Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/SLtdjfhZRPpLRXlkWcDbzgvINrc.roa
File: SLtdjfhZRPpLRXlkWcDbzgvINrc.roa (raw, json)
Hash identifier: AlFVYP4cRt2a6W18ps/TymDkhvhpwIcsdOd1LgfwLZE=
Subject key identifier: 48:BB:5D:8D:F8:59:44:FA:4B:45:79:64:59:C0:DB:CE:0B:C8:36:B7
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 018D5F21AFEC34B477DC25E22DE883C88346
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/SLtdjfhZRPpLRXlkWcDbzgvINrc.roa
Signing time: Wed 31 Jan 2024 10:47:39 +0000
ROA not before: Wed 31 Jan 2024 10:47:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 185.75.153.0/24 maxlen: 24
193.104.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:21:af:ec:34:b4:77:dc:25:e2:2d:e8:83:c8:83:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 31 10:47:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48bb5d8df85944fa4b45796459c0dbce0bc836b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:9c:6c:e4:44:44:99:11:31:82:63:1e:8a:
69:ad:12:37:6a:91:ed:30:61:2d:fa:c1:2a:a2:09:
2b:67:25:71:69:d2:4a:ef:75:2c:92:ae:cf:20:3a:
d4:31:bf:41:c0:ad:c0:21:ed:69:2b:fc:a7:36:9c:
0c:e4:a4:11:fa:44:1c:eb:79:da:87:d9:1c:b2:c1:
fa:ec:90:19:d8:2c:b4:27:a2:c3:af:9b:cb:bb:18:
c9:58:8d:6d:c5:0e:db:6c:eb:37:0d:bc:fe:b8:9f:
f5:bf:71:c5:27:cb:58:41:38:d3:a4:b1:cb:74:41:
63:65:8c:ba:be:1d:a1:d6:66:25:09:7b:a9:4d:51:
a6:55:5b:0b:05:d3:a7:3e:c8:ed:a9:03:d9:f1:28:
4e:18:95:02:ee:79:56:29:78:91:ac:45:02:7e:53:
e0:a8:f1:1e:18:11:b4:9a:4e:bb:37:48:e5:08:16:
a2:14:64:3a:df:46:2a:9c:2e:d4:ca:55:1f:ff:b3:
f4:2e:6c:ad:bf:41:1d:48:ef:64:93:f5:24:be:24:
51:a6:c5:2d:dd:36:d2:ed:04:fa:cd:cd:be:5b:03:
d5:d4:9e:86:88:94:8f:13:99:16:e3:c5:4c:dc:10:
fa:fa:63:6f:57:bd:24:1b:74:b5:38:b8:f5:1f:3a:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:5D:8D:F8:59:44:FA:4B:45:79:64:59:C0:DB:CE:0B:C8:36:B7
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/SLtdjfhZRPpLRXlkWcDbzgvINrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.153.0/24
193.104.116.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:b6:64:a0:30:8f:db:89:7a:6d:89:c9:0f:f1:0c:6f:22:
8a:90:71:19:1f:07:74:f3:c9:49:d1:c1:ee:8a:dd:a1:e4:31:
de:c6:c6:c9:a7:bb:cf:52:fb:d5:19:11:b6:6b:58:b0:c9:37:
28:3e:b0:ba:e5:52:29:00:17:89:c6:e3:db:85:84:97:4e:4d:
d0:13:d7:26:5e:9d:f9:fa:e8:91:ac:cb:e5:0b:65:e9:a3:2b:
75:3f:41:2d:87:6f:35:ea:bb:92:79:f0:fe:89:9f:6d:16:e4:
f8:07:e4:2a:e9:ab:20:4e:02:3a:a2:be:02:98:38:ca:ed:d6:
a8:eb:d9:cd:40:67:f4:29:2e:03:f3:d5:86:d3:38:c7:a5:c7:
17:41:d1:94:f7:11:dd:eb:24:38:96:30:5c:ea:46:58:eb:63:
c6:e6:0c:7b:53:2c:10:18:96:f4:80:1d:51:62:98:75:b4:55:
d3:58:3e:d4:eb:87:88:80:2a:7e:70:dc:e2:f9:d0:85:c8:01:
9e:67:00:75:c1:2e:f5:06:dc:4c:23:83:c9:ea:d4:37:06:de:
08:c0:0b:6c:4c:9d:a5:fd:05:71:44:69:a0:c6:be:09:da:b4:
02:12:ac:3b:b8:e3:de:00:5f:aa:6b:b7:fd:3d:1a:32:18:2a:
06:ed:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:16 2024 by rpki-client on console.sobornost.net