Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQHlQv04rJI15vRsSAJza0vGcqg.roa
File: xQHlQv04rJI15vRsSAJza0vGcqg.roa (raw, json)
Hash identifier: vJqu1I8gOoS3xqfAUA1AzHUT3q7Suvz0xvr7/iw48Xk=
Subject key identifier: C5:01:E5:42:FD:38:AC:92:35:E6:F4:6C:48:02:73:6B:4B:C6:72:A8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193F5C84EEC9CCAC50DA3DF533CB44F918C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQHlQv04rJI15vRsSAJza0vGcqg.roa
Signing time: Mon 23 Dec 2024 23:09:25 +0000
ROA not before: Mon 23 Dec 2024 23:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207890
IP address blocks: 2a10:ccc0:6960::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f5:c8:4e:ec:9c:ca:c5:0d:a3:df:53:3c:b4:4f:91:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 23 23:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c501e542fd38ac9235e6f46c4802736b4bc672a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:5d:da:f9:56:ba:20:c5:a1:2e:3e:08:af:
03:d9:61:fc:aa:69:93:e4:bd:19:b7:5f:c0:e2:9b:
67:8e:56:a6:ca:e1:81:6b:4b:72:45:9d:77:a5:fb:
4e:10:65:9d:1f:bf:56:77:54:e5:87:00:36:4b:b8:
13:31:64:b1:bd:45:a5:6f:f8:92:2a:e7:8e:58:c0:
6f:a6:ac:5c:cd:f3:2c:34:e2:35:e8:38:c8:72:70:
1c:f0:5b:f9:d4:96:5f:43:d0:4a:69:f0:00:a3:12:
12:ef:64:a8:00:df:45:00:5a:b4:75:92:aa:d4:52:
47:df:fc:11:78:71:98:06:04:a1:14:0a:da:f9:3e:
7e:5c:4b:0c:72:20:b4:e8:49:06:1b:95:9e:bc:28:
e7:95:02:9c:97:63:21:db:4e:50:3e:d7:54:cd:b4:
aa:f9:be:17:4e:c2:1e:84:03:aa:23:3a:e1:dc:c8:
ac:90:18:85:f5:9c:a0:90:6b:d2:a2:91:76:19:e1:
08:21:29:97:3b:b7:0a:df:be:b7:22:c0:66:7a:e3:
cc:dc:76:bd:90:76:d0:49:0a:0a:69:2a:86:f0:db:
00:0c:50:b3:c7:a4:e7:92:7f:0d:f8:ad:33:89:2a:
01:ab:04:59:5a:45:49:64:b7:ba:1e:ae:5a:8d:67:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:E5:42:FD:38:AC:92:35:E6:F4:6C:48:02:73:6B:4B:C6:72:A8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQHlQv04rJI15vRsSAJza0vGcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:6960::/44
Signature Algorithm: sha256WithRSAEncryption
3f:fe:d6:15:90:59:a5:bb:bd:14:e7:8c:e5:03:91:6d:1a:40:
ca:ce:5a:fb:a8:3b:cc:27:01:eb:31:d2:f6:cb:cd:01:6a:8b:
f9:1f:87:31:ad:94:cd:d8:53:cc:14:94:2e:29:51:77:56:69:
76:05:f2:56:7a:ff:ac:d9:70:90:11:9e:76:99:59:cf:3c:9a:
a1:8e:42:74:12:d6:af:d6:ab:cf:38:fa:03:eb:9f:ff:5a:e8:
08:cc:ef:27:c3:55:76:10:48:7c:7d:63:1d:0b:c3:e6:be:e8:
35:c4:d2:0a:89:93:17:29:0d:9b:62:1b:a5:54:4f:61:a1:4a:
91:1f:e1:47:ad:3e:31:48:63:46:cb:00:ad:e1:56:71:1c:25:
95:f2:fb:77:2b:b8:cb:43:2b:20:53:a8:ea:7b:12:b6:f1:ba:
fa:4e:39:b4:5a:e3:9f:92:c1:86:f9:f8:2c:6b:b3:e5:34:86:
ba:80:d0:4b:f2:49:db:f3:3f:14:3f:64:cd:32:77:d1:7c:40:
c8:1f:60:7c:38:a8:9c:0c:b0:7f:82:35:14:87:39:b8:47:e5:
30:cc:41:a0:e8:2e:d7:cc:7a:e5:b4:5f:a3:3e:3e:d4:36:c3:
c7:d5:66:61:33:d7:02:69:6d:76:6a:e8:ab:9c:86:a4:fb:bb:
d1:b0:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:36 2024 by rpki-client on console.sobornost.net