Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Hzs7GErjn_iBURttX2fTUzDtZ-8.roa
File: Hzs7GErjn_iBURttX2fTUzDtZ-8.roa (raw, json)
Hash identifier: gOedYqljSOiDGL1ys32oPzvAULJQ62m51k1iSLmy52E=
Subject key identifier: 1F:3B:3B:18:4A:E3:9F:F8:81:51:1B:6D:5F:67:D3:53:30:ED:67:EF
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0193C01DFF2BD2659EC5FA34165A32171AC6
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Hzs7GErjn_iBURttX2fTUzDtZ-8.roa
Signing time: Fri 13 Dec 2024 13:03:31 +0000
ROA not before: Fri 13 Dec 2024 13:03:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 138.124.13.0/24 maxlen: 24
138.124.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:1d:ff:2b:d2:65:9e:c5:fa:34:16:5a:32:17:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Dec 13 13:03:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f3b3b184ae39ff881511b6d5f67d35330ed67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:9f:72:6f:8a:91:60:fd:0c:f1:dd:6a:e7:
bb:9a:96:d4:98:b4:9b:fd:15:43:91:a7:37:27:be:
13:77:89:12:b2:fd:8f:7a:6c:05:ea:53:d7:8d:c3:
25:26:bf:6f:b0:a1:af:9b:b0:c9:12:ad:b4:66:be:
01:ea:f9:ca:89:7c:51:2f:70:b2:27:10:cb:69:01:
24:ef:96:db:25:b6:a0:1a:69:c5:56:dd:fb:f4:77:
76:a8:72:4e:62:4f:0f:29:d1:64:8f:77:2e:88:6b:
5a:95:c8:58:f8:52:84:7b:af:bf:b7:79:e9:b3:f2:
97:d6:a3:b6:21:0e:c0:9e:c5:91:29:a5:48:9e:0a:
43:d0:11:ac:31:16:78:d2:e8:c5:eb:1b:46:0b:c1:
ec:f0:59:69:71:e0:11:3e:ff:18:6c:ed:f0:cc:62:
19:2b:fb:e1:d2:9f:d9:9f:e9:f7:df:68:e2:34:b8:
7c:bd:77:fb:4b:3d:7e:41:45:d8:b1:e6:5a:bf:97:
eb:e9:9a:48:77:5b:98:fa:46:7f:67:42:d4:c6:b9:
0a:d9:e5:c9:2a:09:8d:60:ab:78:b7:42:f9:81:e6:
58:46:78:60:f6:5a:83:c0:d7:b8:fa:f8:30:82:86:
c3:ae:c0:5b:bf:be:92:0d:90:c7:10:72:bc:1c:28:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:3B:18:4A:E3:9F:F8:81:51:1B:6D:5F:67:D3:53:30:ED:67:EF
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Hzs7GErjn_iBURttX2fTUzDtZ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.13.0-138.124.14.255
Signature Algorithm: sha256WithRSAEncryption
6c:b4:42:a0:90:5d:c5:f2:40:2a:37:7b:9f:0b:99:d4:63:8c:
bc:51:4c:f9:de:b7:09:f5:6f:b0:0c:a4:4e:8b:ac:8c:c4:5d:
17:c6:2f:2b:29:7c:7f:33:3b:37:29:65:cc:61:5e:92:6b:6f:
c3:1d:d3:db:91:6f:12:45:42:f7:b2:9e:5c:93:79:48:63:48:
dd:29:9c:e6:c0:96:80:c2:48:07:77:ee:c2:a0:38:78:c4:50:
42:ac:13:83:35:61:54:97:e2:dc:e0:b8:83:73:11:3d:58:8c:
e0:b3:89:9b:06:69:c7:1e:b8:d6:33:00:69:ee:30:76:66:46:
a7:20:e1:97:9b:d2:ba:a0:3e:ed:b7:b3:e2:28:2b:1f:10:a6:
45:9b:77:34:15:5a:67:c6:bb:34:a3:8f:92:1d:35:8f:ad:3d:
26:7e:19:aa:53:6c:3e:58:0a:18:16:20:3e:00:47:5d:3e:e3:
5b:8d:c0:ed:ef:2d:8b:83:64:44:76:d0:de:3a:be:75:d0:43:
a5:fd:09:7a:eb:ef:d6:4d:9d:06:ca:64:ac:55:d1:fa:44:84:
5a:b3:bd:e3:e8:cb:bf:60:94:95:76:d1:10:0a:3a:6c:b3:4e:
a3:c5:96:e2:a3:85:ac:0b:9f:d2:2e:2f:45:4a:f5:12:96:f0:
c9:fb:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net