Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1OoSbnplx9UuuILS1ErEE3GanzA.roa
File: 1OoSbnplx9UuuILS1ErEE3GanzA.roa (raw, json)
Hash identifier: NqJDIs7CYKcEh9rQly7mZgZSK1cJn5dUNdgGnxMrXwE=
Subject key identifier: D4:EA:12:6E:7A:65:C7:D5:2E:B8:82:D2:D4:4A:C4:13:71:9A:9F:30
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF33597038473EDB60C11AE8D8185F
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1OoSbnplx9UuuILS1ErEE3GanzA.roa
Signing time: Tue 02 Jan 2024 06:32:00 +0000
ROA not before: Tue 02 Jan 2024 06:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207444
IP address blocks: 147.234.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:33:59:70:38:47:3e:db:60:c1:1a:e8:d8:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ea126e7a65c7d52eb882d2d44ac413719a9f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:71:fc:f4:53:58:2d:2a:fe:96:83:22:33:
87:45:59:98:73:6e:26:75:5c:af:1d:10:78:0a:79:
19:2f:fe:01:48:35:f9:34:9f:c0:7d:ba:b7:37:db:
30:24:d6:3a:42:09:e3:84:6d:f7:84:b3:a3:9f:3c:
85:ea:a2:3c:2c:bb:5b:f7:47:65:82:23:b8:0a:5a:
05:41:0f:74:32:cd:af:a1:a7:c2:70:16:a3:f6:2b:
63:3f:8c:98:76:e2:f6:7e:a8:d7:d5:52:0e:e2:a1:
8f:85:77:b3:65:a9:4d:e1:39:67:e2:ad:58:d1:49:
2f:ab:e3:de:51:fb:1d:92:be:52:9c:f0:ba:7e:40:
67:be:fb:aa:63:f4:a1:a8:20:c5:99:4e:95:db:a0:
67:4c:3f:21:44:98:da:da:82:07:1c:cc:71:88:7b:
e9:a1:6c:6f:20:8d:5d:cd:44:ae:11:a9:1d:cd:03:
be:f7:be:30:00:cf:77:f4:de:45:94:91:9c:5a:66:
20:d9:2c:45:9f:c3:ae:4f:98:0d:a8:21:c4:6f:79:
82:9c:2f:45:1b:52:f1:06:c5:4b:fb:21:3e:90:49:
76:c7:37:88:8b:45:b2:79:04:e6:53:1a:9d:fc:36:
3d:65:aa:b7:9c:ba:68:06:01:b6:6d:cd:09:13:59:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:12:6E:7A:65:C7:D5:2E:B8:82:D2:D4:4A:C4:13:71:9A:9F:30
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1OoSbnplx9UuuILS1ErEE3GanzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:65:98:10:5e:ea:b2:44:60:14:02:92:3a:7d:23:f3:99:57:
5c:6a:c8:70:0e:c9:77:33:a8:78:a6:d1:b5:76:f4:80:0b:d2:
a8:56:5f:6f:a9:f5:a7:21:1d:34:3b:a0:0a:8f:f3:11:d8:0c:
cf:57:37:54:c0:da:87:90:3a:b0:2f:23:dd:e0:ec:e3:ad:46:
0b:3a:b9:78:03:f9:a8:2b:ca:ae:02:62:e9:e2:04:fd:f8:a7:
37:1c:92:f1:db:55:1f:32:08:67:4f:90:e2:80:3e:2a:d2:8e:
53:25:95:73:18:e5:c0:e3:c9:a8:ff:38:9b:ff:c8:dd:ac:ff:
38:a6:65:1b:a9:ef:9e:87:77:a6:f2:31:16:42:89:8b:a6:c8:
c7:6a:3f:3c:2c:ae:a5:81:f8:5b:34:03:8c:95:f1:a0:f4:89:
18:35:17:d6:1a:1f:26:ac:f4:58:61:c7:35:d4:c7:23:f8:0f:
26:ad:97:8e:e7:b3:6a:32:10:df:06:19:69:fd:92:23:87:a1:
b2:09:cf:b1:7c:64:82:5f:d5:93:bd:33:85:b6:9e:36:d3:43:
3f:a2:4f:73:c2:6e:15:40:42:15:02:00:86:44:01:72:90:ca:
00:71:68:93:ec:55:fd:f8:af:1f:d5:4b:43:65:cb:23:88:ff:
ea:2f:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:50 2024 by rpki-client on console.sobornost.net