Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X7AssYcqcLPhoYURCjI9kOnXBpk.roa
File: X7AssYcqcLPhoYURCjI9kOnXBpk.roa (raw, json)
Hash identifier: wK8SqM9vKBH6tv71Oyuxgytm749mchzV//Yzz4Ozt60=
Subject key identifier: 5F:B0:2C:B1:87:2A:70:B3:E1:A1:85:11:0A:32:3D:90:E9:D7:06:99
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01936907A986D09CEDBE0C85285A05D3B800
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X7AssYcqcLPhoYURCjI9kOnXBpk.roa
Signing time: Tue 26 Nov 2024 15:12:09 +0000
ROA not before: Tue 26 Nov 2024 15:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213887
IP address blocks: 185.102.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:07:a9:86:d0:9c:ed:be:0c:85:28:5a:05:d3:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 26 15:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb02cb1872a70b3e1a185110a323d90e9d70699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:99:02:12:74:d6:ac:89:e6:7f:33:a3:a7:
cb:bb:e3:f9:fb:6c:ad:83:56:38:06:bf:ff:2a:f5:
dd:01:12:77:35:30:00:17:1d:1f:9e:07:de:e2:59:
d3:e8:bf:22:35:86:37:e1:cd:24:a9:7d:9a:6b:b3:
95:88:95:7f:04:57:d7:06:9e:ee:b5:a9:c7:41:fe:
5c:f8:40:c4:ed:8f:06:0f:38:38:7d:31:4c:cb:70:
33:58:f4:a8:1c:f5:ad:03:67:09:a7:7d:90:3a:de:
d4:1d:8b:75:f5:94:40:8f:fb:62:a6:34:42:22:d6:
6f:16:6c:f5:bc:1b:2d:8d:2d:88:88:00:0d:96:db:
4a:4e:35:e2:9a:91:cc:7d:52:9e:57:4f:ca:92:3d:
ba:16:df:fc:bb:51:a8:5d:1a:93:4c:30:c5:29:f1:
b6:b7:64:4d:e8:85:ca:14:4c:d9:ab:22:89:b7:dc:
39:8e:e0:16:e6:77:d2:d7:2f:8e:76:7b:d0:3e:a7:
be:26:23:0b:84:ab:96:95:13:c4:35:46:d5:9e:f0:
4e:46:eb:18:17:cb:cb:94:4c:7f:8a:38:d1:d6:9f:
f2:99:cc:81:e2:ca:7c:7c:5c:f1:6f:bc:81:3e:e4:
f2:fc:67:35:5f:d2:58:1d:02:bc:29:9c:65:ab:5e:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:2C:B1:87:2A:70:B3:E1:A1:85:11:0A:32:3D:90:E9:D7:06:99
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/X7AssYcqcLPhoYURCjI9kOnXBpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d9:40:bb:17:59:40:b3:8d:b8:8e:a5:4f:84:28:84:71:76:
1a:38:d5:fc:fc:97:31:39:93:11:07:d7:f5:49:23:11:97:5f:
f4:ea:8d:d3:91:b8:6b:13:70:4c:52:99:22:c9:59:01:52:37:
9a:21:6b:76:23:cc:62:6e:84:38:36:18:c5:82:8d:a5:48:e0:
ea:ad:f6:53:17:5d:24:e1:8c:77:d4:6a:1d:2c:96:2f:fd:70:
8d:19:0e:98:eb:09:b8:2b:3d:74:cf:30:08:7c:7b:8c:b2:35:
bc:3f:c0:85:d8:86:de:5f:7d:e7:0e:d4:ee:ca:bd:31:07:2a:
42:00:31:2a:15:5c:2c:0d:74:95:26:b1:17:88:0b:74:2e:e7:
c3:07:0a:45:25:59:f8:21:41:4f:77:22:36:4f:84:2e:b2:b0:
13:4a:12:cb:b1:b3:2e:31:be:81:45:a5:9a:09:1e:a1:2d:07:
94:cf:83:1d:b7:d4:40:38:b2:a2:5d:e5:2b:01:f9:a9:a5:04:
ee:8c:77:3c:b0:13:f7:ad:8e:b9:3b:c8:07:1a:ad:0f:07:2e:
a3:65:25:ec:e9:3b:7d:d2:86:c4:f0:af:5f:83:88:92:4b:22:
88:f0:3c:09:91:b2:1f:f4:26:16:da:2e:20:b4:3f:dc:7e:46:
39:a1:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net