Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/M8R05nuRIPt_j88bkOx-tLNpuIQ.roa
File: M8R05nuRIPt_j88bkOx-tLNpuIQ.roa (raw, json)
Hash identifier: dehDBAAEDQGOe9o9cB/LAqESMzsR5HViHDbECf85rPk=
Subject key identifier: 33:C4:74:E6:7B:91:20:FB:7F:8F:CF:1B:90:EC:7E:B4:B3:69:B8:84
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0190911C7332D2EAE0B2A5C7DEDD8336492C
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/M8R05nuRIPt_j88bkOx-tLNpuIQ.roa
Signing time: Mon 08 Jul 2024 06:51:18 +0000
ROA not before: Mon 08 Jul 2024 06:51:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16299
IP address blocks: 95.169.251.0/24 maxlen: 24
217.168.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:1c:73:32:d2:ea:e0:b2:a5:c7:de:dd:83:36:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jul 8 06:51:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33c474e67b9120fb7f8fcf1b90ec7eb4b369b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:21:63:ed:e0:84:ad:b1:ff:45:22:8c:1b:
62:e6:4e:78:86:57:ea:e9:45:ef:41:5e:4b:2c:61:
88:4e:19:02:ba:99:b9:60:d5:cb:19:07:bb:eb:32:
68:44:0d:fc:0e:83:2e:c3:89:f6:15:dc:fd:bc:15:
9f:9c:8a:d2:3c:b0:7d:d2:aa:cd:c4:54:f9:81:ea:
a3:2f:cb:91:46:67:52:c6:8b:e3:f1:26:fb:ac:b5:
63:f3:2b:4c:93:80:98:d3:a6:f3:e7:ff:61:5f:e0:
b8:7b:7c:e0:dd:21:1b:1c:58:fe:4c:a8:aa:3d:37:
75:9d:c4:56:e7:17:67:ba:35:20:d7:01:50:92:bd:
ff:71:e9:b1:ab:44:b9:e7:e4:ff:40:3d:e6:d3:ab:
98:a6:c9:f5:15:9d:fb:df:3a:4b:55:7d:5d:02:78:
36:c4:ed:1b:e9:58:b9:2a:94:67:8c:2d:e7:d2:47:
28:6c:b5:d6:7d:a5:22:c8:a8:63:cf:d0:78:d3:c9:
a1:d9:4e:a4:27:bd:32:32:dc:f2:c4:42:58:7e:37:
e9:e1:06:a6:b3:08:3f:59:87:f1:71:cf:e5:17:0a:
26:3d:20:33:2e:7d:ff:1c:38:ff:17:26:8f:26:7c:
1d:e2:43:c9:c3:b5:0f:52:8a:b0:e7:9d:26:53:f0:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:74:E6:7B:91:20:FB:7F:8F:CF:1B:90:EC:7E:B4:B3:69:B8:84
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/M8R05nuRIPt_j88bkOx-tLNpuIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.251.0/24
217.168.2.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6d:8a:96:49:32:cb:e3:1f:c3:8a:05:ac:e9:72:87:3b:a1:
50:93:54:b0:57:df:28:a3:5e:f2:79:92:7e:b4:69:02:bb:74:
95:a0:23:f3:68:05:e1:8a:c7:cf:33:0b:33:24:df:65:ec:ed:
d6:0c:80:ce:40:8e:50:a9:ef:ee:4b:6d:69:20:4d:1a:67:6f:
3f:2d:43:91:18:b2:1d:2a:fd:48:6b:de:b3:de:ba:d2:07:67:
06:dc:ce:f9:90:91:b3:0f:f8:54:22:22:bf:ab:ea:db:27:06:
fb:03:71:66:b7:1b:e6:38:4a:5a:ad:bf:e4:cf:1a:c5:e0:1f:
45:4c:bf:5b:4c:f3:9b:08:b7:40:58:59:84:a9:c5:1c:03:d5:
ad:54:23:d4:34:24:5b:be:50:f4:7f:d4:93:88:06:c3:03:30:
0d:a2:61:01:50:df:8a:ba:a2:c7:ba:ee:d2:18:cd:55:b0:03:
f8:f5:0a:0e:d4:0e:1e:00:2d:ed:4d:52:f8:2e:59:21:b5:a5:
12:99:9d:e9:be:a1:54:98:34:60:82:0f:1d:e8:70:ed:4e:69:
9c:42:36:36:29:a9:05:4e:ed:a5:83:a8:55:4d:15:ad:95:04:
a5:d8:a9:d5:10:c5:a4:6a:cb:2f:70:9c:c8:79:05:05:6d:8a:
e9:c0:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net