Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/RompsD43pED2OtMaFKB0MxcGQVU.roa
File: RompsD43pED2OtMaFKB0MxcGQVU.roa (raw, json)
Hash identifier: TUPzMxeXmkgPpG6KCjjGt4lxzLn/0a9LgPOOvDgwYCs=
Subject key identifier: 46:89:A9:B0:3E:37:A4:40:F6:3A:D3:1A:14:A0:74:33:17:06:41:55
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 01917E6D11333B146CB8D6C400B3D1F75B67
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/RompsD43pED2OtMaFKB0MxcGQVU.roa
Signing time: Fri 23 Aug 2024 08:49:22 +0000
ROA not before: Fri 23 Aug 2024 08:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21339
IP address blocks: 176.124.68.0/23 maxlen: 24
185.61.164.0/22 maxlen: 24
193.187.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:6d:11:33:3b:14:6c:b8:d6:c4:00:b3:d1:f7:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Aug 23 08:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4689a9b03e37a440f63ad31a14a0743317064155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:af:80:76:ea:c5:0c:1e:a0:6d:71:b7:1a:
8b:25:75:b4:be:79:b5:44:1e:1f:f5:b9:50:75:c9:
8e:7a:24:cf:e1:82:42:2f:07:82:f4:97:80:d5:57:
16:d4:66:f8:26:97:73:e3:c6:27:cf:9e:3d:65:e1:
06:72:ee:bb:64:d2:5b:83:48:7a:68:b9:44:d0:73:
e0:5e:8c:13:8f:b0:51:ea:fe:78:24:5c:00:ef:96:
55:94:1b:82:50:54:53:6c:ff:ea:63:70:7d:3b:ec:
40:87:4e:e1:b6:f2:05:99:3b:1b:f2:2b:b1:a1:67:
66:33:b9:ef:a4:3e:d4:86:b0:2c:26:9b:12:1c:1c:
6f:be:ec:b0:66:b4:84:29:7e:b4:c8:6e:ff:21:2c:
e9:76:d3:4d:f8:f1:c1:29:f8:88:dd:d2:25:f9:b0:
0a:ea:5e:c9:bc:41:82:9d:73:81:f1:15:df:d5:9b:
72:ae:91:d6:58:40:16:65:e2:97:50:8f:59:3a:ba:
fd:8c:1e:83:15:f6:e2:63:fb:8e:55:d0:24:89:d5:
46:66:a1:c9:1c:a4:a5:d5:d3:90:aa:ac:b8:df:b5:
4d:d4:86:dc:ab:a0:ef:48:5b:c6:1f:67:b6:98:90:
67:b2:98:7e:28:b0:1d:f3:b3:b6:be:63:24:cf:5f:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:A9:B0:3E:37:A4:40:F6:3A:D3:1A:14:A0:74:33:17:06:41:55
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/RompsD43pED2OtMaFKB0MxcGQVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.68.0/23
185.61.164.0/22
193.187.99.0/24
Signature Algorithm: sha256WithRSAEncryption
36:da:d5:50:e4:1f:1f:ef:93:98:6e:b9:e1:da:89:73:bd:9d:
ea:83:48:42:8b:4e:92:5f:0b:3f:f7:aa:07:46:92:e3:a9:95:
86:94:10:22:9b:9c:b6:10:4c:a1:52:7c:29:bc:ba:cc:17:07:
95:d2:f2:9f:81:9e:f4:ba:4a:15:67:a3:49:f7:b2:c4:ef:70:
37:1c:68:bd:39:fa:bd:f8:2e:ac:c6:29:ae:e0:36:0e:03:98:
bf:c8:c8:24:a0:55:4e:7c:0e:3e:11:2a:2b:51:d0:fd:e9:11:
74:e4:04:b5:36:89:5e:a8:36:ec:e5:44:ac:23:47:4f:e0:a1:
2a:fd:8a:e5:0b:3c:9b:13:41:a7:19:8b:45:e3:d7:35:b8:f5:
c6:00:33:d0:d6:16:ce:8b:4d:cd:1f:c9:69:8e:45:80:73:9b:
27:16:5f:b1:ef:4b:b2:8e:b0:28:b2:ef:85:08:23:e5:77:3b:
26:60:e1:42:21:19:c9:be:53:1f:9d:50:da:53:c4:8c:b1:a1:
80:fd:90:53:dd:74:90:96:ac:b2:13:08:4b:f4:84:45:31:5a:
c5:66:e9:b5:40:52:65:eb:93:48:9a:5c:65:54:a6:4a:7c:0e:
73:fa:b6:4e:d9:47:a1:30:5a:38:31:5b:8a:37:9a:13:2f:b8:
1c:78:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net