Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZRd_k3LNgErdrkMiazGQLk0jG-I.roa
File: ZRd_k3LNgErdrkMiazGQLk0jG-I.roa (raw, json)
Hash identifier: K+4TfcIXn5F8sxAqriR/YxoEaOsJkqJe9+dGtCVbNHA=
Subject key identifier: 65:17:7F:93:72:CD:80:4A:DD:AE:43:22:6B:31:90:2E:4D:23:1B:E2
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019377018A82D399E34A3DED48A03D5F3F32
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZRd_k3LNgErdrkMiazGQLk0jG-I.roa
Signing time: Fri 29 Nov 2024 08:20:09 +0000
ROA not before: Fri 29 Nov 2024 08:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138077
IP address blocks: 140.150.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:01:8a:82:d3:99:e3:4a:3d:ed:48:a0:3d:5f:3f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 29 08:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65177f9372cd804addae43226b31902e4d231be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:b5:55:f8:31:c3:91:8f:65:36:62:8d:d4:
7e:d8:6e:e5:6a:ff:a5:3f:2d:f5:f3:e2:20:08:f9:
f2:eb:67:23:fa:14:45:c1:13:89:0e:50:f9:c7:50:
c1:eb:a5:f2:7f:c7:b2:10:d5:22:0e:58:00:f1:6a:
82:5b:1d:0e:97:01:bc:92:8c:76:cd:45:55:ac:60:
94:ec:8d:90:82:7d:da:8b:3f:26:d1:7b:79:ec:51:
b8:84:fc:53:6c:0f:1e:3d:fb:3f:df:1f:42:71:1d:
06:6c:66:f8:13:41:ab:48:d0:50:3e:2e:c4:1f:11:
7c:10:f3:ac:ad:cf:a2:a3:09:e4:a9:16:53:24:c8:
bd:80:15:e7:31:93:7b:19:01:41:28:f2:61:4a:01:
89:c6:cb:07:a7:bd:03:09:71:e5:23:cf:0c:bd:3f:
2c:16:f5:ac:f3:69:53:ed:98:31:a5:8e:80:85:e6:
70:20:9d:76:f8:95:be:0e:10:7d:c2:42:3f:f4:f2:
6c:e9:09:7c:40:76:7d:c1:5a:e1:47:be:21:fa:ef:
e7:90:0c:e2:8d:34:5d:ee:b0:a2:cc:f7:c9:f6:7a:
6c:27:47:17:2b:84:b5:30:35:40:81:3d:85:56:8c:
e8:ca:9b:1e:f1:a2:e2:19:8b:b5:fc:00:c2:8f:f3:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:7F:93:72:CD:80:4A:DD:AE:43:22:6B:31:90:2E:4D:23:1B:E2
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZRd_k3LNgErdrkMiazGQLk0jG-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:01:ab:88:42:10:8c:58:92:09:ff:24:73:f9:e3:70:f2:3c:
5f:4d:93:b7:e7:ad:80:94:ae:d7:65:92:c6:a8:d0:44:bf:f9:
4f:b1:ea:7c:47:29:a2:df:7f:37:7e:11:e6:3c:e8:1e:28:eb:
af:59:44:55:b1:86:da:08:97:86:77:c1:93:e1:5e:28:73:71:
02:9b:f4:32:d1:82:18:e1:fc:22:9f:d4:0e:00:5c:bf:b2:69:
42:24:b3:04:ec:d9:16:20:9a:11:e0:2b:80:84:7a:06:b2:bf:
a2:d2:51:a2:7f:5d:81:79:c9:23:28:7d:31:ab:81:48:7e:47:
72:7c:d0:75:6a:35:7b:bc:3b:62:96:2a:9a:01:08:e6:3c:56:
2d:5c:30:b9:a2:51:2e:fd:1f:5a:64:b6:e3:0b:a7:7a:aa:e2:
e0:f3:f9:8d:04:e2:74:4d:6e:81:43:cb:27:74:76:3f:2d:fd:
c2:d9:48:2f:62:64:db:49:09:7c:17:6d:e2:a1:4a:35:ab:ac:
fc:8a:4b:16:f4:b0:56:d2:86:24:ac:7d:83:4b:ef:2e:57:ff:
e2:e1:bb:52:34:92:2a:ac:49:22:b6:0d:1d:d5:c2:5c:cf:dc:
c2:21:9e:a2:bb:c9:7f:cf:d6:63:9f:6d:0b:3d:a8:5b:a5:48:
1a:0a:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:17 2024 by rpki-client on console.sobornost.net