Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/O-tpt8eGeEJAHiUmtep1x41CKGs.roa
File: O-tpt8eGeEJAHiUmtep1x41CKGs.roa (raw, json)
Hash identifier: AOWbT8U2jrG9aoYeooEiq7KrvJgkvlCpMax9G48Huwc=
Subject key identifier: 3B:EB:69:B7:C7:86:78:42:40:1E:25:26:B5:EA:75:C7:8D:42:28:6B
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 01930A6EEC42F882324E8AA64D96B1135ACC
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/O-tpt8eGeEJAHiUmtep1x41CKGs.roa
Signing time: Fri 08 Nov 2024 06:21:01 +0000
ROA not before: Fri 08 Nov 2024 06:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63150
IP address blocks: 185.241.40.0/24 maxlen: 24
185.241.41.0/24 maxlen: 24
185.241.42.0/24 maxlen: 24
185.241.43.0/24 maxlen: 24
2a14:4900:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:6e:ec:42:f8:82:32:4e:8a:a6:4d:96:b1:13:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Nov 8 06:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3beb69b7c7867842401e2526b5ea75c78d42286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:be:43:d3:d4:8d:99:2e:a3:ce:c2:4b:16:
b2:f5:46:cf:6d:22:c2:b2:d9:c5:3d:c0:a8:ff:f4:
72:ed:8a:48:b3:be:d4:80:ec:5c:d1:fe:c1:a9:80:
69:36:b1:6d:5e:fe:7e:60:4c:e4:2d:85:8d:0c:b0:
28:da:91:1f:15:ff:46:a1:8a:75:9e:e4:12:fb:bf:
99:2e:f0:53:fd:20:f0:de:f6:3b:81:d1:39:00:8e:
82:81:89:e9:99:8d:59:4a:38:c6:91:70:48:c4:00:
db:d5:76:61:b3:ef:ca:05:a0:a8:21:e9:f2:45:83:
26:ee:ed:84:21:07:21:7b:7e:4f:65:45:48:e8:54:
71:9a:93:51:80:98:44:5f:58:f6:36:27:fb:65:1a:
c1:0f:19:2d:20:01:50:e4:d2:0f:b2:1e:13:c4:b9:
39:fd:a9:01:4e:1a:ef:36:3e:aa:a4:33:9f:96:f5:
1b:73:4b:ac:2d:fe:94:45:76:a0:1f:24:90:8f:b9:
d2:5f:01:12:c7:43:fa:0b:f9:4e:6f:37:40:9f:ea:
93:4f:b5:41:eb:f5:90:2b:fa:4e:af:64:fb:65:0c:
14:0f:2b:d6:50:44:44:65:f6:84:4d:9c:01:0b:e8:
37:88:15:59:ea:38:5d:ef:40:7d:58:04:61:ad:57:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EB:69:B7:C7:86:78:42:40:1E:25:26:B5:EA:75:C7:8D:42:28:6B
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/O-tpt8eGeEJAHiUmtep1x41CKGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.40.0/22
IPv6:
2a14:4900:2000::/36
Signature Algorithm: sha256WithRSAEncryption
e1:b6:4f:f7:cb:67:31:cf:a9:09:76:12:0f:e7:72:a9:66:01:
87:9b:51:be:06:97:16:e8:0b:ff:dd:55:c6:db:ab:8d:4f:19:
a6:12:e0:2e:ef:67:ce:cc:78:1f:88:00:00:ab:0e:63:a7:01:
e8:d3:41:21:c9:61:26:80:ae:27:ab:0f:da:9b:3c:1e:03:8a:
63:05:83:d5:93:ca:60:c6:32:c3:b2:59:1f:85:9f:bf:17:1c:
52:d5:bf:23:43:8f:32:58:ac:73:c0:c6:f4:28:36:87:98:1e:
66:57:28:ad:eb:d0:27:76:a8:45:c6:86:e1:96:c4:ab:2f:c0:
7b:3d:99:e0:bb:33:16:61:11:59:88:0e:e7:51:96:56:d7:92:
21:ac:0c:c5:f9:39:84:e0:7a:e2:7a:22:aa:97:d6:86:dd:5f:
d3:1e:ba:f8:12:7f:33:bf:9c:a6:e0:20:f9:32:6a:de:7a:8f:
b6:33:d0:2f:0e:f6:e9:42:ca:89:f2:39:ee:ae:a1:bc:6e:3e:
19:36:f0:39:e1:c8:e4:22:a9:90:de:10:e1:37:ec:80:1e:52:
52:61:82:df:fd:ec:3a:ce:18:2a:4d:61:b8:df:4c:5c:56:06:
d2:11:bf:7e:2c:f8:f5:a6:e9:63:a6:b0:c9:b2:26:a5:fd:9c:
8c:73:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:10 2024 by rpki-client on console.sobornost.net