Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PH5pr1ltUGNwPO3x1rxdvsrCDHM.roa
File: PH5pr1ltUGNwPO3x1rxdvsrCDHM.roa (raw, json)
Hash identifier: DY8WcsblYLRSEI/3VwHkDJhH5Chqv+fkc8bKomTI+TU=
Subject key identifier: 3C:7E:69:AF:59:6D:50:63:70:3C:ED:F1:D6:BC:5D:BE:CA:C2:0C:73
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0193CEE212D0A3987841AFAF7A35BC41EC06
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PH5pr1ltUGNwPO3x1rxdvsrCDHM.roa
Signing time: Mon 16 Dec 2024 09:52:22 +0000
ROA not before: Mon 16 Dec 2024 09:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207614
IP address blocks: 5.154.7.0/24 maxlen: 24
78.136.79.0/24 maxlen: 24
84.232.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:e2:12:d0:a3:98:78:41:af:af:7a:35:bc:41:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Dec 16 09:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c7e69af596d5063703cedf1d6bc5dbecac20c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:f7:40:ea:5c:b5:c6:9c:1d:cb:b7:85:fc:
e6:0b:89:8c:c8:70:c1:48:89:e5:77:18:bf:51:b9:
2f:97:f5:81:b1:5d:02:58:22:f7:d8:b8:ae:ce:8f:
4e:fa:83:f7:9a:98:92:8d:96:e0:a8:b1:b5:45:cb:
a7:7e:08:6e:fc:92:21:42:e5:7e:8e:30:ef:3d:2a:
1d:73:73:f4:58:53:51:3d:c4:61:ef:8d:54:98:32:
5b:32:30:0f:32:12:90:f1:d2:52:bc:eb:bc:7f:4a:
6b:4c:c0:3f:a9:1a:e4:10:17:23:7e:dd:84:e2:c6:
22:ac:2b:be:f7:ba:a9:2c:6a:b9:88:2a:48:39:bb:
bd:0c:ff:1b:c0:6d:05:4f:e5:ae:36:5a:b5:7c:02:
f8:93:9f:5d:87:70:06:ff:2c:5f:e6:e6:43:8e:ed:
61:dd:f8:08:27:3f:91:8b:40:04:99:b7:8e:78:3c:
8c:9d:7c:db:37:db:a3:43:e7:d4:c1:8f:50:e5:91:
08:b9:51:47:1a:d8:24:fd:cd:e6:78:be:75:65:54:
93:37:21:f7:0f:61:cb:50:1c:9a:4a:b3:89:46:dd:
b8:3c:b3:93:06:bb:83:b3:4a:7c:81:19:39:20:4f:
32:f1:3d:28:cd:fd:ea:bc:f5:2a:aa:c9:66:61:6a:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:69:AF:59:6D:50:63:70:3C:ED:F1:D6:BC:5D:BE:CA:C2:0C:73
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PH5pr1ltUGNwPO3x1rxdvsrCDHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.7.0/24
78.136.79.0/24
84.232.38.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d6:be:88:08:71:43:b9:43:9e:8d:04:1e:0a:db:dc:2c:29:
bc:77:76:eb:6b:0f:a3:cc:be:48:90:6d:dc:74:cd:fb:f4:58:
46:78:23:df:f0:be:d1:30:8f:cc:94:38:d3:eb:94:f2:3d:02:
6a:76:20:4e:1b:58:b0:73:98:69:71:3c:ca:ac:e8:5e:2b:23:
e1:50:44:23:5f:f8:f8:bd:ef:68:cc:c1:c1:10:2c:92:8b:2f:
88:fd:f6:59:11:8e:80:1f:0b:6a:68:40:c1:25:70:70:e0:07:
33:7a:79:33:ed:17:9a:e0:fb:4c:c2:f9:62:74:e8:26:36:f3:
fc:29:15:05:d4:c9:88:f5:6e:3e:06:fd:0b:04:3b:e6:93:62:
f9:39:99:e8:9a:3a:a9:4b:b9:d9:16:74:3f:03:b7:57:0f:80:
da:34:3f:9e:e2:ee:a4:95:c4:c8:ed:4d:49:95:2f:d2:6c:59:
84:cb:eb:14:99:07:08:cd:cc:27:92:aa:c4:69:c7:1b:c6:05:
d5:28:2b:7e:f1:41:1d:2c:eb:fa:0e:e1:09:26:77:06:84:bf:
40:cb:1d:91:3d:a5:b9:0c:04:6e:80:b2:c8:ba:4c:a9:47:02:
3b:d9:34:de:60:61:5b:10:9d:d1:d7:3b:85:58:94:c8:38:79:
03:41:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net