Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f9dbZAf0f8J7Fp3BvIaoDC6v-24.roa
File: f9dbZAf0f8J7Fp3BvIaoDC6v-24.roa (raw, json)
Hash identifier: i3PSLIcZRBsmJ6+8hdCbd+jVrp/SFEhh3L6QbmKE2fo=
Subject key identifier: 7F:D7:5B:64:07:F4:7F:C2:7B:16:9D:C1:BC:86:A8:0C:2E:AF:FB:6E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01902AAA7D0B0A2232AE2EB0D702F203EE26
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f9dbZAf0f8J7Fp3BvIaoDC6v-24.roa
Signing time: Tue 18 Jun 2024 09:25:34 +0000
ROA not before: Tue 18 Jun 2024 09:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 151.247.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:aa:7d:0b:0a:22:32:ae:2e:b0:d7:02:f2:03:ee:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 18 09:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fd75b6407f47fc27b169dc1bc86a80c2eaffb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:8a:79:91:4e:08:be:b0:dd:b9:dd:6f:87:
af:11:52:31:bd:72:f6:ba:a7:42:c3:a4:31:25:e4:
8f:0b:93:a4:97:1f:bd:b6:e5:16:2f:9e:6a:93:81:
c2:ca:9c:05:9f:ea:87:78:85:93:46:64:dd:d6:eb:
95:59:9a:4a:1f:c5:76:ae:2c:6e:ed:ec:e3:41:48:
3d:51:44:dc:5e:46:8c:22:5e:c6:bd:d9:3d:19:3a:
26:6d:51:9b:45:95:bc:21:71:20:09:97:d8:c0:d7:
f0:38:33:2c:4a:c1:42:d4:a3:67:6f:88:79:35:90:
68:0c:d3:92:45:ec:69:f8:a3:bd:6e:ff:e7:94:8a:
72:9b:a7:c1:1f:a1:5c:a9:70:54:aa:55:19:8e:10:
8c:d7:c9:fc:d6:b0:13:d7:30:a4:54:ec:23:38:ef:
91:a6:c3:46:19:45:0f:ea:de:00:9a:0a:5a:4c:fe:
bd:bc:45:56:5d:da:f9:82:11:d6:58:8a:0a:03:41:
32:71:62:1e:47:8d:e8:84:c3:ad:7e:2a:f4:2d:ff:
6c:2d:c6:a5:2d:85:30:f8:58:b5:41:cb:fa:f4:a2:
cb:7e:c2:69:c2:e3:04:ea:4e:48:96:9d:49:83:52:
c9:99:c3:c6:d0:f3:ad:53:eb:2f:e4:1b:02:72:ee:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:5B:64:07:F4:7F:C2:7B:16:9D:C1:BC:86:A8:0C:2E:AF:FB:6E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f9dbZAf0f8J7Fp3BvIaoDC6v-24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4e:b7:f7:80:e0:24:3f:6b:01:27:12:b1:ba:7a:d4:f3:a9:
90:22:20:ea:55:00:0b:36:b6:a0:fa:d0:d1:a7:20:bc:a9:e6:
9c:37:e1:c8:b7:50:54:ff:0f:62:17:73:54:01:d4:7b:66:02:
9d:9e:0b:33:32:2a:8a:11:b7:3a:03:0b:a8:93:0a:77:66:ca:
76:80:69:1b:46:e9:48:8b:90:c2:ed:db:21:8b:98:88:fd:d1:
7d:d8:4e:05:53:51:1c:54:10:1e:eb:88:9b:21:cc:dc:f0:5d:
c8:35:4a:09:07:06:50:0f:51:d3:49:c5:58:2a:c4:3f:f0:40:
ef:86:20:7c:c8:34:39:a7:1a:a3:76:3a:a0:4f:a5:94:2b:a6:
11:8a:da:42:89:c8:fd:a5:dd:57:2a:52:f0:b7:8e:7a:d2:e1:
12:ce:d2:b9:a4:41:a0:f1:f3:11:c8:3e:a4:76:f9:0d:b4:37:
84:35:59:59:a3:95:5a:c9:f6:10:c5:b4:39:8e:d7:fe:9a:e8:
7a:38:a0:27:c7:d1:12:c9:ff:93:79:86:c1:4b:4f:a7:de:13:
23:e0:53:f2:a5:2f:9e:b5:23:e6:c1:3a:d1:02:02:06:30:6b:
7e:c9:c4:6b:49:9d:ac:af:a1:82:8c:c9:36:0d:e0:f6:b9:1d:
98:a8:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:06 2024 by rpki-client on console.sobornost.net