Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/SuM29K0rpDkB-pTx5yWZqg356Fk.roa
File: SuM29K0rpDkB-pTx5yWZqg356Fk.roa (raw, json)
Hash identifier: dwWRaRahfJ56hRVnei3aWbEPkGs49Dia/GmZHgRPIYI=
Subject key identifier: 4A:E3:36:F4:AD:2B:A4:39:01:FA:94:F1:E7:25:99:AA:0D:F9:E8:59
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 0193D9E59C9C5A01560A4FB90201DA412FDA
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/SuM29K0rpDkB-pTx5yWZqg356Fk.roa
Signing time: Wed 18 Dec 2024 13:12:03 +0000
ROA not before: Wed 18 Dec 2024 13:12:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213794
IP address blocks: 5.181.189.0/24 maxlen: 24
193.34.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:e5:9c:9c:5a:01:56:0a:4f:b9:02:01:da:41:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Dec 18 13:12:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ae336f4ad2ba43901fa94f1e72599aa0df9e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:cc:ad:46:94:15:e8:cf:70:6e:b6:07:e7:
19:a5:96:eb:05:de:d9:ff:04:1c:c8:50:93:2c:ef:
d6:06:b0:e3:48:87:30:3f:0c:b2:24:47:c7:b3:bc:
fe:bf:f2:7c:8a:0a:c0:1d:29:fe:d2:22:8b:07:0a:
bc:ca:c6:17:db:d8:2b:77:20:fa:2f:a8:23:7f:39:
3d:d4:e7:44:a7:35:83:b9:48:34:51:70:75:77:6b:
5b:dd:df:2c:90:62:69:a9:53:16:e0:2d:51:e9:d7:
71:11:8b:6c:63:82:03:5b:3c:b3:d5:5d:0b:d2:d3:
f5:17:f6:6e:87:f2:b0:2c:0c:3d:90:76:df:fd:41:
5b:4e:4a:6f:7a:3a:08:86:97:87:0d:e6:58:e7:f6:
ab:d1:4c:a9:75:7f:fe:60:28:9e:74:4e:f7:c1:a5:
c6:bf:bf:4b:72:5d:0d:53:e8:39:5c:1e:74:80:23:
dd:e8:ee:d3:fa:2d:b1:ac:86:38:32:c9:73:45:1a:
01:90:52:fc:ad:86:10:7d:ba:c9:ff:6a:d6:de:41:
ba:cd:97:7a:bb:ec:cd:b5:d9:41:1c:4c:c7:e2:32:
69:df:90:ed:d6:23:a0:fe:66:95:5f:ca:17:72:35:
1a:a2:16:9a:e1:8f:f9:a9:de:bb:74:af:34:f8:af:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:36:F4:AD:2B:A4:39:01:FA:94:F1:E7:25:99:AA:0D:F9:E8:59
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/SuM29K0rpDkB-pTx5yWZqg356Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.189.0/24
193.34.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:98:3c:f5:95:64:da:1a:9c:34:57:39:57:28:1c:10:ee:f6:
93:52:fa:3e:36:53:75:4e:ab:44:d6:ac:1d:ba:d2:5e:04:72:
07:fb:f3:03:bd:aa:6c:03:bb:7e:e7:f7:34:ae:ae:0b:ba:1a:
2c:54:aa:54:88:90:fc:42:ef:71:c8:dd:6f:92:c2:17:1e:e3:
b9:e2:54:2a:d9:f9:60:ef:17:75:3c:99:3d:8d:15:f3:b0:54:
48:44:d5:d7:3c:59:69:cf:be:cd:bf:f0:10:e7:5a:30:af:fc:
29:2c:fe:8f:81:3f:cb:35:8e:8b:8c:e6:90:e3:62:8b:f1:a1:
c0:10:e6:a9:0d:ad:0f:84:5b:a9:21:2b:70:cb:a1:af:17:16:
7c:f5:c1:ae:3a:e7:91:88:09:e1:7a:9f:51:d8:b7:39:ec:a4:
5c:d4:a5:45:d3:a8:95:b5:c5:99:f4:5d:88:ca:a8:f8:5e:06:
18:a0:c5:bb:27:79:28:64:53:70:fe:74:6a:61:1d:46:96:0a:
b4:fa:4e:a6:d1:e7:bf:33:dd:e2:59:c2:1d:3a:a7:53:4f:c4:
e7:59:89:b3:85:49:ad:79:af:d5:f5:b8:15:4d:6e:5a:80:21:
d0:b7:b2:9e:75:20:f2:11:bf:2e:b0:25:ad:98:6e:c4:8c:ba:
96:e2:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net