Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/5YpjNXWo0hOw1Gjc4uU21sAHQQY.roa
File: 5YpjNXWo0hOw1Gjc4uU21sAHQQY.roa (raw, json)
Hash identifier: DDtxwLpSQk3pzLw8forPF2b6PcZ+IUISbk4SQiRt+yc=
Subject key identifier: E5:8A:63:35:75:A8:D2:13:B0:D4:68:DC:E2:E5:36:D6:C0:07:41:06
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 018CC94D7DEF9EDFBABDF33823175CFAD85C
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/5YpjNXWo0hOw1Gjc4uU21sAHQQY.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48016
IP address blocks: 185.57.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7d:ef:9e:df:ba:bd:f3:38:23:17:5c:fa:d8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e58a633575a8d213b0d468dce2e536d6c0074106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:53:80:62:3d:a5:dc:64:ef:42:f8:c4:73:
af:94:3a:30:df:28:e6:92:b9:ff:91:d6:6c:8d:15:
5f:ed:f2:82:ca:e3:f3:db:53:38:a7:09:19:eb:c5:
65:5e:91:bb:c2:58:3f:5e:40:c6:ec:8c:c7:b6:dc:
af:ea:b3:2c:d7:3c:75:65:b8:c0:24:c2:52:ed:bf:
2b:95:c2:44:3b:f0:f2:a2:fa:77:b3:61:27:dc:7d:
b4:34:7e:90:10:07:00:4f:96:66:8a:d4:ed:14:5a:
f0:7f:b1:69:23:72:0a:73:90:ad:3b:28:cd:b9:3e:
af:65:3c:01:a0:2b:c1:13:94:a6:22:3a:72:09:3e:
27:a4:44:c8:81:0e:77:6a:7a:d3:e4:ed:57:2e:2a:
6a:65:94:13:5b:79:97:08:d2:be:8c:e6:dd:71:2f:
c2:3a:7a:4d:8b:7c:02:41:19:af:4f:b1:a2:e9:9b:
26:10:56:56:cc:3d:5f:3e:98:b6:3c:2e:c2:10:d7:
b9:ae:f7:f4:2c:fc:0b:f7:90:fa:02:40:33:b1:57:
d6:c6:70:49:c5:59:3e:d5:26:b6:bb:bd:90:94:5c:
7b:df:c1:f1:fc:21:bc:47:e2:f2:73:98:a2:17:b5:
7e:db:70:a6:cb:13:33:ca:9d:60:b2:fb:bd:5c:c5:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:63:35:75:A8:D2:13:B0:D4:68:DC:E2:E5:36:D6:C0:07:41:06
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/5YpjNXWo0hOw1Gjc4uU21sAHQQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.18.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:b6:a7:09:8c:93:8b:76:e5:07:0e:81:2e:3b:4e:dc:a1:
75:23:6b:68:c7:c8:8f:7d:04:bf:0a:70:da:b3:3b:74:63:fa:
ff:33:e3:b8:63:a7:c6:75:5c:e6:cc:e8:6e:a1:b3:ba:83:32:
de:01:77:35:93:cc:18:73:c0:c0:23:82:50:e6:29:cd:29:19:
16:45:9b:99:f2:ff:82:03:d5:40:27:79:72:fe:1f:34:cf:a7:
d1:6b:d9:9b:56:52:e1:db:09:aa:06:47:62:4d:89:dc:ae:19:
f8:0a:6d:98:4d:fa:bd:cf:86:52:32:ae:5b:98:5a:0d:47:e0:
fd:37:4e:da:9b:f5:f3:7a:40:5a:4e:ac:b4:f9:9f:a1:d0:ca:
b6:bc:6b:df:a2:c9:96:46:b7:3e:b6:9d:bd:84:8f:57:58:c4:
1c:a3:e5:ef:6d:9b:bd:6f:21:0b:d9:d7:91:0a:e1:07:3a:34:
2f:6b:cc:de:2f:bc:dd:e4:4b:f2:02:5d:ff:e7:f5:70:fd:9c:
70:5e:be:5c:55:d5:39:92:f0:cc:f6:14:9a:b8:2d:02:c7:88:
f5:b2:11:d6:bb:ff:ed:44:bb:95:75:98:b9:a3:78:a1:09:5b:
e8:10:21:0a:4a:15:0c:9c:47:bb:d2:c9:44:84:4f:31:3a:ff:
61:01:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net