Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/a8bu3wwbFC3JJsgsgbDTG3L_-6M.roa
File: a8bu3wwbFC3JJsgsgbDTG3L_-6M.roa (raw, json)
Hash identifier: dT2RiFYSkJWE+wiiMfqAa9MFIN22sQbEhJ1uDQwikrA=
Subject key identifier: 6B:C6:EE:DF:0C:1B:14:2D:C9:26:C8:2C:81:B0:D3:1B:72:FF:FB:A3
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 019421B16E710E7305A79380C7A00E091E34
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/a8bu3wwbFC3JJsgsgbDTG3L_-6M.roa
Signing time: Wed 01 Jan 2025 11:47:43 +0000
ROA not before: Wed 01 Jan 2025 11:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9583
IP address blocks: 159.151.254.0/24 maxlen: 24
192.109.146.0/24 maxlen: 24
2a07:8145::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:6e:71:0e:73:05:a7:93:80:c7:a0:0e:09:1e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 11:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc6eedf0c1b142dc926c82c81b0d31b72fffba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:70:a4:11:97:cb:45:cc:2d:56:2b:db:98:
aa:94:01:f9:77:3e:9b:b7:88:4b:dc:e3:f1:ae:4b:
30:57:b6:1e:55:04:96:5a:c6:ec:79:a6:57:dd:25:
1d:fc:68:85:28:f1:27:1f:b0:26:81:6d:5e:c4:e8:
92:7e:d5:05:06:70:a0:16:f3:27:89:59:9c:bc:99:
7a:ff:a9:07:7a:13:65:eb:af:6d:a4:06:3d:88:15:
1d:9c:87:2b:5c:83:52:d1:58:44:97:c2:b2:7d:6c:
74:65:b6:f9:1f:fe:d4:be:fa:0c:81:7a:f5:a3:0e:
1c:d8:2d:a2:81:82:af:62:0e:ca:70:4a:46:da:c2:
4d:6d:94:ee:f2:00:fb:f2:e4:d1:88:58:e6:d1:46:
ce:e5:89:95:e5:35:49:63:d3:bc:b2:3e:e1:98:d2:
bb:40:81:ac:82:6a:a0:3e:58:4f:3d:d2:30:6c:4f:
b8:f3:b5:7a:af:72:86:80:b7:7e:9f:c1:bb:96:e7:
d3:cd:b7:2e:51:cc:44:e8:7e:7d:f1:38:24:71:11:
c2:2b:11:b1:c2:f6:24:0b:e3:1a:17:85:41:68:4e:
4c:0c:0d:49:db:7b:8c:9e:73:9b:8c:e7:6e:68:f2:
b1:70:bc:d8:95:56:93:ba:67:04:de:7e:bf:2d:3f:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:EE:DF:0C:1B:14:2D:C9:26:C8:2C:81:B0:D3:1B:72:FF:FB:A3
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/a8bu3wwbFC3JJsgsgbDTG3L_-6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.254.0/24
192.109.146.0/24
IPv6:
2a07:8145::/36
Signature Algorithm: sha256WithRSAEncryption
93:75:f8:94:11:a0:08:fc:61:79:cb:05:f3:16:cc:54:52:ea:
1f:1c:31:f0:79:e1:50:45:04:00:49:97:cf:b6:3f:a7:0d:bb:
05:7d:e2:6e:bb:bc:99:ba:d1:d3:78:c6:a7:fb:bd:2e:9f:f4:
45:65:41:d4:76:cc:25:44:ee:b7:d2:40:7f:05:44:ce:03:50:
c9:85:3e:b3:83:ef:9b:3b:0c:f2:26:ea:9b:b0:72:6f:c5:d1:
5c:d0:21:fb:1e:b2:5d:a3:a3:af:47:ee:87:7d:5b:9c:75:54:
73:e8:4e:f5:a1:99:17:c0:bf:50:37:0a:19:9c:dc:7b:95:a9:
30:f8:7f:3a:8f:19:9e:05:f0:3b:d5:81:39:7a:8c:b7:c8:03:
2c:f0:a8:6a:13:a3:4f:bf:3a:75:30:f6:b9:54:a9:a4:c4:99:
5e:40:c0:1c:2a:ee:68:99:77:35:4c:ee:28:5b:8d:6c:f1:ea:
a6:b5:72:bb:e5:73:e4:56:5b:96:dd:a8:31:70:ca:ac:cd:8c:
75:51:24:bd:39:6b:be:d7:39:30:65:67:49:87:0b:b2:23:93:
f4:d8:e8:89:fd:bf:6d:40:ba:4f:cc:6e:3e:37:da:4d:e2:aa:
9b:41:e5:64:17:66:dc:a5:ee:00:47:de:17:08:8c:dc:eb:a7:
04:03:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:56 2025 by rpki-client on console.sobornost.net