Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/yjxuhU9tODBLAs14uJw-xXO_uQs.roa
File: yjxuhU9tODBLAs14uJw-xXO_uQs.roa (raw, json)
Hash identifier: eiXa77ZhItYlxBLJnnVrH3mhfF44i5aSX4hQggM0nA0=
Subject key identifier: CA:3C:6E:85:4F:6D:38:30:4B:02:CD:78:B8:9C:3E:C5:73:BF:B9:0B
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 01904B69F9B85829F8A5238AFB8212C0DE01
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/yjxuhU9tODBLAs14uJw-xXO_uQs.roa
Signing time: Mon 24 Jun 2024 18:02:34 +0000
ROA not before: Mon 24 Jun 2024 18:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 85.203.24.0/24 maxlen: 24
85.203.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:69:f9:b8:58:29:f8:a5:23:8a:fb:82:12:c0:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jun 24 18:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3c6e854f6d38304b02cd78b89c3ec573bfb90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:a2:31:6e:b1:1f:ab:21:4d:cc:2a:c5:72:
1f:36:4a:04:fe:a4:42:f0:1c:db:a8:9f:b1:8b:21:
da:37:48:c7:d8:f6:c7:29:c9:2b:89:16:4e:0b:df:
ae:6d:3d:e2:8b:29:e6:c8:0b:bd:36:a0:9e:71:8f:
0c:4b:c9:ff:c9:f8:51:1c:e2:04:2b:ca:10:b5:95:
d3:1b:af:f9:35:a6:50:6d:f5:83:1b:39:c9:17:09:
bc:86:fa:59:2a:a9:9c:e2:c2:2d:dc:d1:fc:b9:c8:
7b:83:0d:b1:93:02:aa:22:98:4c:07:3c:5f:7c:91:
9a:72:8a:dd:e1:1b:46:25:8b:5c:d5:46:f5:5e:5d:
03:bc:22:4f:7f:26:7f:16:68:33:d3:a8:82:19:21:
fd:a4:64:fd:ed:1c:49:bf:6f:1a:5a:fe:07:08:4e:
ab:bc:b0:f6:cd:16:56:1f:25:32:51:f1:d1:34:66:
b8:ea:10:cb:c3:f2:5c:00:55:df:f7:11:3c:f5:16:
70:a3:a4:8f:17:f2:81:06:62:0a:1e:36:c0:f3:3e:
1b:c2:27:46:af:8e:2a:75:0c:78:3b:b5:18:0d:89:
7a:71:45:e9:04:14:1d:4e:79:60:e9:96:9d:6e:75:
fe:d9:f4:3b:30:55:84:45:73:c2:54:27:71:23:d2:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:6E:85:4F:6D:38:30:4B:02:CD:78:B8:9C:3E:C5:73:BF:B9:0B
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/yjxuhU9tODBLAs14uJw-xXO_uQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.24.0/24
85.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f5:dd:78:47:00:27:2f:18:69:4f:9c:38:f3:b1:51:b9:c7:
d8:44:4c:c2:91:42:19:f5:7f:f2:24:ab:67:f3:53:b8:66:57:
f7:2e:96:33:4a:fc:e1:d8:20:2f:95:61:6f:3e:fe:3a:af:a6:
4f:ce:4b:fb:90:cc:c3:47:0c:8a:21:bd:fa:f5:85:67:3f:31:
e0:d4:a7:db:bf:c5:6d:fd:49:ab:28:08:47:55:79:ab:00:08:
08:e4:79:86:a6:97:1d:e8:79:61:d7:65:8e:65:c2:f4:e1:0b:
8e:82:8d:23:db:ff:fb:4a:ef:e0:9a:4a:82:83:1a:6c:39:4a:
ff:79:82:2f:12:aa:b9:4c:e5:91:92:bd:ac:2a:a7:c7:4c:3e:
e6:9d:45:74:35:ba:c1:ce:38:8e:e9:59:3a:09:61:60:31:91:
b8:be:bb:8f:9a:13:84:80:88:c6:7e:41:41:95:60:26:e0:df:
f1:f2:b6:ae:5d:0c:29:f8:38:fd:6e:7e:2e:f9:08:0f:d0:a6:
43:02:2f:d4:a4:8a:df:fe:47:cc:10:fb:9d:b5:1b:2a:63:88:
5d:a9:c2:df:e0:d5:03:1c:67:f7:59:96:03:90:ff:cb:71:35:
e6:3f:4f:f5:0f:e0:d5:86:d0:83:07:0d:a9:78:fc:86:a2:83:
a5:c9:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:14 2024 by rpki-client on console.sobornost.net