Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/XNeMmr2Uoal-CgqNNRfKssFKPjA.roa
File: XNeMmr2Uoal-CgqNNRfKssFKPjA.roa (raw, json)
Hash identifier: gK44oI3HXAklNw7kBRY61BAtMYWhxcfKg3arzdJgHmw=
Subject key identifier: 5C:D7:8C:9A:BD:94:A1:A9:7E:0A:0A:8D:35:17:CA:B2:C1:4A:3E:30
Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial: 018CC7955C8DC113DE2A99C70ED3811048F4
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/XNeMmr2Uoal-CgqNNRfKssFKPjA.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211799
IP address blocks: 185.40.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5c:8d:c1:13:de:2a:99:c7:0e:d3:81:10:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd78c9abd94a1a97e0a0a8d3517cab2c14a3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:ee:e7:82:6e:3f:64:6b:fd:12:17:fb:cc:
5b:ee:d1:ee:80:ad:52:63:36:42:7d:b2:21:27:c4:
c8:a3:11:df:a5:e6:f9:e1:08:c8:a3:01:9c:2b:62:
ba:04:38:83:67:99:6a:98:f4:b2:2e:b3:48:fa:f8:
16:08:2a:1b:eb:40:d5:7a:ac:38:63:48:8b:50:2c:
28:08:b0:e5:cd:d2:bd:26:73:6b:3c:52:62:94:a0:
2c:72:ce:cf:fb:7a:81:b0:92:d5:29:91:28:51:3e:
12:b2:92:2a:90:dd:10:82:8e:78:fe:6d:9e:60:56:
61:2c:ba:96:6a:8c:e4:22:2c:69:e8:83:63:84:41:
7c:df:73:e9:19:90:9e:3a:2e:ed:13:3c:7e:5b:d0:
44:17:e1:9e:f1:3b:4c:12:fd:f5:be:22:66:2c:64:
80:ad:5c:ad:13:11:11:14:91:b9:d0:a0:ad:a8:8b:
3a:ef:f8:1d:c6:84:96:6b:7e:c5:0c:6c:4b:24:91:
cd:43:44:fd:1b:4b:0e:5f:8a:49:56:2a:cb:05:34:
09:1e:a3:30:42:7c:61:86:68:c2:3d:15:6c:6f:37:
0b:d6:b2:ee:74:64:30:c5:ce:85:22:7c:1e:39:d7:
4f:3e:d8:33:1c:1f:bb:9c:4e:04:71:5a:c4:4b:f5:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:8C:9A:BD:94:A1:A9:7E:0A:0A:8D:35:17:CA:B2:C1:4A:3E:30
X509v3 Authority Key Identifier:
keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/XNeMmr2Uoal-CgqNNRfKssFKPjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.17.0/24
Signature Algorithm: sha256WithRSAEncryption
75:85:87:7d:ed:ca:43:dd:ed:dd:26:1c:76:fb:5c:34:e3:9e:
f5:2a:1a:26:f8:cb:31:c9:5a:9d:70:a1:5e:75:31:ed:5a:b6:
53:3a:bc:96:61:66:bb:69:36:7a:7b:24:fb:20:19:5f:a0:63:
d9:89:1f:57:61:4f:bb:40:b9:1a:7a:42:1e:41:02:b9:59:77:
93:67:75:98:5c:22:b0:0b:56:73:a3:14:83:75:28:b6:58:23:
c8:cb:07:1f:34:66:31:32:49:e4:b1:ee:df:11:76:fa:57:29:
83:89:d1:a0:80:6e:2d:f1:6c:41:ce:af:4a:ab:14:ef:3b:1c:
92:01:b5:a2:20:d0:cf:b9:85:4b:01:42:15:8b:a4:ba:c5:98:
fa:4d:2c:2b:ba:cb:43:ed:35:e5:d7:f0:27:49:5f:5c:6f:a4:
7f:27:0b:9b:08:2c:a8:61:3d:93:d5:2d:03:91:0d:96:2a:31:
56:5c:ad:7a:2b:92:4b:98:ee:e7:29:78:5c:be:bd:20:48:31:
20:e0:8e:7f:1d:59:ca:63:40:76:0a:3a:be:77:ff:6f:f1:46:
96:3d:e9:96:89:0c:b6:2f:cf:6a:6f:de:28:53:3b:76:87:2d:
07:fe:da:87:45:71:a9:5f:97:72:0c:ff:1b:b5:14:2c:65:dd:
24:c9:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net