Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/Siy8vvBQ4yabqZ8Rd5zKzIiPGfk.roa
File: Siy8vvBQ4yabqZ8Rd5zKzIiPGfk.roa (raw, json)
Hash identifier: aCtZPg/4XaejH8/2ivXRHYXlXxzXy4M+nGwuH+p2GzM=
Subject key identifier: 4A:2C:BC:BE:F0:50:E3:26:9B:A9:9F:11:77:9C:CA:CC:88:8F:19:F9
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0192DF5151992ABBDD2DFD6A1CC116A4D3DA
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/Siy8vvBQ4yabqZ8Rd5zKzIiPGfk.roa
Signing time: Wed 30 Oct 2024 21:25:01 +0000
ROA not before: Wed 30 Oct 2024 21:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 80.244.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:51:51:99:2a:bb:dd:2d:fd:6a:1c:c1:16:a4:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Oct 30 21:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a2cbcbef050e3269ba99f11779ccacc888f19f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:f3:f0:95:34:73:eb:c1:18:8f:9f:4d:a0:
0b:ab:58:08:b9:54:e6:c1:63:c6:8e:82:8a:56:9f:
a5:8d:29:32:ba:7b:3b:9a:fb:e3:3f:14:30:ff:cd:
31:f7:d5:8c:db:38:ec:81:67:c0:75:8c:64:5a:8b:
1e:0d:9c:27:04:10:e0:06:6a:cd:cc:34:ce:38:05:
b0:a2:48:fd:5a:e3:d5:b7:a2:d3:fd:77:bc:8a:73:
ac:3a:1c:9c:44:b7:fc:8e:b0:38:2d:05:7a:4a:66:
9d:b5:e1:25:6b:cc:4e:62:2b:fc:a7:2c:6d:fc:38:
53:ce:7c:19:8a:37:ef:ea:b2:34:ec:bf:39:41:94:
74:f3:f5:20:e6:f9:92:1c:be:17:1b:f2:63:c9:94:
46:41:7b:8a:80:34:67:25:e0:63:a7:2c:c3:4f:fe:
f2:bf:af:23:ea:0f:4e:63:0f:78:99:8d:59:4c:1b:
9b:4b:ed:24:94:1e:6b:4a:a1:a8:ff:7d:5a:09:cf:
ac:11:34:2d:25:8f:27:0e:b7:56:74:2a:f8:d7:1a:
f3:4d:29:5d:c5:89:cc:73:84:55:9b:83:5c:b5:66:
92:c9:08:e0:78:b4:23:fd:46:6a:40:b7:57:ce:1b:
af:52:f7:44:44:96:62:71:20:4d:cf:61:96:1b:c0:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:BC:BE:F0:50:E3:26:9B:A9:9F:11:77:9C:CA:CC:88:8F:19:F9
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/Siy8vvBQ4yabqZ8Rd5zKzIiPGfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:15:fd:f6:d0:5d:16:7f:d7:fa:a6:f4:3b:5e:7e:0c:4b:21:
66:cb:ed:e9:f5:e0:7c:5a:8b:b5:51:46:b8:78:61:ff:2e:1d:
05:53:7f:41:85:2c:09:5d:27:7c:8d:7d:b6:a1:b0:b1:a9:8d:
60:af:be:e3:74:98:31:6a:21:bc:25:7a:63:46:fa:8f:c8:45:
25:30:5a:72:f6:9a:72:0d:32:69:54:7d:ce:26:c7:21:ba:d9:
e5:4a:41:ec:aa:c4:bd:a6:10:21:69:89:7c:cf:13:be:c8:be:
32:dc:69:6f:19:c3:a7:ca:45:76:1d:db:4f:ae:9d:26:87:2f:
cb:cb:84:7c:71:8f:dc:8c:69:77:6f:ea:47:f6:cc:17:a6:6e:
b7:e6:01:13:88:49:dd:c2:70:b3:1f:1a:92:bb:64:57:2a:36:
ad:7a:24:27:62:ac:e7:14:cd:6d:57:a7:2b:e2:64:41:46:e6:
05:9f:2e:73:92:06:98:e9:1a:6d:e8:16:c7:8d:50:79:97:e3:
4c:10:70:3b:48:3c:af:4c:04:b1:f2:d6:0a:33:a5:10:d2:04:
16:9a:a1:03:ec:39:27:1b:21:34:9a:4d:6a:3e:3c:49:1a:15:
fa:55:d0:d1:91:96:bf:0e:28:e9:c9:f7:a8:b8:4d:bb:6b:db:
f2:f5:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:21 2024 by rpki-client on console.sobornost.net