Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7UO-C-nMLqMaex2detO9Mj9WUBI.roa
File: 7UO-C-nMLqMaex2detO9Mj9WUBI.roa (raw, json)
Hash identifier: cJRuumyQF1GdPMXIJM0D28Z4BQlWdR0ZhND1oQokUUY=
Subject key identifier: ED:43:BE:0B:E9:CC:2E:A3:1A:7B:1D:9D:7A:D3:BD:32:3F:56:50:12
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019372CBFA03862CD24515BBFD35CA9F2DEE
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7UO-C-nMLqMaex2detO9Mj9WUBI.roa
Signing time: Thu 28 Nov 2024 12:43:10 +0000
ROA not before: Thu 28 Nov 2024 12:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59867
IP address blocks: 31.133.36.0/23 maxlen: 24
31.133.36.0/24 maxlen: 24
31.133.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:cb:fa:03:86:2c:d2:45:15:bb:fd:35:ca:9f:2d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Nov 28 12:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed43be0be9cc2ea31a7b1d9d7ad3bd323f565012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:d6:a0:44:d0:15:23:60:57:e2:1b:e5:11:
7e:3b:fb:68:4e:80:ba:24:19:10:22:3d:60:b5:05:
f8:82:ba:ac:83:49:b4:d3:0e:a7:2c:02:dd:bf:7d:
70:76:e1:5f:8e:e4:63:11:d1:fc:5d:ad:30:0e:f4:
83:9e:68:66:46:2d:5d:e1:b7:a3:12:88:2a:27:2c:
bd:be:5d:67:b5:3b:8b:d6:fc:34:cc:87:2d:ec:d8:
bc:5c:75:8f:75:d1:f5:28:34:03:46:42:32:4b:f5:
30:f1:f4:a4:12:3e:6e:01:70:c4:7d:b8:99:4b:bb:
c4:82:ad:b9:0f:36:03:a4:c5:5e:67:c9:4f:e8:f3:
f9:60:3e:f8:c3:ae:a1:0e:7b:60:7a:64:30:be:b0:
f8:1c:c6:31:f4:cc:ec:51:ed:c2:67:b7:7b:b2:91:
64:5a:17:e0:fb:c6:11:96:1f:c1:a7:aa:d7:1f:c1:
2e:35:82:19:d4:de:9b:7e:d0:f9:1e:6e:b5:44:eb:
ae:4a:1c:7e:c9:34:e0:c9:5f:ee:70:9d:12:52:67:
4c:e8:0a:0e:80:de:bf:47:7b:54:57:ad:d4:1d:20:
94:7d:2a:3b:1a:e2:e0:1d:e5:ee:03:44:52:a0:f3:
e5:ef:aa:f4:5d:f8:a9:9a:6a:90:5d:8f:88:9f:0a:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:BE:0B:E9:CC:2E:A3:1A:7B:1D:9D:7A:D3:BD:32:3F:56:50:12
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7UO-C-nMLqMaex2detO9Mj9WUBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.36.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a3:f3:f7:ee:5b:29:6a:60:50:e0:e1:0e:da:cd:3b:bd:5e:
60:0d:8b:3b:ff:a0:de:5b:52:87:bd:a5:62:30:e0:da:2e:0f:
40:44:9e:76:91:04:70:45:2e:f0:63:e1:5b:29:5b:7e:f2:b1:
b7:05:16:3c:26:d3:5f:ce:17:9a:b2:5d:64:bb:b7:d3:22:83:
76:7b:b2:4e:c8:38:e0:46:12:b2:9d:8a:22:9b:bf:1f:1b:69:
98:4d:85:3c:96:5c:db:a3:9f:bf:f1:5f:3f:f1:f8:3d:fc:8f:
b7:5f:0d:3f:de:c2:ce:de:2c:34:d9:83:b8:81:95:e1:f4:0d:
45:2b:c0:01:69:ba:6a:05:46:18:b9:89:70:72:a0:74:db:51:
73:bf:8c:27:6d:7e:08:f1:b5:39:0b:e8:be:0e:2b:cb:4b:4a:
b1:90:ca:76:ca:7c:93:25:7b:ec:37:d4:91:17:04:9d:92:fd:
7a:8f:ee:ad:34:12:17:4b:60:7c:56:30:f5:e3:2b:a5:3f:6a:
53:05:34:0f:b9:98:4a:ec:df:6d:19:f8:ec:00:2b:ed:2c:c4:
5c:9a:89:a0:82:7c:ff:41:cb:7b:89:6a:a9:17:4a:80:75:77:
c5:ee:96:47:b3:9b:d8:c2:1c:37:63:8d:c7:c4:02:e6:58:1f:
34:11:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net