Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hHtxUfIv3SyTt3T5ciPMcWkih1o.roa
File: hHtxUfIv3SyTt3T5ciPMcWkih1o.roa (raw, json)
Hash identifier: nb65FBbefwdAFNM7H5hye0g6clbOGCX+9XjT2wCqTxs=
Subject key identifier: 84:7B:71:51:F2:2F:DD:2C:93:B7:74:F9:72:23:CC:71:69:22:87:5A
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0193AAFEC06079F141F3BDB016BF7F17EA17
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hHtxUfIv3SyTt3T5ciPMcWkih1o.roa
Signing time: Mon 09 Dec 2024 10:37:22 +0000
ROA not before: Mon 09 Dec 2024 10:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:fe:c0:60:79:f1:41:f3:bd:b0:16:bf:7f:17:ea:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Dec 9 10:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=847b7151f22fdd2c93b774f97223cc716922875a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:10:2a:5a:f6:57:45:ff:58:46:14:15:86:
1b:30:66:d6:89:0e:67:fe:4e:db:8c:1f:84:f0:a7:
69:1e:96:57:9e:73:85:a7:8e:d3:2d:d2:96:7f:46:
4c:44:53:f6:88:3d:87:f8:2e:79:d5:2e:f1:39:0c:
a9:a3:9d:1b:e8:22:9b:af:8e:de:b2:34:6d:2c:3a:
0b:e1:2e:fe:89:1e:fa:7e:ab:86:a6:b2:3b:59:9a:
bb:29:ec:04:8d:aa:95:94:f3:78:12:5f:9e:3a:70:
5a:de:c2:26:10:05:e8:1d:5f:1c:e9:ba:96:6a:fa:
80:a1:90:bf:95:73:82:2c:a1:45:18:25:e3:f8:61:
83:93:54:af:bd:fe:50:18:af:12:8e:63:64:65:d0:
4f:ff:d4:b9:0b:58:21:d3:64:90:3a:c6:13:b0:d2:
67:2f:a4:05:24:11:0b:6b:33:22:ba:a4:b8:6c:23:
d8:04:2b:76:a2:7e:f3:a9:dd:4e:a4:6b:12:5d:48:
cc:ef:9c:64:1c:29:77:a5:9a:d6:ca:75:3b:34:3d:
23:de:7f:7f:66:2a:a5:15:e0:ea:b1:25:d8:18:5d:
bf:de:fa:cb:50:2f:d4:4d:cb:da:47:61:89:0d:b6:
ef:37:d7:7e:6b:f3:44:b9:0a:33:2c:7d:9a:5e:0f:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:71:51:F2:2F:DD:2C:93:B7:74:F9:72:23:CC:71:69:22:87:5A
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hHtxUfIv3SyTt3T5ciPMcWkih1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:b9:46:c9:43:aa:eb:57:a8:15:03:75:64:2c:b7:a9:57:
1d:20:90:33:01:af:48:58:3b:e5:f6:5d:f4:30:e1:48:83:3a:
ef:8c:fd:fa:3c:ff:b0:bd:3d:2c:fa:c0:b3:20:a4:40:6e:f5:
86:35:fb:71:92:19:b1:15:06:89:94:31:7e:8a:4a:12:c0:f3:
5e:f4:a0:a0:b2:bc:76:cb:d0:94:d1:69:87:43:c0:af:de:bf:
bf:2e:25:be:36:4c:08:ae:06:17:c1:96:77:f7:29:8e:66:c7:
de:a2:78:47:e2:a3:4b:3f:cf:0f:80:c1:45:25:44:92:1d:01:
55:6a:09:25:cc:75:fc:0a:05:f0:d1:7a:77:93:c5:a2:df:0a:
4e:8c:5d:cc:5d:96:77:18:6c:58:a3:81:88:94:a1:5d:0f:2e:
f5:f0:c1:d1:0b:d7:82:95:05:ac:b9:2f:b6:62:53:cb:0c:24:
dd:ed:bb:a3:f5:09:7f:d1:37:7f:ee:59:6e:ab:6b:66:3a:80:
d6:9d:04:4a:df:66:31:e3:e6:39:0d:b7:4e:97:10:21:7f:14:
1a:45:76:8e:c6:0d:8a:54:bd:94:84:cf:86:b5:15:2c:89:25:
69:c9:67:62:40:06:eb:e4:c7:d6:2d:95:d6:90:10:d3:15:04:
da:3c:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net