57:d2:
fd:ec:d0:1f:ee:f0:88:4b:23:1f:63:b6:0f:28:5b:b4:a0:50:
8d:90:df:e0:13:a0:60:87:6b:19:99:06:85:50:9a:7d:d2:4f:
04:ff:ee:0d:80:3f:8a:04:23:1b:79:6e:b3:0d:49:f6:5e:05:
92:b6:b8:a9:69:fe:60:9c:9a:6c:3c:d5:f3:e9:1c:dd:cd:97:
2e:54:ef:d3:69:ba:d7:7f:a9:b4:c9:56:8f:7d:f7:54:fd:c8:
b0:e6:39:0f:57:3c:53:30:de:2d:b3:4c:50:e0:04:3a:0b:5e:
80:97:b2:6d:a8:eb:08:07:b5:11:42:d7:23:ba:81:24:f2:25:
2e:91:8c:14:68:1b:c1:94:29:fb:67:f4:d8:21:b6:d2:8e:89:
df:df:a1:d1:9d:69:09:3c:ab:6d:bf:8c:e2:50:f1:c0:f7:37:
dd:08:78:3e:13:0f:80:8e:69:7f:9e:df:35:2b:e2:19:82:e3:
cf:2b:f8:0d:b5:d4:dc:80:0b:e0:be:57:bd:94:eb:be:93:60:
6d:6b:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net