Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hbIHgbTCwdqvNy6SWFnwZDuoZMs.roa
File: hbIHgbTCwdqvNy6SWFnwZDuoZMs.roa (raw, json)
Hash identifier: 3vaXwIvhOHKDFPE4eygbGqkRxD9YODldoBrYF7DR8IM=
Subject key identifier: 85:B2:07:81:B4:C2:C1:DA:AF:37:2E:92:58:59:F0:64:3B:A8:64:CB
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0191E69D8590EC177217627161706DB2A62B
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hbIHgbTCwdqvNy6SWFnwZDuoZMs.roa
Signing time: Thu 12 Sep 2024 14:22:48 +0000
ROA not before: Thu 12 Sep 2024 14:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214210
IP address blocks: 31.41.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:9d:85:90:ec:17:72:17:62:71:61:70:6d:b2:a6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 12 14:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85b20781b4c2c1daaf372e925859f0643ba864cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:19:f5:f0:03:0f:80:90:14:c4:12:a3:e4:
e6:b3:67:92:43:fc:cd:17:90:11:1f:a4:48:c1:bb:
94:20:66:05:e9:84:72:ad:86:8a:5d:54:23:a8:1b:
33:ba:92:f2:1c:9a:a7:71:50:ac:58:72:85:5e:ba:
89:3f:ae:30:2c:a4:eb:0a:ff:df:76:8e:74:6d:f1:
7d:78:01:0e:f1:44:e7:07:66:b5:d7:0e:eb:91:df:
f1:d2:db:e5:0a:70:1c:60:90:b6:91:07:83:b5:b9:
18:e3:f9:53:a7:c8:c9:7f:1d:67:4e:54:00:73:81:
bf:6b:72:1b:60:f0:0e:07:13:16:96:6f:10:e3:31:
83:fa:dd:65:a8:f1:1e:e7:29:47:b4:bc:d3:7e:7b:
8a:6c:c3:b8:c7:e0:71:80:4c:4e:6a:43:71:a5:14:
aa:c4:68:e3:06:03:86:39:86:15:6e:96:36:c3:7b:
46:2a:8a:69:a7:55:28:40:26:46:c4:2b:d9:91:34:
7d:e1:96:5c:64:05:ba:fe:95:6a:e3:24:c0:ad:08:
8c:c1:35:57:b1:e6:e4:6d:93:a0:9d:63:f9:8e:ad:
13:74:52:4b:fe:4c:37:cb:23:7c:ea:d0:d0:13:e0:
b0:5c:17:07:2d:0c:45:aa:18:f1:b0:52:92:fa:6b:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:07:81:B4:C2:C1:DA:AF:37:2E:92:58:59:F0:64:3B:A8:64:CB
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hbIHgbTCwdqvNy6SWFnwZDuoZMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:67:9d:47:77:2c:86:9f:c9:81:8b:37:34:b5:38:c2:85:9d:
41:47:77:9f:53:a5:43:8e:53:15:29:3a:fd:b5:60:10:c5:60:
db:77:47:5d:86:3b:91:58:0d:42:47:a6:da:e1:84:79:e1:a0:
73:7c:9a:f1:f8:c1:b1:4b:8c:e6:d5:19:e9:75:6c:b8:4b:57:
79:c2:4e:e8:13:c9:f0:e9:24:42:5a:1a:2e:78:5a:2c:2a:87:
de:54:c2:8f:1b:ac:af:a1:fe:66:a1:c0:09:67:4e:f1:f1:29:
05:a3:25:84:b4:e1:9b:7a:44:50:cd:86:7a:16:77:70:5d:e6:
2e:e4:9f:f1:7e:2e:17:2d:60:95:2a:fb:65:1a:18:0b:3e:7b:
55:0d:5a:38:16:bb:5c:ee:03:ff:1f:3c:4c:d7:44:32:3e:23:
26:df:a6:a1:82:24:2c:4b:e1:e6:f7:b2:99:e3:0c:c1:b1:96:
72:f9:65:96:1b:0b:e9:c6:42:67:0a:77:e6:d4:a7:56:59:4e:
fc:ac:99:46:6b:c1:a3:c7:16:98:d9:ab:87:6d:85:45:95:00:
e1:18:c8:46:63:51:9b:3e:55:f9:e3:1b:22:a0:12:26:71:48:
bf:0d:d6:8e:c9:28:03:dc:b8:5d:cc:c2:7c:1a:73:52:0f:a1:
9e:d2:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net