Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/iSTzJvFfSrPbDc9IvMeeQsD8DWk.roa
File: iSTzJvFfSrPbDc9IvMeeQsD8DWk.roa (raw, json)
Hash identifier: kLHMosF74PyPrXuymNoXIsoRSPg/GV5MdQO9Ryp8Aic=
Subject key identifier: 89:24:F3:26:F1:5F:4A:B3:DB:0D:CF:48:BC:C7:9E:42:C0:FC:0D:69
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 0193B2DEBEEBBCE7ED9B97E1B3EE5C07EC6D
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/iSTzJvFfSrPbDc9IvMeeQsD8DWk.roa
Signing time: Tue 10 Dec 2024 23:19:22 +0000
ROA not before: Tue 10 Dec 2024 23:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 185.186.76.0/24 maxlen: 24
185.186.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:de:be:eb:bc:e7:ed:9b:97:e1:b3:ee:5c:07:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Dec 10 23:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8924f326f15f4ab3db0dcf48bcc79e42c0fc0d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:f6:d6:4d:5b:91:5d:0e:0f:8b:bb:43:d5:
59:f6:59:74:dd:d4:8d:fd:94:23:3a:32:ba:d1:fb:
a4:14:36:c8:e3:f3:02:02:fa:fc:b8:96:20:83:03:
b6:23:4d:9a:e6:6d:f1:80:f2:80:bc:42:ab:74:30:
b8:5a:80:6b:85:d7:5a:3c:58:00:88:32:61:7e:7a:
ad:20:9e:20:bd:a1:b7:70:c6:26:8a:82:13:34:13:
d8:4a:93:ef:db:d4:89:e8:bb:cc:94:cb:3f:58:61:
d7:9b:74:16:f5:ca:d5:05:34:2d:2d:a2:7c:04:6d:
ac:4e:0c:74:90:6d:67:7c:2d:44:00:c4:26:79:ff:
06:d3:31:74:ca:6e:f4:af:49:cb:10:66:d4:96:f7:
b5:91:2c:69:36:6c:bf:8b:b7:3d:e7:df:07:4e:0e:
2a:83:5d:4b:a4:15:81:af:08:10:f6:55:57:44:94:
a7:e9:ec:ac:59:ec:84:75:67:35:66:78:59:96:bf:
eb:9c:22:de:33:1f:12:c1:fb:24:b2:08:6a:32:e0:
d2:05:33:74:fc:5a:dc:f4:23:8d:06:a2:2c:93:3b:
1e:1c:f2:11:1d:5c:35:50:66:b2:7c:00:ed:8a:78:
ff:6b:58:9b:7b:c0:26:be:ab:e3:73:97:bd:78:e3:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:F3:26:F1:5F:4A:B3:DB:0D:CF:48:BC:C7:9E:42:C0:FC:0D:69
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/iSTzJvFfSrPbDc9IvMeeQsD8DWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.76.0/24
185.186.78.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:1a:a0:23:3d:ed:c2:d0:ee:aa:6f:3b:6c:f6:11:b0:de:
d7:51:fa:bc:d5:fc:d8:c6:6c:b9:57:b2:c6:a9:42:aa:3d:06:
1a:62:50:0b:ac:12:66:a8:d7:2e:24:2b:8f:16:00:98:2a:12:
b3:3f:c2:f7:d6:db:7b:15:bc:d1:32:c5:09:1f:f3:1b:0f:24:
65:dc:42:23:d8:9f:fc:7e:d6:71:6b:50:ed:9b:80:96:45:61:
e9:7e:01:45:42:eb:71:be:40:09:6e:9c:11:1c:f6:e4:76:09:
c5:59:da:a3:e1:f8:73:53:cb:8d:42:4b:11:77:cf:46:25:f1:
35:61:e8:37:5b:04:9b:ac:5c:86:22:e3:1f:ac:95:99:ac:24:
94:27:f4:96:64:47:0f:b6:52:38:32:e2:cc:ff:05:cb:a9:9e:
f0:e5:a9:74:a0:c4:e9:c7:95:58:90:b5:35:29:fc:10:57:43:
aa:fb:42:8a:68:0f:3f:12:b4:9d:29:15:95:d0:60:53:d2:b3:
33:51:33:25:43:ba:c3:24:45:3d:73:20:5f:ec:7f:30:3e:c3:
3d:62:0a:1d:c0:27:45:35:c0:d6:74:d0:6b:43:62:88:aa:da:
1c:e3:0e:f9:40:c4:67:aa:46:15:30:47:4a:d5:6a:aa:97:c8:
be:52:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:23 2024 by rpki-client on console.sobornost.net