Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/TQaG36Uh1zMOHdtnDrHDhyjSFw0.roa
File: TQaG36Uh1zMOHdtnDrHDhyjSFw0.roa (raw, json)
Hash identifier: pAQCx9C7+LZMbtmJXyWg4kj/6c9KNtsuMf8s0nMJI8k=
Subject key identifier: 4D:06:86:DF:A5:21:D7:33:0E:1D:DB:67:0E:B1:C3:87:28:D2:17:0D
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 0193628AE553CC0788875B7C849D3E86DE20
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/TQaG36Uh1zMOHdtnDrHDhyjSFw0.roa
Signing time: Mon 25 Nov 2024 08:58:09 +0000
ROA not before: Mon 25 Nov 2024 08:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39361
IP address blocks: 46.231.227.0/24 maxlen: 24
46.231.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:8a:e5:53:cc:07:88:87:5b:7c:84:9d:3e:86:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Nov 25 08:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d0686dfa521d7330e1ddb670eb1c38728d2170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:30:f6:ca:27:dc:32:de:8d:77:fc:1a:82:
22:93:cd:6d:80:71:83:89:2e:e4:27:cc:a5:ed:44:
1f:a0:9a:a1:79:d0:78:c4:bc:6a:0d:58:4b:2c:4f:
ab:3d:0b:12:b3:34:f0:d5:4e:f0:40:c1:2c:c0:e4:
74:44:36:af:72:73:d3:7f:e5:d0:ee:88:ae:45:54:
d1:c6:0c:d9:1b:b6:95:f0:5a:7e:96:a3:bc:dd:08:
e2:f7:84:e2:b9:17:b0:92:2d:91:ae:e0:3a:aa:d3:
e8:6c:9d:f2:9f:6a:b6:b8:eb:ba:c7:4f:a5:60:9a:
7f:85:cc:85:86:22:31:06:eb:76:b1:e3:84:37:9f:
a4:98:8c:2c:94:e7:f3:bf:b7:c3:01:c9:17:1e:b0:
21:f2:34:18:40:c7:23:24:8b:04:e4:75:4e:41:54:
ba:f3:5e:7b:4b:f0:5c:7d:41:48:86:dd:ca:92:b9:
d1:68:60:dc:26:b6:50:6b:32:4e:1b:38:2a:ad:3b:
76:3a:33:53:ae:62:0a:cd:c1:90:78:60:cc:68:b1:
b5:a0:84:fc:8b:aa:1b:b4:4e:28:b7:45:3e:4f:71:
1f:42:a7:5c:a4:a5:0d:54:3b:fb:5f:84:f0:28:bb:
59:d4:79:d8:a9:38:c9:e8:80:4c:53:5a:c9:e0:d1:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:86:DF:A5:21:D7:33:0E:1D:DB:67:0E:B1:C3:87:28:D2:17:0D
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/TQaG36Uh1zMOHdtnDrHDhyjSFw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.227.0/24
46.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
59:19:d4:e0:b3:b2:73:69:bb:f3:82:46:ae:d4:30:72:f2:23:
35:94:23:a1:98:bb:cb:2e:08:ff:3c:33:72:24:72:2f:e7:13:
73:8b:65:5e:fd:a7:65:5b:c5:a1:1c:22:18:f7:8e:7a:65:6e:
23:9e:92:8c:99:c0:2a:72:77:a8:e8:bd:66:bc:5a:21:1a:c0:
fd:69:55:0f:be:80:a6:2e:be:cd:c2:8c:f9:30:05:ef:f6:3a:
dd:fa:6e:11:64:7c:63:54:96:0d:70:4b:2d:ce:11:ed:3c:ee:
9e:6c:44:5a:78:7b:24:e5:12:31:9c:91:f7:dc:74:22:75:21:
fd:8b:f3:63:ce:df:01:f7:18:ef:a9:2b:db:dd:62:85:22:e7:
c6:45:cc:db:6a:89:e8:5b:15:06:a6:8f:1b:e5:4f:80:4e:a4:
23:59:01:6b:ce:33:87:90:ee:26:1a:55:98:f1:bb:32:3d:dd:
b1:f3:a5:c3:24:af:d3:2c:0f:ed:5a:0c:bf:df:d5:cb:74:fb:
b6:fd:d3:ec:16:0e:ec:47:f5:c0:d5:04:30:e7:d7:28:99:40:
cd:4e:d7:b0:7b:28:d5:6f:1f:bb:83:7f:c8:11:3d:6e:e1:3a:
1f:13:df:6e:08:9c:69:d1:ba:3f:43:c4:47:06:a7:49:6a:f4:
04:36:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:17 2024 by rpki-client on console.sobornost.net