Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EClVXYWvCmnPyqKcwsk1c5crIZU.roa
File: EClVXYWvCmnPyqKcwsk1c5crIZU.roa (raw, json)
Hash identifier: D+lnul6I39GxTfjdPlb9naab0L851uaTZnwnLek6XzY=
Subject key identifier: 10:29:55:5D:85:AF:0A:69:CF:CA:A2:9C:C2:C9:35:73:97:2B:21:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01935AB4FA1FB56A24BFB145D4CC33AC8AEF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EClVXYWvCmnPyqKcwsk1c5crIZU.roa
Signing time: Sat 23 Nov 2024 20:27:10 +0000
ROA not before: Sat 23 Nov 2024 20:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.187.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
217.60.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:b4:fa:1f:b5:6a:24:bf:b1:45:d4:cc:33:ac:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 23 20:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1029555d85af0a69cfcaa29cc2c93573972b2195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:9b:c7:31:a6:e8:be:b1:95:af:2b:8c:8c:
19:78:72:00:ee:58:80:4b:f4:42:f1:97:98:e6:c9:
9e:00:76:32:2b:23:cd:3d:bd:38:2b:2d:87:d7:89:
f6:42:07:f7:e6:0d:2a:7d:56:bc:84:fb:11:fb:89:
a6:dd:17:22:62:9d:82:4c:7d:8e:bc:5f:bb:62:fb:
1a:c1:dd:3c:0d:11:6b:55:91:29:20:2a:f3:bf:d6:
5e:c8:e0:e6:9a:55:be:65:72:76:ad:5d:75:4d:73:
57:93:f1:23:5c:03:11:44:5a:cb:b3:64:78:d5:d8:
bf:1c:f1:20:12:f0:a7:5f:72:7f:bb:0f:6d:17:32:
9a:b6:c8:d9:75:62:a4:d6:8f:10:48:50:ad:f5:7d:
d0:1c:4a:f9:1d:92:0b:e1:d2:70:22:af:9d:8d:fd:
54:88:66:81:df:08:77:64:d9:de:a3:4b:45:bd:39:
df:78:2c:40:b3:40:27:35:7a:c7:25:c1:0f:b5:17:
d5:ff:ed:61:bb:ad:71:0b:04:76:38:30:e9:9d:47:
93:a7:4a:be:f7:a9:b5:ef:68:2a:ae:dc:64:4d:e0:
72:45:71:91:71:12:a4:f7:fc:7e:e0:dc:cd:f4:75:
0a:49:cf:bd:3f:d6:1e:4f:72:2b:75:01:83:d9:59:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:55:5D:85:AF:0A:69:CF:CA:A2:9C:C2:C9:35:73:97:2B:21:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EClVXYWvCmnPyqKcwsk1c5crIZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.187.0-217.60.197.255
Signature Algorithm: sha256WithRSAEncryption
09:a3:8a:01:2d:fa:33:c8:91:aa:72:6d:f7:3c:56:2b:0e:35:
9c:02:82:ab:51:5e:93:79:a0:c5:01:47:00:36:4d:7b:16:db:
f9:78:87:15:d1:2c:27:a6:fe:85:ff:50:cc:b8:84:b1:c7:a1:
07:85:24:5e:30:c0:cd:fc:43:a6:88:4f:df:d3:ca:e4:6f:87:
ce:e4:6d:00:37:1f:6f:0f:45:ae:f7:15:4c:46:93:99:d1:fe:
43:e4:52:45:8e:9f:0c:cd:9c:84:a8:5c:54:4b:7a:c7:ef:06:
14:e0:6a:aa:ff:92:e6:f3:4a:56:a5:81:fa:b0:55:ee:27:14:
14:3f:cc:f4:ef:87:f5:96:b1:4d:85:e1:b0:2b:62:8c:8a:0c:
60:27:81:a1:99:b8:77:c2:81:1c:5c:3d:20:fd:2a:99:e5:a2:
c2:10:fb:cf:3a:4d:81:a6:02:b2:b2:c3:09:49:44:ff:ae:22:
07:7c:d4:6f:87:21:05:3d:1e:27:e1:1b:a9:b2:d2:b6:70:73:
8a:80:bc:c1:21:fc:9f:cc:46:4a:84:7c:74:4d:ed:7a:7e:a3:
59:04:a4:93:8b:0b:f5:c9:83:70:21:fe:90:66:f3:ea:78:45:
ec:e7:40:fc:b1:11:c6:1e:7a:04:5f:d4:25:30:4e:c5:3e:c7:
c5:32:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net