Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SlmK9pDS4vXMuVhrvJSqjTiTwv0.roa
File: SlmK9pDS4vXMuVhrvJSqjTiTwv0.roa (raw, json)
Hash identifier: OX30DtOOKw7TI/M8lp2uqhHSTA572Nr7w1LLPb2J2eA=
Subject key identifier: 4A:59:8A:F6:90:D2:E2:F5:CC:B9:58:6B:BC:94:AA:8D:38:93:C2:FD
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019369DB2C6146B7C0507EE88B98BCA30503
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SlmK9pDS4vXMuVhrvJSqjTiTwv0.roa
Signing time: Tue 26 Nov 2024 19:03:11 +0000
ROA not before: Tue 26 Nov 2024 19:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.254.0/23 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:db:2c:61:46:b7:c0:50:7e:e8:8b:98:bc:a3:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 26 19:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a598af690d2e2f5ccb9586bbc94aa8d3893c2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:a5:1d:53:59:4f:43:38:80:04:e6:63:db:
f0:64:79:e1:7d:e2:a9:a6:e7:5a:1d:c4:db:5e:cd:
2a:3e:4e:5a:37:b7:d8:ac:12:7e:ec:30:e1:5a:b0:
5e:bc:a2:b6:e8:0e:5b:ae:41:23:52:cb:7d:38:f4:
85:73:a5:25:3d:1e:32:8f:1e:2a:d2:d5:d1:20:42:
81:0a:5b:c3:f5:85:6e:25:27:d3:ac:ce:e8:38:cd:
72:a8:4f:44:dc:f5:66:9d:b0:91:3a:a2:dd:6e:55:
3d:c7:12:a9:ea:6e:59:00:da:ad:38:e6:fc:59:5a:
e1:e7:2e:35:f1:4d:18:a6:d4:35:94:b2:67:17:37:
0d:70:66:8c:6d:e1:e5:09:b4:62:cd:b9:f0:a0:1e:
e9:60:a0:12:19:a5:a8:91:ab:80:b0:25:59:de:38:
13:a0:51:35:ff:89:a6:67:a5:96:25:11:80:6e:4b:
01:07:1f:67:80:ed:ff:c7:76:02:1f:f5:50:86:96:
5e:8c:1e:38:74:ec:16:00:0c:77:ce:ab:17:39:a0:
43:6a:d1:70:84:a2:73:6a:09:37:49:65:6c:1c:b2:
67:cc:bc:40:44:89:34:ca:71:cc:e7:6b:d3:f4:22:
1e:b9:6b:be:30:0d:32:55:0c:34:a1:56:72:8a:b7:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:8A:F6:90:D2:E2:F5:CC:B9:58:6B:BC:94:AA:8D:38:93:C2:FD
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SlmK9pDS4vXMuVhrvJSqjTiTwv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
109.122.254.0/23
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1f:44:32:93:ef:2e:ee:bd:7e:d4:a7:dd:9b:8f:80:a8:c7:
e1:a6:0d:37:a0:36:c1:98:49:4a:41:ad:78:e8:5e:ab:fb:dc:
93:b4:0b:66:d9:6c:17:27:50:fe:a6:39:c1:8d:04:47:b3:34:
32:31:0b:f6:50:0f:9c:ef:b7:6d:63:2a:79:66:52:ab:71:7e:
ea:04:db:f7:26:dc:0b:af:84:e2:06:fb:f0:b7:46:7b:43:aa:
dd:ba:85:5a:c6:59:9e:76:45:41:7b:f6:ba:e3:d3:71:58:f1:
0e:32:81:ac:84:d8:bc:bd:3a:31:0b:a8:93:cb:b8:8f:86:e7:
e7:24:6c:29:88:e7:27:05:2b:45:57:30:c6:bb:f3:2a:08:56:
80:02:75:3b:d6:59:e9:9b:6d:bb:68:55:a2:ce:2f:37:86:b8:
c3:74:33:22:b3:57:87:94:af:ac:ae:76:2a:be:34:2c:d7:40:
13:94:da:94:13:15:3c:82:0e:2b:0e:e0:7a:e5:2a:a2:23:6e:
c0:a2:82:09:d1:d9:cd:72:6d:be:1f:b8:52:e4:92:3f:3f:40:
38:09:ba:bf:7e:7c:72:f8:bb:1a:30:07:b9:1c:8e:dd:71:74:
e0:43:6c:a7:60:e8:c3:93:87:e2:4c:61:e6:7d:92:7e:83:b9:
3e:a5:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net