Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/4D0stBANhllIBStR6Q2A890nH6E.roa
File: 4D0stBANhllIBStR6Q2A890nH6E.roa (raw, json)
Hash identifier: LorGyUaOI7QfWlXpPM8Wn9Kd9MvtOZwyPL4olW1peWI=
Subject key identifier: E0:3D:2C:B4:10:0D:86:59:48:05:2B:51:E9:0D:80:F3:DD:27:1F:A1
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 01939B8013690F2561E7A90F5EFD73B4543D
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/4D0stBANhllIBStR6Q2A890nH6E.roa
Signing time: Fri 06 Dec 2024 10:24:42 +0000
ROA not before: Fri 06 Dec 2024 10:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 140.150.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:80:13:69:0f:25:61:e7:a9:0f:5e:fd:73:b4:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Dec 6 10:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e03d2cb4100d865948052b51e90d80f3dd271fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:e6:d3:8b:c8:34:05:55:3b:87:5a:c3:00:
c3:52:04:56:9f:6d:07:12:89:34:4e:b9:83:81:e0:
bf:cd:ce:34:a1:8d:b8:cb:70:59:a5:ed:5c:5d:39:
22:93:d5:39:45:da:87:8b:f9:63:6d:d3:0a:f6:e7:
66:23:22:23:46:7c:e9:33:14:ad:22:19:41:86:7f:
35:f7:c7:a2:d7:60:c0:1d:47:cc:57:9f:d9:49:05:
d2:62:4c:1a:e4:04:3b:06:84:e0:9c:cb:99:2b:6c:
df:6b:80:d7:35:6f:8c:0e:8d:43:14:89:5d:4a:61:
fe:ae:d0:26:f9:b7:76:20:9b:d6:02:15:92:cb:4d:
06:a3:0c:cd:d7:37:6b:02:de:13:54:af:fb:38:a1:
4f:89:0e:03:76:f8:9d:81:cc:99:e3:ce:2e:8c:6e:
61:4a:ba:38:e8:fa:4a:23:fe:26:80:5c:23:cd:a2:
bc:09:03:d5:80:9c:fd:75:c8:3a:bf:3e:aa:90:6d:
08:54:d3:85:1d:ea:06:2b:a4:72:c5:ca:4e:97:d3:
ef:87:61:54:f2:78:aa:cf:c3:c9:f3:9a:68:c7:fe:
03:94:3c:25:2a:c1:2b:31:1d:7e:57:e9:59:95:6b:
51:41:3b:c6:0a:71:24:2f:9e:f2:e7:fe:67:c6:25:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:2C:B4:10:0D:86:59:48:05:2B:51:E9:0D:80:F3:DD:27:1F:A1
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/4D0stBANhllIBStR6Q2A890nH6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:58:1e:20:73:3e:c7:db:dc:75:fb:ca:4a:a4:00:3e:56:a5:
4a:b2:be:69:1f:23:c2:72:c7:64:a0:31:e3:26:f1:e8:a6:df:
44:9f:3a:74:48:cf:74:1a:82:a7:76:ee:f6:5c:79:46:6b:ae:
d3:0d:08:6f:e0:85:aa:96:cf:d5:66:e0:bb:8c:80:60:c9:b2:
a4:da:7d:c7:49:30:70:70:b4:bd:c2:3d:92:a8:60:52:9a:b7:
d4:c4:41:02:b4:ee:d1:74:9a:96:00:d1:04:e9:79:7d:34:a1:
96:4e:3d:85:92:bd:3a:4e:73:6d:c6:fa:d2:47:07:c2:17:9a:
d9:60:49:0f:20:c6:9d:f5:1f:6a:d8:1f:f2:cc:9d:ad:c4:a6:
e3:f5:46:6f:22:8f:ce:21:80:86:53:e1:c7:41:ab:bc:f8:ed:
cb:47:fe:b9:5b:a8:c3:48:ba:38:49:6b:fa:68:4d:1d:f7:6f:
c2:0f:08:f5:4d:ad:e5:e6:70:b7:74:ea:6e:8f:df:57:45:b0:
95:dc:ca:02:e5:d0:dd:d3:73:1c:6d:a6:1f:27:2d:42:91:81:
c1:da:fd:57:f2:0c:ce:45:6e:9a:29:e4:0f:68:4c:dd:df:e8:
40:3f:38:00:78:ed:c5:7b:5e:2f:cd:e6:e9:1c:ef:fa:3a:cd:
ca:4f:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:17 2024 by rpki-client on console.sobornost.net