Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/1-wpX6_rAfz770C57GGO4ATfKlzQ.roa
File: 1-wpX6_rAfz770C57GGO4ATfKlzQ.roa (raw, json)
Hash identifier: Q6xMDGkjqo8Y4Qs3v6uPo8WvZsCmCnRE/InL/D6aK0A=
Subject key identifier: FB:0A:57:EB:FA:C0:7F:3E:FB:D0:2E:7B:18:63:B8:01:37:CA:97:34
Certificate issuer: /CN=4c4b8485a5e1c0b49aa963d6cb71f8027862169c
Certificate serial: 01921E824CFEE3F22E81A8413385647F6911
Authority key identifier: 4C:4B:84:85:A5:E1:C0:B4:9A:A9:63:D6:CB:71:F8:02:78:62:16:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEuEhaXhwLSaqWPWy3H4AnhiFpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/1-wpX6_rAfz770C57GGO4ATfKlzQ.roa
Signing time: Mon 23 Sep 2024 10:51:48 +0000
ROA not before: Mon 23 Sep 2024 10:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38325
IP address blocks: 79.170.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:82:4c:fe:e3:f2:2e:81:a8:41:33:85:64:7f:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4b8485a5e1c0b49aa963d6cb71f8027862169c
Validity
Not Before: Sep 23 10:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb0a57ebfac07f3efbd02e7b1863b80137ca9734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:d0:47:c7:c1:f4:6b:61:d9:63:a2:3f:df:
a2:58:99:50:6d:39:4d:4f:e8:c3:cb:d3:66:cf:c4:
f5:5d:e0:2f:76:74:81:06:fa:92:c5:dc:76:f7:d8:
da:d6:c0:f4:c8:d9:02:8e:e8:a2:82:4e:58:a7:2d:
17:f1:db:8c:e7:48:35:2c:0e:45:ac:77:44:13:fe:
91:14:c6:fb:d7:e4:82:ca:86:75:1f:02:5f:67:5b:
cc:e5:75:bc:a2:e1:f8:c1:cb:37:2f:3d:7e:51:d0:
f8:1f:13:a1:b8:c3:13:64:e2:49:80:91:7a:af:10:
a0:41:da:2e:32:63:17:ac:93:e9:ea:04:7a:eb:13:
58:e2:7f:69:94:7e:b9:4e:9c:4d:28:83:f1:69:76:
7b:2b:6a:09:f2:7d:f4:fd:b8:fa:35:97:56:48:e9:
4c:5c:42:b8:76:e3:96:43:41:07:5f:da:cf:68:f8:
61:1c:5b:33:f3:c6:2a:72:13:71:65:f2:a7:ff:22:
50:52:d1:9b:dc:30:67:29:26:bb:6c:a3:af:81:6e:
67:b2:64:09:c2:b5:90:1c:19:57:79:83:2c:81:b3:
2a:c6:c4:f6:e2:83:bb:b3:ab:c1:b9:84:0e:53:99:
68:b7:ee:b6:2b:60:bb:e3:6d:81:7a:fd:1d:7c:f0:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:57:EB:FA:C0:7F:3E:FB:D0:2E:7B:18:63:B8:01:37:CA:97:34
X509v3 Authority Key Identifier:
keyid:4C:4B:84:85:A5:E1:C0:B4:9A:A9:63:D6:CB:71:F8:02:78:62:16:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEuEhaXhwLSaqWPWy3H4AnhiFpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/1-wpX6_rAfz770C57GGO4ATfKlzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8d0e2f-da77-410e-8c60-5d7a02bd94d2/1/TEuEhaXhwLSaqWPWy3H4AnhiFpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.35.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fc:fb:e9:b2:c8:b5:42:f9:e7:c6:b7:09:12:09:41:be:72:
f4:98:15:85:7b:96:23:3d:d4:59:26:16:76:80:cc:fa:cd:07:
28:46:2a:95:00:18:20:18:cb:9d:53:fb:78:9a:2e:0d:cc:f7:
9e:d2:26:15:8a:7c:2b:b7:86:ce:18:61:f8:a4:29:37:d0:6e:
02:86:0a:f7:b5:0a:c9:c9:fb:9e:f2:c1:43:c1:09:2f:23:70:
ae:da:67:0d:d6:b1:33:ce:f5:5f:54:a8:b3:9e:ee:f4:4c:d5:
5f:80:87:2c:a0:a7:7d:4b:91:30:3a:26:c3:ee:1d:93:36:e4:
09:20:ba:9e:6f:79:80:e2:04:f4:1e:8b:dd:27:79:eb:7d:5f:
3e:01:bc:51:6a:0f:c8:d8:e7:6e:17:fb:26:92:fb:33:06:db:
bb:61:0f:30:85:70:8c:d0:97:75:5f:7b:ac:0b:55:6e:c1:f8:
8b:fb:13:f8:6e:15:39:76:17:2e:1d:d5:56:f2:30:9e:fd:f2:
58:b2:fc:e6:ce:4d:26:16:09:21:a7:2a:a1:5c:96:4d:bf:41:
ea:68:77:a3:96:43:64:fd:55:6a:ee:d4:8b:ca:0f:90:ac:0e:
9a:6c:09:c5:74:0f:88:81:8e:97:ff:50:9a:c9:53:43:f7:ea:
e9:92:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net