Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/dImrLNPREgjcGCQ8jA3Z1Q7VxzA.roa
File: dImrLNPREgjcGCQ8jA3Z1Q7VxzA.roa (raw, json)
Hash identifier: BOy/REQ6VtwnooNuekife3a6ZjTzluomgTeU/3kwIXU=
Subject key identifier: 74:89:AB:2C:D3:D1:12:08:DC:18:24:3C:8C:0D:D9:D5:0E:D5:C7:30
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 0191DB9BFFC8ADCE3CCAC9F1618E920CB33D
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/dImrLNPREgjcGCQ8jA3Z1Q7VxzA.roa
Signing time: Tue 10 Sep 2024 11:05:19 +0000
ROA not before: Tue 10 Sep 2024 11:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 78.136.250.0/24 maxlen: 24
78.136.251.0/24 maxlen: 24
78.136.252.0/24 maxlen: 24
78.136.253.0/24 maxlen: 24
78.136.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:9b:ff:c8:ad:ce:3c:ca:c9:f1:61:8e:92:0c:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Sep 10 11:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7489ab2cd3d11208dc18243c8c0dd9d50ed5c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:eb:8a:25:78:fc:1c:61:d1:7d:4b:72:2f:
6e:68:45:42:5b:cf:ec:a3:cf:dc:59:4e:56:da:67:
2d:23:1d:41:2a:f2:2d:e2:2d:f7:bf:31:cc:d2:20:
26:4a:4c:dd:ce:f8:b2:3d:cd:16:42:88:07:9a:ce:
94:3b:e0:79:0d:f1:cf:d0:99:8d:ad:38:6d:4e:02:
90:20:6f:2e:f1:f4:97:04:ab:f2:bd:11:30:33:50:
df:c8:b1:ab:24:50:45:d6:06:01:27:25:bc:c0:4a:
1d:2e:1c:25:b5:c2:fc:60:31:16:18:57:b7:0b:9f:
9e:ca:21:57:73:99:6b:e1:c9:e4:1c:31:d3:90:d5:
1d:8b:e3:f0:b6:0c:25:8c:23:c2:41:5a:06:b8:ae:
17:be:23:56:47:87:74:2d:d3:bc:b2:6f:f4:59:ae:
68:27:4a:b7:ee:30:62:aa:b3:5e:39:97:20:6e:28:
51:57:b7:80:77:42:94:8f:f2:fa:7f:d7:ee:5c:3c:
8d:9f:d1:7a:bb:d2:c4:cf:65:6a:3a:86:59:c5:a9:
5e:0a:55:bc:90:f7:17:87:60:f0:5a:0b:d2:bb:02:
67:0d:f5:43:de:5f:fe:d5:e3:d1:ef:3d:e5:f5:a9:
c3:fd:0b:38:be:76:56:cb:34:ab:49:04:a7:65:0b:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:AB:2C:D3:D1:12:08:DC:18:24:3C:8C:0D:D9:D5:0E:D5:C7:30
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/dImrLNPREgjcGCQ8jA3Z1Q7VxzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.250.0-78.136.254.255
Signature Algorithm: sha256WithRSAEncryption
4b:ed:18:b8:33:60:08:4b:8d:bc:73:8c:b2:fc:8f:ac:74:28:
87:28:8d:f2:58:ec:b9:94:b3:e6:dc:0e:4a:17:36:d0:c9:3e:
d0:3e:de:11:80:7f:5f:3f:2f:f2:64:5d:f6:e2:3d:38:57:f1:
19:de:d1:0b:61:b6:27:57:ce:ba:cc:e1:e0:2b:03:3a:e0:a6:
43:1a:8d:65:f8:59:99:cf:8d:8c:d6:d7:f2:fa:1d:87:7f:2f:
d6:b9:cd:5f:e5:39:60:c0:26:e9:e7:b5:34:d9:6a:7b:c1:2d:
44:90:ce:b0:10:7d:ed:55:41:c4:6d:bd:d8:5b:24:96:60:6a:
38:c8:e7:5f:c8:24:80:cd:69:87:96:d5:69:df:b8:e9:ab:0c:
e0:c4:b9:eb:cb:9c:8f:67:10:61:9d:54:3c:8e:d7:80:47:be:
66:3c:8c:59:64:0d:6e:35:85:e2:16:ce:86:4b:bc:ec:91:b8:
16:63:a4:9e:f8:4a:b3:d9:39:b5:78:76:68:53:10:71:89:0b:
d3:64:10:ee:6c:9a:d9:5e:d4:21:32:72:fe:3c:a4:27:f1:e3:
4a:80:50:25:7b:0c:84:6a:05:fe:a2:a9:cf:f3:75:ca:32:0d:
97:5d:e3:d6:0d:58:36:17:30:89:98:bf:67:e7:be:f6:a2:84:
42:b5:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:43 2024 by rpki-client on console.sobornost.net