Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c-tYZP5-h4GZ61lmD8Ys4ZnKN_g.roa
File: c-tYZP5-h4GZ61lmD8Ys4ZnKN_g.roa (raw, json)
Hash identifier: ZcL/Wqc7/nJ6sJqW8Pi5oIAXP1DXLiGAYe0A129iw64=
Subject key identifier: 73:EB:58:64:FE:7E:87:81:99:EB:59:66:0F:C6:2C:E1:99:CA:37:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E087EB07A4FCBC3BFFBC373321316CA9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c-tYZP5-h4GZ61lmD8Ys4ZnKN_g.roa
Signing time: Thu 19 Dec 2024 20:07:04 +0000
ROA not before: Thu 19 Dec 2024 20:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134677
IP address blocks: 31.58.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:87:eb:07:a4:fc:bc:3b:ff:bc:37:33:21:31:6c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 19 20:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73eb5864fe7e878199eb59660fc62ce199ca37f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:02:ca:fd:b8:b0:e7:8e:90:3f:3b:6d:1c:
a7:67:27:81:90:2d:48:8d:ac:2f:26:6c:f2:bb:df:
43:8b:9b:dd:c6:d3:25:a2:05:a9:e8:f9:7d:9d:11:
78:94:9b:30:e0:f2:12:d4:53:f3:ba:0d:7b:a7:48:
60:9f:97:06:73:88:86:14:2f:33:82:7a:d1:85:0f:
25:a7:43:65:23:03:42:c9:3e:2a:9b:42:39:3c:88:
7f:3f:57:1a:9a:24:75:0b:0d:12:80:42:38:92:fa:
58:54:c4:c0:fb:5a:13:35:ad:9e:b7:73:a7:93:fa:
94:76:e1:6e:72:52:f9:36:73:99:aa:53:a4:07:b8:
13:91:df:a7:99:46:92:94:11:79:8c:07:50:a6:52:
f6:59:a4:06:1a:4c:62:14:d7:1e:2f:2c:19:88:d0:
1d:36:2e:77:f2:79:c6:35:70:b9:9e:3e:2a:aa:75:
bc:fa:05:e4:fb:b9:1e:1c:df:ea:46:42:c3:52:13:
4c:3d:d8:54:0c:2f:b6:4d:7b:36:28:f1:9f:d4:81:
2c:ff:2e:30:3f:25:eb:fd:57:84:f1:62:50:6d:bc:
03:02:50:60:8e:3b:78:ca:f4:44:45:61:5d:ce:7a:
f7:8c:e3:71:ad:48:21:22:c2:47:69:ff:8c:63:27:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:58:64:FE:7E:87:81:99:EB:59:66:0F:C6:2C:E1:99:CA:37:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c-tYZP5-h4GZ61lmD8Ys4ZnKN_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:eb:3d:75:0e:6f:81:52:bd:77:b8:13:5b:b8:f7:cf:16:96:
b1:c8:1c:d6:43:01:dc:ba:33:57:3f:5a:dc:90:32:71:d3:f9:
06:df:2e:85:9b:09:b3:ae:fd:cc:d5:c8:b5:59:90:3d:01:ed:
9a:b9:15:50:16:30:b7:6d:29:fc:e3:1e:95:70:37:c0:85:91:
45:7f:24:b6:4d:21:7c:f5:b3:a3:5e:e7:37:f8:2d:27:71:d1:
72:cc:36:9a:d1:d7:0d:0b:c5:46:0f:d8:f3:4a:7e:4e:8d:57:
0d:64:aa:11:76:6f:fb:93:02:25:4a:33:7e:eb:53:19:f5:55:
44:a8:6b:e2:45:9a:a9:a6:95:f8:65:77:99:11:04:36:be:dc:
e4:22:14:8b:61:84:d1:9f:62:45:a6:fc:78:9c:0a:89:13:ae:
61:21:75:2a:e1:c7:96:67:5f:e5:66:4d:54:a4:5d:d8:96:b6:
c7:a7:ca:cf:a3:9e:4d:a5:c7:fb:d1:65:16:73:fb:71:06:c5:
9f:f6:c2:7c:ed:02:56:18:87:77:46:9e:b8:89:7c:67:47:0b:
b9:ff:69:83:5d:a5:db:be:67:26:0f:65:e9:20:96:1f:a3:d9:
05:2b:cd:79:1d:ba:c6:5b:74:51:aa:31:bc:f9:0d:08:9e:d2:
c0:e6:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net