Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/j7xJnUpGLL3cRfgfrEEduEIKUpc.roa
File: j7xJnUpGLL3cRfgfrEEduEIKUpc.roa (raw, json)
Hash identifier: +lRxqWNv3iRZKKl98yv3gN1uN0zKT5nJFJPb1xIqH+g=
Subject key identifier: 8F:BC:49:9D:4A:46:2C:BD:DC:45:F8:1F:AC:41:1D:B8:42:0A:52:97
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0193C8B5DEB1B633BFA061B71C6F7C295343
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/j7xJnUpGLL3cRfgfrEEduEIKUpc.roa
Signing time: Sun 15 Dec 2024 05:06:22 +0000
ROA not before: Sun 15 Dec 2024 05:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41457
IP address blocks: 192.40.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c8:b5:de:b1:b6:33:bf:a0:61:b7:1c:6f:7c:29:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 15 05:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbc499d4a462cbddc45f81fac411db8420a5297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:14:b8:00:69:7e:40:3d:08:cc:d6:44:fe:
6e:eb:9f:8e:9f:7c:c0:0f:0b:e4:07:29:73:87:05:
d6:46:ca:ef:f9:eb:ca:f4:1a:de:6b:c4:8d:8d:d0:
90:1b:2b:52:d4:e2:66:9f:5a:b5:26:1d:bc:c9:cb:
0b:5a:c5:28:8f:78:a5:9d:95:a7:65:52:2e:bc:7d:
9d:ed:ab:d4:a2:70:ee:19:59:56:1f:bd:1b:aa:ed:
84:35:84:78:9b:c4:2b:e4:d0:40:64:af:c2:09:ad:
e9:3d:d5:1f:18:fe:b0:ee:0d:35:10:37:58:a0:85:
16:93:8b:15:e2:7d:a5:a9:88:81:28:ee:d0:49:b6:
1c:cc:d8:33:c6:ba:c6:e1:51:75:40:e6:00:aa:b2:
c3:55:72:fc:a9:59:8b:13:37:7d:1e:4b:af:98:f1:
1e:27:ea:6c:e9:3d:93:1a:92:75:61:8a:fd:3d:fa:
fd:44:42:d1:8b:e7:95:e2:8d:9a:31:24:4a:94:a4:
a9:5d:51:21:bf:6c:41:c1:1f:2c:6c:97:21:3c:f4:
47:bb:dd:1b:bd:5d:39:04:4c:91:b8:62:e3:1d:e0:
57:c4:57:ca:2d:55:ee:c8:b7:05:8f:5a:f5:79:54:
a0:57:7d:63:0f:32:6d:ca:0f:62:a2:d4:f2:29:3d:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:49:9D:4A:46:2C:BD:DC:45:F8:1F:AC:41:1D:B8:42:0A:52:97
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/j7xJnUpGLL3cRfgfrEEduEIKUpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ec:26:f1:14:8d:11:6f:aa:3b:bb:15:47:df:3e:a2:d3:c3:
3a:b7:1e:5c:d6:22:fa:77:ba:5a:4b:2c:34:4c:05:0d:2e:4b:
60:1a:c0:b6:08:cf:45:9f:c4:39:95:90:e5:93:3f:b8:12:74:
e6:b0:f6:b7:97:2e:89:f2:f0:97:3a:40:38:50:a1:38:69:79:
b7:91:85:0d:8b:fc:f9:27:b4:bf:7d:51:a2:36:10:40:63:49:
1d:76:8b:cd:1d:1a:81:61:c9:e2:3a:e6:e9:46:f5:cc:6b:c7:
da:2f:1f:56:04:2b:3a:5d:79:d7:7e:e2:73:22:6d:b9:99:1e:
58:e7:b1:7a:d1:36:23:f5:fc:da:b5:98:95:85:4f:07:c3:33:
f3:71:9e:9a:c1:9f:25:19:ed:a1:cf:c6:5f:a5:b4:b5:90:24:
51:3e:aa:32:ad:3e:ba:c1:ba:42:82:08:cf:2f:f6:6b:fd:e9:
f9:fa:63:94:7d:ca:72:94:f8:ae:9d:7b:86:5f:be:b9:7f:82:
fc:91:85:5b:77:f9:75:63:cd:a5:9b:97:6d:27:8b:fb:05:16:
61:d9:2f:52:37:38:35:7b:06:95:e1:c9:b5:ae:31:42:45:e6:
ad:b2:09:b7:7d:e6:86:a5:18:93:85:3d:58:8f:d2:aa:bb:cd:
54:7b:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:36 2024 by rpki-client on console.sobornost.net