Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pk10CP9FBIjO3mKIuRhsCa0TgkI.roa
File: pk10CP9FBIjO3mKIuRhsCa0TgkI.roa (raw, json)
Hash identifier: hm6a/SqAPK/6yCvXMbAdb/fCEg39rqt3d7Jn+s39Wio=
Subject key identifier: A6:4D:74:08:FF:45:04:88:CE:DE:62:88:B9:18:6C:09:AD:13:82:42
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0193D9C592F2153A39D63BAB3A06D34B49A3
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pk10CP9FBIjO3mKIuRhsCa0TgkI.roa
Signing time: Wed 18 Dec 2024 12:37:04 +0000
ROA not before: Wed 18 Dec 2024 12:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.20.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:c5:92:f2:15:3a:39:d6:3b:ab:3a:06:d3:4b:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 18 12:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a64d7408ff450488cede6288b9186c09ad138242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:59:1e:85:75:48:9f:d4:cf:9b:fb:32:7c:
8e:03:08:7c:fa:31:e8:f0:4b:9b:12:77:02:b0:33:
44:6b:d1:aa:dd:46:01:2b:6f:cd:33:06:1f:47:a3:
a9:18:3a:07:ae:e6:37:38:b8:ed:89:1f:c2:ae:d9:
19:06:85:c8:01:14:ce:ad:7e:e7:2d:7d:d9:86:7f:
56:de:79:6e:c5:23:08:1a:29:a9:64:4a:d6:bf:9d:
de:c6:2a:6d:0a:fe:29:40:6f:c6:47:c1:f6:88:3f:
1a:09:5b:42:72:2a:8f:f1:1d:3c:9c:58:fa:11:50:
44:de:e1:d6:49:99:36:61:e0:41:f7:63:ba:21:cb:
97:5f:bb:3e:6d:85:a3:fc:ba:78:82:3e:5c:d0:2e:
5a:ac:39:c5:14:57:6b:3f:e6:c2:10:80:a2:ab:3c:
c7:e2:3d:1b:ce:31:a5:63:42:02:e4:28:c9:93:ee:
3b:82:ba:a6:b0:09:a9:19:82:14:9d:39:05:fd:bf:
93:53:c7:a3:fa:95:76:a4:1a:06:61:ff:f8:da:88:
2e:f1:5b:f6:a6:f7:ac:30:a1:5e:57:33:c2:96:00:
e3:63:b9:5b:41:82:61:40:8d:72:11:b7:9c:ac:f5:
e9:a5:cf:c2:2b:28:3d:45:25:db:32:bf:39:49:c7:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:74:08:FF:45:04:88:CE:DE:62:88:B9:18:6C:09:AD:13:82:42
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pk10CP9FBIjO3mKIuRhsCa0TgkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
11:32:2c:38:df:50:a6:6b:92:9d:bc:ac:2e:a0:c2:e1:08:75:
85:50:e7:dc:7d:cd:66:c2:8a:88:ac:f8:58:d1:cf:f1:fc:97:
7e:fa:84:67:3f:17:fb:94:59:3c:81:3a:0c:f1:6e:38:f4:8a:
a5:08:56:5c:50:60:60:f0:bd:32:f6:7a:d5:ec:7f:f4:8a:af:
a9:37:aa:a0:ca:e5:a3:5a:a0:8f:a5:6d:dd:e4:8e:2d:56:a9:
90:0c:f4:7f:2a:ac:50:c9:c7:ea:b7:ae:12:1f:37:b6:f3:26:
61:59:f0:b1:a4:c6:f2:31:7f:43:cb:e3:bb:85:53:66:a3:9a:
30:84:c0:91:93:9e:fd:7b:d9:e4:28:46:8a:71:61:fe:1c:d3:
59:d1:80:cb:02:db:10:e6:74:ea:b8:26:f3:c2:ad:7c:6a:8e:
d9:43:56:42:94:a4:e4:ae:c2:f2:6e:13:a1:4b:f1:66:96:7b:
f7:88:1f:14:fd:f7:f7:21:06:6e:d5:5e:ca:16:b4:de:8c:95:
67:f2:fe:a2:24:25:d5:0a:7e:f7:5c:36:cb:c0:4f:fc:a3:ce:
b8:e6:e5:bf:63:2e:07:cd:cf:41:59:0b:e5:df:9f:4b:02:ef:
ba:78:93:3f:79:45:eb:e8:e2:65:98:d4:bd:0e:a8:c5:f0:b9:
f2:63:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net