Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/PJQImecGK7KsWxZoNa2dDuZtIZU.roa
File: PJQImecGK7KsWxZoNa2dDuZtIZU.roa (raw, json)
Hash identifier: KYoSkjv2Bq9d6bx/GA4Ze77K2DiEV7/WOROAr6ZCjqI=
Subject key identifier: 3C:94:08:99:E7:06:2B:B2:AC:5B:16:68:35:AD:9D:0E:E6:6D:21:95
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 018CCA2B9332241D38F05EAA687DE90104E9
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/PJQImecGK7KsWxZoNa2dDuZtIZU.roa
Signing time: Tue 02 Jan 2024 12:35:02 +0000
ROA not before: Tue 02 Jan 2024 12:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28990
IP address blocks: 217.26.144.0/24 maxlen: 24
217.26.144.0/21 maxlen: 21
217.26.144.0/20 maxlen: 24
217.26.145.0/24 maxlen: 24
217.26.150.0/24 maxlen: 24
217.26.152.0/21 maxlen: 21
217.26.147.0/24 maxlen: 24
217.26.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:93:32:24:1d:38:f0:5e:aa:68:7d:e9:01:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 2 12:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c940899e7062bb2ac5b166835ad9d0ee66d2195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:72:aa:1b:7c:27:f4:70:bd:67:07:9e:23:
f4:9c:54:44:da:f9:05:6b:8f:1c:d8:80:52:79:4e:
92:23:af:41:3b:d8:da:3f:9d:7b:70:bd:e5:c0:b7:
05:09:9b:a6:1d:1d:a9:c4:c1:77:56:a5:2a:a3:09:
0e:b6:d5:ba:16:a6:ee:03:a4:95:18:85:78:7d:13:
e0:72:22:56:95:ee:46:82:b1:e0:55:29:15:dc:39:
13:dc:e5:de:8e:83:db:89:00:9f:1e:90:80:cc:9b:
1c:f9:eb:03:db:71:dc:d9:89:9b:04:28:04:f0:9b:
fe:6e:92:6b:39:7a:d9:75:5c:00:a0:00:49:b4:54:
5f:5a:ce:21:ec:7f:6c:3c:51:2e:6f:d7:37:62:8f:
f3:31:8c:72:9d:d9:8e:71:e2:fe:f8:df:cc:3d:a2:
02:b4:31:01:62:fb:33:22:f9:f2:70:51:91:14:b2:
9c:ce:f6:b2:92:c7:0c:2e:2c:63:50:b9:59:c6:e5:
f1:b7:a5:d7:f0:e7:d7:a9:6a:fb:fb:bd:18:0a:94:
cd:79:ec:ab:09:2c:2d:76:2c:dc:76:9b:00:7e:fd:
37:f0:2f:14:de:5f:3f:85:f2:db:09:64:fe:22:89:
97:6d:ac:99:ad:d2:66:f8:79:a2:dd:8d:46:97:94:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:08:99:E7:06:2B:B2:AC:5B:16:68:35:AD:9D:0E:E6:6D:21:95
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/PJQImecGK7KsWxZoNa2dDuZtIZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:42:ea:69:1b:df:3c:a1:d8:7c:b6:a2:1b:05:51:08:39:1b:
73:41:a1:dd:17:e0:86:33:aa:7e:9e:4e:78:a3:3f:62:0b:df:
5f:65:c6:c3:52:e5:d8:da:50:99:6c:44:c3:e1:12:ab:48:b6:
fd:7c:c0:60:61:64:d1:bc:ca:df:b4:05:16:e1:ea:93:1c:5b:
b0:31:4e:fb:6f:d1:e4:61:f2:d2:19:f7:01:3e:f1:a3:30:bb:
a6:89:ea:a2:de:e2:ff:ae:cb:3a:a9:2f:9f:e9:3c:21:43:17:
52:a6:bf:1b:78:49:e2:75:1e:3c:74:da:64:9f:e5:b4:52:db:
09:12:77:65:ec:36:e0:7d:0a:19:1a:11:12:fd:c9:32:2c:07:
5e:01:26:d8:51:ee:7f:25:b2:c8:2b:61:33:ab:e3:1c:ba:36:
53:d2:ef:e5:ee:48:c1:bd:6f:58:16:0e:b9:01:2a:59:26:d5:
4d:03:51:23:cd:bf:a5:0d:5a:1e:e0:d9:b2:6b:84:92:c6:89:
5d:8e:83:d4:62:d3:09:12:dd:bd:93:1c:22:00:67:4b:88:c6:
32:9c:e1:eb:be:a7:7f:a4:07:cb:d5:d5:6b:67:74:48:2d:17:
5e:a2:0f:d6:a7:ff:99:a8:02:7b:21:23:88:c5:43:8d:70:4b:
58:65:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net