Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XgWcRaB7spB0eem5A9gaxc2noIo.roa
File: XgWcRaB7spB0eem5A9gaxc2noIo.roa (raw, json)
Hash identifier: 0l0Q/GQQDeciQToTLs55qAeVnw24Q5Pq5YowbYW/8bo=
Subject key identifier: 5E:05:9C:45:A0:7B:B2:90:74:79:E9:B9:03:D8:1A:C5:CD:A7:A0:8A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0193B1F0B4FCA665F8367D791250E3253EE2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XgWcRaB7spB0eem5A9gaxc2noIo.roa
Signing time: Tue 10 Dec 2024 18:59:22 +0000
ROA not before: Tue 10 Dec 2024 18:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30848
IP address blocks: 170.62.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:f0:b4:fc:a6:65:f8:36:7d:79:12:50:e3:25:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 10 18:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e059c45a07bb2907479e9b903d81ac5cda7a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:3b:91:e9:c0:9d:b5:d0:bf:8a:f8:5e:14:
58:86:91:5d:0d:30:05:9c:15:92:1c:18:29:0a:d0:
34:9e:66:0e:64:68:68:e7:c3:84:e8:6f:2a:3c:a0:
67:6f:20:a0:d0:d2:cc:40:85:3c:4a:dc:3d:c8:1a:
89:6b:bb:4e:26:1d:1a:09:fc:07:77:69:8e:16:b6:
a3:74:e5:12:98:4e:47:77:97:b4:6e:30:09:21:a0:
33:9d:78:b4:7b:1f:47:d4:8f:81:a1:4b:40:9c:d7:
4d:cf:88:e7:19:60:34:2d:55:4b:2c:11:19:56:e8:
8e:ab:06:d4:3d:0d:14:9f:3a:c2:46:c5:d5:f2:00:
b9:01:7c:78:9f:7f:3e:f9:4c:d3:af:7d:d1:58:33:
09:2a:fa:da:08:d6:db:55:8f:db:8d:5d:28:9e:62:
12:af:9c:fa:59:43:df:2f:fe:6d:0b:3d:ca:67:6d:
41:a9:d3:4a:ec:72:d4:d0:8c:05:04:31:01:07:64:
ea:10:21:96:02:ca:38:46:d0:4f:9d:3a:5a:2c:7d:
15:40:81:8e:68:25:11:f0:c3:1e:3c:c7:51:ae:23:
11:59:95:f1:37:8e:00:08:c5:4f:8e:98:31:9b:73:
0b:47:f3:ff:7b:24:1a:10:86:f1:5b:7b:18:8b:b5:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:9C:45:A0:7B:B2:90:74:79:E9:B9:03:D8:1A:C5:CD:A7:A0:8A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XgWcRaB7spB0eem5A9gaxc2noIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.207.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bb:92:a2:d3:c7:c7:e8:b5:1c:c7:2a:0a:31:76:42:b5:72:
a7:49:89:b6:08:13:25:f6:23:cd:10:06:2d:16:b2:52:f4:e5:
8a:5b:60:31:a8:4e:4b:f6:e1:72:25:fe:b4:04:4d:b2:00:92:
fb:69:8f:97:81:7a:a9:ff:f6:f1:2b:9f:0b:b8:d8:f6:a2:5a:
0f:8e:74:26:9c:c4:fc:dc:76:48:fe:9e:ff:00:b5:56:46:49:
c5:7b:d3:f3:36:9d:86:92:35:ba:d4:2a:f2:ee:02:ad:5e:29:
9f:dc:b8:33:32:2c:db:a5:87:06:23:60:f7:b2:58:8c:bf:46:
ce:3a:81:5a:54:58:0a:18:e9:f7:13:05:ad:10:b9:60:36:31:
96:50:81:0e:12:09:65:06:56:aa:3b:73:b2:b4:43:9a:8a:19:
35:cf:66:bd:88:9d:55:9c:2b:06:4f:c8:3f:aa:a6:f2:07:ba:
f9:8f:1c:0f:8f:06:6a:e8:52:4c:79:09:f3:fc:4b:05:9f:35:
d8:0d:51:14:b8:14:55:39:d6:86:d1:39:84:c6:04:8d:a2:7d:
3e:98:5f:40:54:36:04:1f:98:6e:af:92:db:e1:3c:7b:e9:e5:
ae:96:ca:ef:59:94:06:c6:0d:7c:17:99:ee:4e:6e:03:d9:36:
18:d1:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:53 2024 by rpki-client on console.sobornost.net