Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/4pW0XqB-4RjiTP1cne6JpYRtjkM.roa
File: 4pW0XqB-4RjiTP1cne6JpYRtjkM.roa (raw, json)
Hash identifier: UKd59nRVEbmvXsvU9HRLOrONLl0Wx6X2SBie5rmaigs=
Subject key identifier: E2:95:B4:5E:A0:7E:E1:18:E2:4C:FD:5C:9D:EE:89:A5:84:6D:8E:43
Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial: 018CC424B6D06C9008199AE5D167D1BFA400
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/4pW0XqB-4RjiTP1cne6JpYRtjkM.roa
Signing time: Mon 01 Jan 2024 08:29:49 +0000
ROA not before: Mon 01 Jan 2024 08:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48450
IP address blocks: 94.247.64.0/22 maxlen: 22
94.247.64.0/21 maxlen: 21
94.247.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b6:d0:6c:90:08:19:9a:e5:d1:67:d1:bf:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Validity
Not Before: Jan 1 08:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e295b45ea07ee118e24cfd5c9dee89a5846d8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:e2:5f:57:81:f5:c0:da:ff:4d:58:42:62:
49:dd:73:45:2d:9e:89:0e:f0:c2:db:67:d8:2d:b4:
9f:00:a7:8b:7c:e1:d7:4c:86:02:17:01:0c:42:4e:
57:de:1e:ce:5b:34:b8:c5:c6:4e:ec:de:8d:15:b0:
a5:88:03:93:3d:33:7f:1f:64:f0:17:ca:e1:13:79:
3b:31:af:65:65:05:c2:0c:17:37:94:bc:1d:d1:11:
25:8a:2d:b8:4e:0f:6c:60:a3:c4:8d:fe:6e:b1:54:
cc:1c:1a:c6:41:01:65:02:02:20:50:03:32:04:cf:
88:33:c1:81:ea:09:17:19:97:e1:02:2b:10:36:32:
c0:d6:de:e8:14:fb:50:c4:08:02:e8:f3:24:ec:73:
8e:fa:af:c2:38:ce:60:bc:27:c5:0c:9b:be:d8:d0:
10:8d:77:84:72:a0:db:21:2e:13:92:8e:7b:87:7a:
42:3c:e9:59:42:ec:74:89:7d:68:49:70:6d:9d:f5:
77:58:59:b1:49:84:5e:6d:ca:e4:e6:24:45:8c:4a:
c4:a8:f1:9b:ff:42:fe:34:79:1c:95:72:87:94:bd:
d4:6f:6e:62:76:d2:16:5a:bb:70:40:d0:e1:3a:fa:
1a:3a:95:ff:92:99:33:7e:cc:12:6d:21:b9:1e:2a:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:95:B4:5E:A0:7E:E1:18:E2:4C:FD:5C:9D:EE:89:A5:84:6D:8E:43
X509v3 Authority Key Identifier:
keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/4pW0XqB-4RjiTP1cne6JpYRtjkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.64.0/21
Signature Algorithm: sha256WithRSAEncryption
68:02:fb:fe:e2:e9:f7:36:68:61:42:55:f7:6c:15:50:4b:5c:
48:2c:77:54:60:c8:ef:94:f0:6c:74:4d:65:a3:a7:4f:2b:35:
e3:eb:61:50:0b:fb:9e:c4:79:39:7d:6e:e3:27:89:8b:d3:c3:
58:e1:f3:f8:0d:48:53:85:cb:b6:61:14:78:88:2e:ba:1c:84:
f1:5a:fe:38:41:17:69:6a:a0:6f:54:48:91:fa:bb:44:a6:dd:
0a:6c:9f:f2:de:67:bd:89:ea:68:73:f9:d5:26:6c:57:df:61:
ad:9d:5e:d5:20:68:91:c4:07:85:1d:f6:49:f9:ad:28:f6:a6:
02:43:35:3d:20:b3:96:48:6e:eb:e1:40:84:73:59:a9:f8:5e:
5b:d5:db:ac:5f:9d:e8:43:1d:b2:87:b9:41:b1:a7:05:9f:c3:
50:db:d7:b1:c8:bf:5b:b6:f4:ad:bb:8b:5d:28:8d:a5:54:51:
2d:28:3e:e1:ec:61:a5:bc:31:f7:47:6d:04:8a:ea:5c:dd:cf:
b1:1e:4e:ab:02:e4:27:be:71:ea:7b:d2:5a:74:7f:0d:fa:36:
0b:13:d1:8f:d2:44:6c:d5:a4:78:88:d7:22:be:c1:05:3d:3c:
26:98:39:d0:fe:a0:a9:00:5d:bd:0a:0a:f5:8f:00:6a:9b:31:
38:0c:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:14 2024 by rpki-client on console.sobornost.net