Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/2aXySBa-W8vRetUSgDtoEjHxXCw.roa
File: 2aXySBa-W8vRetUSgDtoEjHxXCw.roa (raw, json)
Hash identifier: uZCgaCmwIY1fSRQxOXcbxo5/Dsn5HeLcmecB60OlqDk=
Subject key identifier: D9:A5:F2:48:16:BE:5B:CB:D1:7A:D5:12:80:3B:68:12:31:F1:5C:2C
Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial: 018E37A10D0E9F1AC1172E58B109E1E917AB
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/2aXySBa-W8vRetUSgDtoEjHxXCw.roa
Signing time: Wed 13 Mar 2024 11:44:45 +0000
ROA not before: Wed 13 Mar 2024 11:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20708
IP address blocks: 193.108.106.0/23 maxlen: 23
193.108.108.0/23 maxlen: 23
2001:67c:1914::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:a1:0d:0e:9f:1a:c1:17:2e:58:b1:09:e1:e9:17:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
Validity
Not Before: Mar 13 11:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9a5f24816be5bcbd17ad512803b681231f15c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:76:b0:f7:a9:c6:fa:69:5d:a1:49:fc:31:
00:b4:9d:30:5c:d9:7e:37:6d:f8:e6:58:a6:85:3b:
8d:1b:14:bb:3e:b0:30:b1:de:ca:ec:d4:70:7b:f4:
f6:88:2c:4a:f5:8c:d0:ed:32:f6:7d:36:71:c8:bd:
f2:37:8b:ca:ea:5b:22:58:32:6d:be:7b:22:53:52:
89:f3:eb:5b:81:9f:91:0e:4d:ed:95:0d:bb:30:a6:
6e:05:49:7d:4a:ae:06:2f:8e:7b:7c:16:c1:e7:61:
d7:b0:74:5e:89:bf:c4:84:4f:ee:0b:25:8d:9c:fa:
08:a9:8e:23:29:27:f3:76:8c:e0:eb:37:e9:43:a0:
33:8b:03:66:f3:bd:20:07:97:0f:fb:41:46:a4:4e:
57:d2:f8:c8:6f:f8:df:b9:78:cb:69:d2:48:3d:a7:
ad:83:9c:ba:58:69:b4:43:84:40:9b:bf:0d:46:a0:
72:e1:01:c5:e2:43:50:b0:2e:3c:c8:0e:29:1e:06:
09:71:3d:4b:da:14:0d:74:89:a8:25:dc:9e:d3:00:
b9:f0:d6:64:9b:f1:88:16:32:b7:64:97:17:66:cc:
a7:1a:2d:09:d9:d0:f6:26:62:4c:88:68:04:8b:11:
6b:94:3b:cd:30:df:7c:4b:24:52:51:25:1e:22:1b:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A5:F2:48:16:BE:5B:CB:D1:7A:D5:12:80:3B:68:12:31:F1:5C:2C
X509v3 Authority Key Identifier:
keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/2aXySBa-W8vRetUSgDtoEjHxXCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.106.0-193.108.109.255
IPv6:
2001:67c:1914::/48
Signature Algorithm: sha256WithRSAEncryption
12:99:f0:35:0c:14:a9:70:a9:db:7f:64:c3:da:dd:4d:01:f7:
d4:53:66:fd:a4:d7:7c:2d:9a:7c:83:ca:1a:90:48:a2:b2:83:
3c:d0:5f:30:77:dd:1d:79:a8:5e:93:c5:e1:65:df:83:b6:1b:
49:2f:45:c4:69:2d:bf:37:a2:58:8d:84:46:7a:49:13:5f:f5:
76:f9:de:8e:13:b9:41:3c:df:46:4e:0d:2e:f8:c8:57:56:18:
25:40:60:4a:ae:de:f4:65:4d:0f:1a:c0:d5:3b:46:64:b2:b9:
c3:39:6f:75:7d:62:fe:73:0c:ef:11:83:2f:39:d4:a3:17:cb:
4e:91:bf:e3:30:6d:3b:25:97:64:64:e1:99:43:a9:f9:2f:62:
e8:a8:0d:95:4f:ca:1a:ba:bf:7a:5d:b0:f7:61:2d:2c:0a:ed:
59:81:0d:c7:00:03:e0:a7:b4:80:b3:75:4a:8a:0d:81:6d:27:
a8:7a:f6:a2:1d:b5:12:63:9d:60:37:0a:f8:fc:2b:bd:af:34:
72:c8:d7:3c:ad:f0:00:cd:ae:b3:d0:e9:b3:b3:ff:56:b1:6d:
3c:63:17:cd:f0:d4:10:cb:a0:8e:46:25:28:5d:b7:c7:3e:53:
86:49:22:ba:ab:eb:ec:82:00:bb:ec:2f:4c:22:a0:6a:2e:e7:
2b:a6:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:23 2024 by rpki-client on console.sobornost.net