Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/fkKJwJcnk7RCptGxL_yLW9foc0I.roa
File: fkKJwJcnk7RCptGxL_yLW9foc0I.roa (raw, json)
Hash identifier: YQf8iTbzj0U0ppMguXknAgtVs5/dItOVI9rpYgjapgw=
Subject key identifier: 7E:42:89:C0:97:27:93:B4:42:A6:D1:B1:2F:FC:8B:5B:D7:E8:73:42
Certificate issuer: /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial: 018CC7272F841BF19405416A835B649A47A0
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/fkKJwJcnk7RCptGxL_yLW9foc0I.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61231
IP address blocks: 212.162.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2f:84:1b:f1:94:05:41:6a:83:5b:64:9a:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e4289c0972793b442a6d1b12ffc8b5bd7e87342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:73:2b:80:40:c8:15:10:41:f3:69:80:a9:
6d:1f:f0:46:d0:ab:39:9a:0d:f0:5a:80:45:8a:d3:
49:95:8f:45:5c:46:a5:37:fb:ed:85:31:05:ef:55:
b8:0b:6d:f5:9e:50:79:1c:28:34:ae:11:51:49:ea:
c5:f5:9c:7e:44:a7:06:7b:95:60:08:ab:45:d7:f2:
84:69:a3:fd:c0:09:cf:ba:25:47:b2:e0:7e:84:96:
2a:e3:94:b5:e3:4a:58:4b:18:3b:97:ab:77:f3:62:
90:7b:fd:af:0b:4c:86:70:7b:b6:c6:19:6c:8d:28:
57:d7:36:db:86:da:14:8b:a9:87:7f:36:18:93:1a:
ad:d0:c8:4e:01:25:54:c7:61:3a:86:11:71:43:d5:
08:c3:93:e5:1a:28:83:48:b3:e9:a0:af:ce:fe:61:
59:9f:01:71:1e:7d:49:29:e1:7f:3c:6b:04:1a:6e:
03:1c:b9:01:a8:88:18:4f:c1:90:0d:a8:d5:76:a5:
31:ed:a3:4a:a1:fd:15:04:d9:88:1f:b0:7f:1b:3d:
3d:e1:ba:fa:62:e6:ea:77:60:cb:22:95:1d:01:58:
91:38:23:fd:0e:cc:b5:e0:9f:9d:46:00:ba:bd:68:
35:73:05:08:30:37:45:bd:58:f2:47:19:82:50:7a:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:89:C0:97:27:93:B4:42:A6:D1:B1:2F:FC:8B:5B:D7:E8:73:42
X509v3 Authority Key Identifier:
keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/fkKJwJcnk7RCptGxL_yLW9foc0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.129.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fa:5d:22:42:22:8a:44:51:67:bb:54:3d:85:2c:ca:e1:91:
65:5c:fe:26:0d:ac:c9:2a:f3:b1:bd:54:f2:25:47:b5:08:24:
d2:9b:0c:10:7f:76:45:f3:36:8e:84:61:9b:b2:1d:de:8c:c1:
fa:9f:d8:92:3a:29:0a:f4:37:2f:dc:9c:7c:90:62:6f:5f:80:
e0:59:8b:ac:ea:32:ec:31:3e:d0:72:af:d7:d7:6f:90:59:5b:
83:21:0b:e8:c8:3a:15:5b:83:c9:fe:92:71:68:e0:e1:88:69:
ca:e2:22:6d:01:27:8d:b3:9d:c1:b0:20:cd:67:a6:0c:e4:61:
e6:fa:56:f2:d9:89:57:4b:16:63:48:bc:be:97:10:da:bb:23:
4b:ed:a3:7c:f1:92:62:dc:b5:e8:1e:dc:d0:09:29:ce:6d:38:
ba:24:8e:ed:ff:54:d4:af:3c:65:35:75:09:fc:8d:64:8d:0b:
94:56:9a:af:e6:9d:fc:d0:20:a2:4c:75:2d:2a:8f:b0:15:2f:
41:7b:5a:9a:6b:c6:2c:21:0f:d2:19:b2:6b:89:b7:17:5d:37:
5f:a7:b2:3c:64:32:f7:61:f1:2e:f7:d3:a8:57:0c:19:e0:03:
b8:d2:b1:b4:36:34:90:3a:80:5e:2d:c4:ac:50:61:57:9c:11:
22:89:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:10 2024 by rpki-client on console.sobornost.net