Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/I_OG3KByTDDwoRTGciazJkwHxnE.roa
File: I_OG3KByTDDwoRTGciazJkwHxnE.roa (raw, json)
Hash identifier: WIRHN3oq5YuiImqPyUzr3LYlUC1Ybb9TQgQXGkIbTtw=
Subject key identifier: 23:F3:86:DC:A0:72:4C:30:F0:A1:14:C6:72:26:B3:26:4C:07:C6:71
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441517320C671782E21DFAA888259D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/I_OG3KByTDDwoRTGciazJkwHxnE.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206385
IP address blocks: 212.46.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:17:32:0c:67:17:82:e2:1d:fa:a8:88:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f386dca0724c30f0a114c67226b3264c07c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:33:dd:5b:73:30:90:b6:ca:e1:2d:f8:b3:3e:
2d:ec:c9:3e:79:66:c2:96:34:6f:33:3b:83:59:d6:
7e:e4:b3:b7:17:34:f0:22:19:13:3d:a7:52:7c:32:
22:b9:1c:e8:37:d3:8d:f7:46:37:03:27:4d:df:0a:
2a:7e:51:e8:1b:f6:10:d3:8f:36:86:fb:db:36:d4:
04:14:e9:55:ab:95:1a:e4:2f:5a:bb:92:7a:b3:38:
17:74:5f:0c:f4:98:46:c3:1f:9c:25:94:4b:c2:67:
a3:54:50:cf:8e:d9:dd:5c:63:2e:5f:7e:f8:da:f0:
3c:1f:74:09:51:69:56:15:74:2b:7c:c4:15:c3:4b:
ff:8c:79:ac:65:af:ec:d2:d8:ef:81:33:50:63:47:
e7:63:73:cc:94:7a:72:b3:d4:2c:11:9b:90:a6:93:
bb:3d:da:2d:5b:3c:b0:02:bb:43:b6:7e:74:fa:84:
b2:f9:27:24:85:04:6a:c5:85:cb:47:8b:3f:e8:d2:
d4:c2:65:ce:41:65:8c:e5:6e:3b:26:76:4f:e6:84:
84:d1:c1:0e:1b:a4:00:f1:06:0e:d2:96:03:28:2c:
c8:be:f9:92:40:ce:eb:40:d0:21:c8:01:a0:87:10:
4d:ee:2d:16:0f:83:44:ae:f7:74:b9:3f:0a:f4:a0:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:86:DC:A0:72:4C:30:F0:A1:14:C6:72:26:B3:26:4C:07:C6:71
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/I_OG3KByTDDwoRTGciazJkwHxnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4f:e1:4b:4d:f7:65:55:fe:d9:46:c3:92:a1:39:c5:2c:cc:
91:4c:bb:9f:0e:f8:63:6e:cc:bc:d7:af:02:1c:1a:c0:f2:1e:
16:b7:f8:f5:d8:25:88:3b:4e:ae:33:29:b7:57:ce:39:61:9a:
5c:4d:b5:b5:5f:38:32:2a:91:48:cd:b6:35:a1:8a:fc:c6:27:
6f:6c:bc:65:1e:42:bd:19:f9:05:a5:42:c9:fb:a3:57:ae:b7:
0f:53:ae:56:a9:c9:74:10:06:27:aa:37:f0:5f:32:48:4d:49:
ed:80:03:10:24:95:f5:79:ee:03:60:74:19:f8:e5:a5:69:eb:
31:37:f1:7c:6c:a9:2b:c2:09:8f:43:43:61:4b:97:22:81:a5:
d6:b7:17:a4:32:9c:74:7e:21:6d:ae:9e:7d:71:b8:ad:e2:ec:
cf:ea:bf:a6:41:61:d9:eb:5f:f2:63:6d:d1:92:79:62:ab:af:
50:fc:d7:86:2f:b2:c5:48:77:37:59:50:70:45:47:14:a8:c0:
64:1e:ab:48:5f:87:b0:3b:1f:ad:3c:10:18:0d:4c:03:ae:c9:
23:ed:e8:20:db:ab:9b:d4:21:d7:66:ee:1c:89:77:19:5d:82:
e3:bd:8a:e0:76:1c:86:d1:92:0a:79:a5:65:e7:50:f5:07:3c:
fc:32:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:22 2025 by rpki-client on console.sobornost.net