Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uSqqyDCVNU64Lvlg2fh3XvyykQE.roa
File: uSqqyDCVNU64Lvlg2fh3XvyykQE.roa (raw, json)
Hash identifier: i+r/glVgmQa8dgA6TiByQCz1ynjKV8yyqAqamTKRFgM=
Subject key identifier: B9:2A:AA:C8:30:95:35:4E:B8:2E:F9:60:D9:F8:77:5E:FC:B2:91:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193D526FDF4C4BE4234333DC8A7C81A0472
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uSqqyDCVNU64Lvlg2fh3XvyykQE.roa
Signing time: Tue 17 Dec 2024 15:05:22 +0000
ROA not before: Tue 17 Dec 2024 15:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 31.57.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:26:fd:f4:c4:be:42:34:33:3d:c8:a7:c8:1a:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 17 15:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92aaac83095354eb82ef960d9f8775efcb29101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:95:7c:12:57:a8:80:13:c7:dc:5c:d0:65:
3b:7a:d7:67:cb:9c:fb:fd:5b:ba:11:8e:2b:5a:02:
af:5b:ef:7f:1f:b1:90:4d:68:47:52:61:c6:1d:cd:
20:8f:47:9a:2d:36:fb:46:68:cd:a9:be:c8:e0:3b:
8c:9d:f7:89:ae:54:8e:10:7a:76:0f:67:8c:57:50:
eb:18:9d:da:73:06:81:ca:54:e6:42:c9:02:43:b4:
5d:36:54:da:5c:d9:ed:ca:07:e7:a5:38:ae:72:6e:
08:80:94:ed:0a:d8:38:ff:b9:0a:25:12:5e:c3:33:
21:ed:d8:58:40:42:3c:44:5a:7d:fa:5c:27:ae:76:
53:3a:d2:37:83:12:44:e8:5d:bd:ff:8e:0e:e4:0d:
c0:c6:c0:78:9a:c7:bf:69:72:8c:e7:33:67:d7:0c:
7d:4b:0e:1a:95:81:ad:b9:22:0c:39:39:f1:7b:3a:
c9:fe:f0:4a:09:ae:f6:8f:ca:c8:0e:85:0e:e0:0d:
90:9e:fe:83:93:39:22:01:45:54:41:52:ba:7b:21:
41:f0:00:a2:a2:a6:24:8a:2f:86:4f:82:f1:45:57:
ce:a0:18:bb:c6:9b:98:7c:fd:b3:56:40:08:2d:38:
fa:91:f7:f3:92:08:7a:6b:e1:f6:c8:0b:12:45:19:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:AA:C8:30:95:35:4E:B8:2E:F9:60:D9:F8:77:5E:FC:B2:91:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uSqqyDCVNU64Lvlg2fh3XvyykQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.246.0/23
Signature Algorithm: sha256WithRSAEncryption
89:e1:16:93:38:8c:03:b7:7f:05:0b:00:b2:69:d1:5d:e6:29:
7e:4a:c4:82:66:70:7e:23:47:83:1c:71:a5:43:25:d8:ad:2a:
6b:0a:0e:66:01:1c:09:b6:1a:70:1e:b1:88:f4:c3:de:d8:8d:
f7:22:88:59:22:ab:dd:26:84:8e:3d:5e:e5:76:0f:ef:91:6e:
08:9d:1e:09:11:1a:6f:ee:03:92:1d:bb:98:77:a1:e7:75:a9:
04:b9:dd:59:34:00:27:28:19:8e:35:f3:ac:e8:9c:a0:0f:c5:
bd:1a:cf:38:76:21:f7:a2:17:74:1c:47:59:c1:55:7c:90:bc:
fa:1f:61:b2:84:0b:e6:a7:11:1a:08:52:ba:1d:89:12:95:bb:
ea:7c:0d:b1:71:ae:d8:2e:55:30:b2:74:bf:de:2d:4e:b4:df:
6e:0f:85:59:b4:69:a9:0e:10:bb:17:c0:82:fd:fb:25:8c:41:
d2:29:73:1d:e4:5b:b5:04:d4:17:3e:fc:6b:6a:6f:1e:eb:84:
99:52:6f:2d:ae:d7:b4:d6:cd:90:d3:34:68:16:bb:48:67:e9:
f5:85:98:8e:13:e0:79:18:bf:42:53:6f:1f:51:e0:2c:1a:54:
32:02:73:3d:4f:5c:8f:cb:63:b6:e4:8f:63:bc:30:d0:98:0e:
a3:c5:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net