Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/iK61Cd8L8XIDlqqvpRRLB2KkZmE.roa
File: iK61Cd8L8XIDlqqvpRRLB2KkZmE.roa (raw, json)
Hash identifier: +aZaTI3wToBIJh6vRokkWVEbNH3AsK2OVxK+awIQqEc=
Subject key identifier: 88:AE:B5:09:DF:0B:F1:72:03:96:AA:AF:A5:14:4B:07:62:A4:66:61
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 018CC72761687A5EE0911A7B1C234CFC8D72
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/iK61Cd8L8XIDlqqvpRRLB2KkZmE.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48682
IP address blocks: 193.169.133.0/24 maxlen: 24
176.124.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:68:7a:5e:e0:91:1a:7b:1c:23:4c:fc:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88aeb509df0bf1720396aaafa5144b0762a46661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:ad:f3:c3:00:7e:ba:4c:1b:f3:4e:fb:85:
3d:f8:9e:4e:1d:f7:03:11:3a:ba:92:bf:c5:6f:2e:
d4:f9:f5:3a:70:6f:23:18:77:dd:98:28:8a:3b:9d:
55:b2:a1:ba:90:e1:d1:d4:68:04:fd:df:45:d8:7a:
2a:18:58:1f:bf:1c:3b:d9:42:17:54:e3:05:2b:ba:
db:bd:ad:c4:71:b6:e9:e1:f5:90:49:94:6f:eb:2e:
7a:0f:8e:ce:6c:60:51:1b:e4:e8:81:08:09:c3:6a:
f8:be:26:87:52:b4:06:c1:69:a8:a1:52:a5:04:8f:
99:08:ac:fc:83:4e:d3:a2:85:05:cc:11:74:7d:f4:
30:50:a8:c8:79:4b:1d:98:a2:c9:94:e5:cc:95:91:
2f:cd:12:5a:35:fc:6b:7c:9c:d7:48:60:97:b1:31:
91:6e:52:db:05:10:86:31:2c:94:21:d1:67:32:cb:
da:3c:cc:7e:71:8b:67:b2:87:7a:97:8b:58:f9:57:
12:ef:9f:c7:20:20:39:8c:a0:56:4e:90:2e:80:b3:
5a:87:5b:51:85:8c:0a:5d:bb:dd:8b:5e:43:36:f1:
7d:1f:54:15:58:f5:f8:54:f6:97:3b:c9:bc:93:ba:
35:67:fe:8d:32:29:8b:68:c4:ce:5a:f6:f1:b6:31:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AE:B5:09:DF:0B:F1:72:03:96:AA:AF:A5:14:4B:07:62:A4:66:61
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/iK61Cd8L8XIDlqqvpRRLB2KkZmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
193.169.133.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2e:6a:a0:4c:2b:a6:18:3c:c2:b2:f3:de:96:43:84:2c:04:
38:9d:67:d1:e7:cb:63:b3:b1:9d:b4:2f:fc:dc:b5:77:c7:0c:
e9:d4:92:83:7f:42:45:9c:72:0d:b3:a8:ef:e3:12:e1:2f:35:
b9:8a:99:5c:1d:38:f2:b3:e6:96:ce:cb:52:eb:9b:3f:9a:9e:
f1:df:1d:c8:c0:73:ef:48:9f:c7:79:2a:5e:a1:2c:04:e2:d1:
0e:f3:8c:b2:a9:42:22:12:86:ce:17:5e:87:9c:f0:72:82:32:
56:a0:d6:58:d5:6c:f8:1d:ae:3e:9a:bf:9b:dd:c7:26:7e:0c:
e8:d1:60:4f:ca:a3:fc:35:6f:cd:ec:b4:50:61:31:e1:22:fb:
7b:21:cf:12:b1:58:57:6e:10:d8:93:d0:ed:08:bb:a9:68:34:
58:48:f9:1b:98:69:a0:40:85:a2:43:4f:03:6b:84:ec:48:e6:
ad:49:8a:ab:88:ea:42:78:a8:0a:18:bf:a9:15:be:bb:8f:35:
29:64:9e:82:bf:4e:18:a6:31:eb:11:ee:ed:d8:13:1c:6d:e2:
a0:45:ae:07:23:63:ba:34:67:ed:a2:aa:5e:5e:85:f3:2d:89:
fc:d0:5b:28:ee:5f:a9:f4:11:62:f6:2a:7f:9a:e0:e8:bf:2b:
d5:54:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:15 2024 by rpki-client on console.sobornost.net