Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/8LgqA07o6utFCbLqQUxfnsYAuNc.roa
File: 8LgqA07o6utFCbLqQUxfnsYAuNc.roa (raw, json)
Hash identifier: RCY8QOSPSsOzQAfdXOtdAYkVitfqmaEHbt/edevzYTg=
Subject key identifier: F0:B8:2A:03:4E:E8:EA:EB:45:09:B2:EA:41:4C:5F:9E:C6:00:B8:D7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0193A1BA0271E4E3015149D66C56ABB09C50
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/8LgqA07o6utFCbLqQUxfnsYAuNc.roa
Signing time: Sat 07 Dec 2024 15:25:42 +0000
ROA not before: Sat 07 Dec 2024 15:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197505
IP address blocks: 46.255.128.0/21 maxlen: 21
46.255.128.0/24 maxlen: 24
46.255.129.0/24 maxlen: 24
46.255.130.0/24 maxlen: 24
46.255.131.0/24 maxlen: 24
46.255.132.0/24 maxlen: 24
46.255.133.0/24 maxlen: 24
46.255.134.0/24 maxlen: 24
46.255.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:ba:02:71:e4:e3:01:51:49:d6:6c:56:ab:b0:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Dec 7 15:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0b82a034ee8eaeb4509b2ea414c5f9ec600b8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:09:a0:7f:7d:eb:33:96:38:e8:1f:35:7b:
3c:59:f6:b3:8b:b1:3a:a1:57:45:db:36:83:c0:ea:
2e:6d:8e:23:bd:5c:3f:5a:4f:91:9e:cf:be:db:1b:
50:2e:65:62:6d:f6:f1:83:97:8e:58:d6:5d:5d:f1:
7c:a1:22:3a:a2:54:0a:99:9c:ee:51:f7:ab:7b:69:
0a:a1:98:8b:6b:81:af:62:af:26:f5:71:7d:b0:6b:
64:f7:52:8f:f1:c3:30:ce:20:a0:94:d6:53:4a:5c:
55:24:92:4c:4b:4f:78:ee:49:ff:9a:87:7a:94:e5:
5d:8b:6b:d5:6f:e9:16:85:3e:55:d5:46:cd:eb:61:
4b:f1:63:78:93:78:20:1f:da:b6:23:04:b7:cd:51:
67:35:8a:85:a9:2f:da:2d:07:5d:6d:01:e9:75:7a:
9b:04:b3:c0:c5:6e:83:d1:36:54:61:3e:b0:60:ef:
d5:53:a1:a1:bc:61:73:fd:f0:be:67:e4:50:e0:4d:
21:a9:9d:99:2b:0b:ad:55:77:ac:36:af:15:c7:58:
46:1d:44:43:96:89:53:49:5a:a0:19:89:9f:49:9a:
04:b9:6a:00:2b:8e:ea:5b:f2:aa:ae:8b:f9:64:71:
30:1a:b3:1d:27:6e:0a:d8:6b:6c:df:97:20:37:25:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:2A:03:4E:E8:EA:EB:45:09:B2:EA:41:4C:5F:9E:C6:00:B8:D7
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/8LgqA07o6utFCbLqQUxfnsYAuNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
87:af:51:fc:d6:ae:bd:b9:b8:7e:95:15:e8:ac:92:02:32:60:
62:10:7f:36:b9:0f:a0:3a:17:b9:29:33:31:21:ec:19:21:39:
a3:23:1e:b7:b8:db:de:9f:f8:c8:89:01:b7:f6:8c:30:0b:8a:
5f:6b:4b:2d:a7:bb:ff:ae:3a:f1:d6:d2:73:53:54:93:6e:41:
ee:b1:63:6b:c0:91:0c:f9:9c:d1:d9:7d:6d:cd:ac:5f:d4:61:
e6:49:c0:26:16:ba:25:ca:00:22:00:b2:9a:2a:96:ca:0e:e4:
70:b4:22:ad:32:94:7d:51:65:b5:53:65:88:7f:1e:19:54:40:
c7:39:16:bb:82:16:31:68:14:7e:a5:d4:4d:31:27:c1:69:c3:
64:7d:cb:3f:37:06:46:f2:e7:b6:41:98:58:58:72:2d:64:54:
a9:8f:3c:33:09:ce:73:95:5d:a7:6d:11:7e:a1:10:24:2c:60:
11:a1:2c:9a:da:d9:95:58:37:7b:ae:97:23:35:f3:1e:ad:cc:
0f:73:c4:7a:f2:ed:f9:cc:ce:2f:c6:f9:70:8c:b3:f9:bd:e6:
42:4e:65:c4:d3:85:30:96:85:92:c9:e9:b2:9a:2f:2c:9d:6f:
aa:ea:ec:af:99:5f:cc:7d:19:08:0e:61:02:08:30:95:dc:0f:
14:90:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:17 2024 by rpki-client on console.sobornost.net