Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/KsehQ1mb8lrCG4_AYRLA0eYCerg.roa
File: KsehQ1mb8lrCG4_AYRLA0eYCerg.roa (raw, json)
Hash identifier: V4GSYPTSEP4wj3llbwCWlUNqVvCVFBrTh7jKcSK1Ojo=
Subject key identifier: 2A:C7:A1:43:59:9B:F2:5A:C2:1B:8F:C0:61:12:C0:D1:E6:02:7A:B8
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0193C04BA3871D2709AF07E5C5D2B0C4A7A4
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/KsehQ1mb8lrCG4_AYRLA0eYCerg.roa
Signing time: Fri 13 Dec 2024 13:53:22 +0000
ROA not before: Fri 13 Dec 2024 13:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2a14:35c0::/29 maxlen: 29
2a14:5840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:4b:a3:87:1d:27:09:af:07:e5:c5:d2:b0:c4:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Dec 13 13:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ac7a143599bf25ac21b8fc06112c0d1e6027ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:7c:b3:de:e9:44:3b:3f:00:e3:d5:6b:47:
e9:f1:e6:9d:6a:a1:95:14:db:97:c4:e8:84:97:0a:
6c:ca:7f:31:83:05:28:1a:df:36:27:fc:05:72:46:
d3:1e:f3:24:59:38:90:ab:f7:64:44:d2:85:8a:cc:
a0:22:7c:f0:92:c5:09:59:3e:da:51:8e:42:ae:d5:
59:a2:51:1c:01:54:40:54:e6:a3:11:ad:bc:72:b8:
17:a6:1b:0d:bc:10:47:83:87:b8:36:cb:02:a6:94:
b9:75:69:59:09:80:e3:b1:2d:6a:39:09:88:87:b8:
4b:e5:16:56:f0:d6:4c:a8:b4:c0:d4:c4:7b:72:dc:
21:11:21:77:16:dc:1c:c0:05:4c:35:89:c8:51:d8:
1f:42:94:11:51:57:d0:9b:ea:b3:6f:9f:b2:52:2e:
86:58:2d:64:16:17:2d:95:92:7f:19:f6:fc:bc:54:
be:94:77:2a:8b:c3:79:b2:24:63:fb:71:20:fa:dd:
2f:e2:57:d7:b3:e0:4d:64:da:13:41:44:25:c3:cd:
ab:a2:64:f9:8b:c9:ae:54:27:47:53:9f:22:48:95:
ea:ae:f3:1b:a0:10:42:18:1d:37:5e:92:dc:79:7c:
21:38:f1:e0:64:9e:e3:03:de:75:b9:a6:ec:39:aa:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:A1:43:59:9B:F2:5A:C2:1B:8F:C0:61:12:C0:D1:E6:02:7A:B8
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/KsehQ1mb8lrCG4_AYRLA0eYCerg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:35c0::/29
2a14:5840::/29
Signature Algorithm: sha256WithRSAEncryption
a7:21:01:3c:81:a7:db:b1:46:37:27:d5:0e:07:19:4a:67:f3:
9d:b2:ea:23:30:6a:fa:38:d1:5a:93:d5:21:69:74:95:a8:ea:
24:ea:90:ea:d2:6c:d0:db:da:35:db:1c:e3:55:c1:84:04:2b:
0b:73:68:47:3a:57:eb:09:12:4c:09:cf:e9:a7:68:f1:f3:80:
5f:6a:62:31:06:71:b2:b6:a2:a4:f9:50:71:91:e7:3d:62:5f:
2a:4d:24:8c:2c:9e:8f:fb:7c:4b:e8:3a:e0:15:fc:e5:05:64:
43:92:3a:e5:f5:b5:1d:6b:94:ea:3e:0a:19:0c:a9:db:31:c4:
9d:6a:26:8a:3f:66:f7:5e:2c:63:ab:65:fb:ac:43:a2:5a:cd:
f4:11:ef:62:71:91:af:37:21:c3:a5:b7:aa:ec:56:a5:0a:0d:
be:7f:42:3f:fa:22:3e:92:57:bd:8e:5b:5e:0c:f5:4d:bb:65:
f8:7c:f8:74:a5:da:57:a6:7b:77:a1:50:20:1c:58:52:e6:8d:
a8:c7:2c:dd:1f:37:e6:02:3c:56:a8:e8:bd:9e:fe:4c:22:22:
ea:5c:f5:82:84:cf:da:5a:95:44:80:b8:03:60:88:c0:53:9f:
75:97:8a:b3:d3:e4:44:a3:64:14:8e:c4:92:fd:1c:06:d1:0d:
4d:c6:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:16 2024 by rpki-client on console.sobornost.net