Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eVSIDMAZY-kT2DZRZqgXMHaitwQ.roa
File: eVSIDMAZY-kT2DZRZqgXMHaitwQ.roa (raw, json)
Hash identifier: chJ6RD2ugkEX98xK/EECES6mtY8fJGLBHoxqwzU3X2E=
Subject key identifier: 79:54:88:0C:C0:19:63:E9:13:D8:36:51:66:A8:17:30:76:A2:B7:04
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0192B04EF2C7824A36F749665DD6C602EC0F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eVSIDMAZY-kT2DZRZqgXMHaitwQ.roa
Signing time: Mon 21 Oct 2024 18:20:16 +0000
ROA not before: Mon 21 Oct 2024 18:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44213
IP address blocks: 213.137.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:4e:f2:c7:82:4a:36:f7:49:66:5d:d6:c6:02:ec:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 21 18:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7954880cc01963e913d8365166a8173076a2b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:cf:02:e3:be:67:f2:3f:ed:99:4e:4b:5b:
4c:90:00:9a:2d:29:18:06:ea:49:18:21:57:0d:e4:
54:a7:1c:1b:91:25:f8:52:77:88:78:ef:97:0f:82:
90:f1:34:4d:7c:5e:b4:b8:95:3d:26:ca:16:53:50:
d2:4d:eb:b5:2c:01:11:8f:dd:77:87:cb:eb:b0:b9:
c8:65:47:94:e5:dc:33:c8:1f:70:dd:46:ad:19:4e:
3b:07:e0:11:15:6d:9e:6b:c9:4d:76:3a:05:4d:b8:
c5:d9:0f:93:7c:28:22:cc:a2:cd:b0:8e:ff:c4:66:
c2:ea:7b:0b:f9:62:c8:1c:ca:6b:fc:f0:ef:e8:1f:
d4:e8:1f:50:b8:19:8c:7c:11:be:a5:92:a0:d1:ce:
b9:0b:ee:ea:2e:41:35:79:60:7d:f9:ae:68:bd:92:
73:e3:a1:b3:65:be:60:c1:6d:53:bb:31:00:d2:b7:
55:90:93:e4:af:f5:d6:aa:7c:46:ec:6b:4e:16:22:
a3:ec:c6:91:be:7d:d7:98:21:5a:6f:85:9f:c2:a5:
66:ec:71:13:b9:23:68:26:a9:58:f1:bb:f9:cf:e2:
a0:c2:1c:45:7b:6a:55:96:4c:12:24:df:26:63:e7:
5e:77:2c:4a:19:1e:b2:95:83:df:23:ca:ee:44:9a:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:88:0C:C0:19:63:E9:13:D8:36:51:66:A8:17:30:76:A2:B7:04
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eVSIDMAZY-kT2DZRZqgXMHaitwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:90:d6:95:48:28:8f:37:79:c1:2a:7d:84:a2:88:2c:10:
3e:e4:78:2c:b9:cd:c5:52:8b:4f:93:4c:2c:b0:f9:be:04:31:
41:c5:7f:07:be:af:c0:98:18:81:62:56:03:19:2a:db:c4:c6:
35:4f:11:1f:1b:c5:97:9c:5c:33:cc:e3:a3:47:47:b8:6d:45:
c0:c6:c3:6c:9c:9b:b1:3c:c1:b7:42:6b:ce:0e:65:cd:14:2a:
db:b7:55:33:60:a5:e3:55:a6:92:2b:95:75:c8:aa:0d:46:dc:
85:a4:c0:aa:76:5a:e1:2e:06:7c:9c:31:9b:54:3e:a6:f9:79:
88:78:68:c5:60:59:32:42:11:9c:35:2a:cf:6f:73:91:14:e9:
09:a6:b9:8d:cf:21:78:b3:31:24:4b:ec:a4:dd:a8:bf:78:a5:
96:5b:99:fa:0c:fa:19:3d:ef:e7:b3:8e:a3:37:ab:2c:c3:df:
7f:9d:f6:98:12:a6:27:29:d6:8c:85:65:45:84:e1:00:a3:10:
46:da:8f:17:c0:a3:be:d7:d1:f1:58:18:fa:21:77:5d:e1:f2:
3f:a5:8f:b2:02:f4:fd:d1:48:e2:f6:3f:7b:a1:72:0f:a8:0f:
f1:9a:76:dc:af:eb:53:a8:42:e2:34:ec:1a:92:38:58:b3:aa:
9e:94:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net