Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/AiNcDTuvqSgZIyaSdYYpEZem-vg.roa
File: AiNcDTuvqSgZIyaSdYYpEZem-vg.roa (raw, json)
Hash identifier: pJU+WBvjfLXm0JUnJ4EJTBwZ4c6v3AgubAa0SADVziM=
Subject key identifier: 02:23:5C:0D:3B:AF:A9:28:19:23:26:92:75:86:29:11:97:A6:FA:F8
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 0193628D15DBCAD0102453B6DE4C31D7FDE8
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/AiNcDTuvqSgZIyaSdYYpEZem-vg.roa
Signing time: Mon 25 Nov 2024 09:00:33 +0000
ROA not before: Mon 25 Nov 2024 09:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13121
IP address blocks: 46.231.224.0/23 maxlen: 23
213.169.64.0/19 maxlen: 19
213.169.88.0/21 maxlen: 21
2a01:6880::/32 maxlen: 32
2a01:6880:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:8d:15:db:ca:d0:10:24:53:b6:de:4c:31:d7:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Nov 25 09:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02235c0d3bafa928192326927586291197a6faf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:67:ff:8e:f0:f6:41:11:25:42:42:a2:00:
22:9a:0b:64:8c:e5:a7:7a:4e:7d:7a:50:d0:be:0a:
84:96:83:10:90:e7:fd:7c:d5:5c:09:53:58:ad:79:
db:cb:76:ef:27:a5:6b:4f:fa:0c:76:1f:df:c1:d6:
39:b1:39:53:86:11:ff:6c:3d:60:dd:46:4b:2d:df:
48:72:36:eb:f1:d9:d4:2f:b5:7e:bf:3d:e6:05:e0:
01:d8:5a:d1:11:d0:bb:1e:1e:9f:28:d4:46:b9:b7:
6e:2a:30:28:8f:7a:53:50:3a:b9:5c:00:e8:64:b9:
c5:5c:59:7f:bf:58:f2:24:ba:d9:df:48:b4:a0:1e:
cb:74:7f:2f:0f:86:fb:47:6e:07:be:78:a5:b7:cf:
ef:f5:64:de:55:fa:76:0e:ea:31:2f:ea:e1:43:a3:
b8:4b:cc:35:a0:37:48:95:88:e5:26:9d:c2:a0:4f:
0e:d7:3f:4e:59:93:7b:b9:39:8c:1e:b7:ea:58:c9:
5d:45:96:12:cb:e6:1d:4f:d7:ca:21:3c:26:f1:94:
0e:00:84:a8:5c:54:c1:47:6b:5c:93:35:77:20:cc:
e2:b8:e7:3a:4d:c2:da:fb:69:a2:b3:44:b1:fc:e1:
60:82:93:a7:53:08:76:67:c9:0f:b4:fc:0f:65:8c:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:5C:0D:3B:AF:A9:28:19:23:26:92:75:86:29:11:97:A6:FA:F8
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/AiNcDTuvqSgZIyaSdYYpEZem-vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.224.0/23
213.169.64.0/19
IPv6:
2a01:6880::/32
Signature Algorithm: sha256WithRSAEncryption
b0:d9:6b:f8:9e:25:8e:7c:41:2d:48:a0:0a:e4:48:4b:df:66:
bd:fe:cb:38:e2:89:46:f6:b6:de:04:f4:fc:2c:0b:e4:7b:1a:
2e:d9:aa:e5:61:1a:c8:f3:ce:24:9c:c0:48:ed:13:bb:1b:b4:
ed:33:d3:4a:06:63:c3:af:70:ed:1b:05:88:bd:2f:57:d9:da:
f8:a6:18:9c:09:fd:38:8e:b6:fc:d6:46:cc:55:58:dd:77:49:
8d:ef:4e:db:b4:81:93:d4:ad:ee:c1:5f:5a:43:37:87:36:ee:
cc:33:9c:e0:b2:0d:33:43:8d:c2:cd:81:66:c7:6a:53:3e:de:
46:f6:68:02:3f:48:a2:b9:2e:98:2c:b5:2f:34:de:fb:28:15:
b8:77:73:59:7a:e7:a7:3a:d0:da:75:16:f3:86:d9:ac:db:8c:
bb:8d:63:57:43:06:72:bc:2e:3b:8f:e3:a2:c9:bd:0d:61:ba:
19:17:37:ff:62:41:5e:15:c9:f1:dc:95:41:5e:bb:7a:9d:8b:
53:b5:77:f2:12:df:53:90:25:11:c1:a0:a1:ef:29:b2:97:10:
05:5b:c4:c1:05:19:c5:bb:2b:b4:07:c1:1a:6f:93:22:71:6e:
07:00:46:a9:d8:8f:39:64:20:d7:5e:ef:1c:a2:f8:ab:f0:1f:
19:a1:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:17 2024 by rpki-client on console.sobornost.net