Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/tT-x6ZaOEj3jHqtW4cedW4wkSGQ.roa
File: tT-x6ZaOEj3jHqtW4cedW4wkSGQ.roa (raw, json)
Hash identifier: aNcAHQxv+ApgI+pt9DZzUD7KNaC0bSxL77oj2XQBg9w=
Subject key identifier: B5:3F:B1:E9:96:8E:12:3D:E3:1E:AB:56:E1:C7:9D:5B:8C:24:48:64
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 01926C2A90B0F740B5DBFDE48AC6653358E7
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/tT-x6ZaOEj3jHqtW4cedW4wkSGQ.roa
Signing time: Tue 08 Oct 2024 12:46:21 +0000
ROA not before: Tue 08 Oct 2024 12:46:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34941
IP address blocks: 85.118.200.0/21 maxlen: 21
185.112.136.0/23 maxlen: 23
2a06:6180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:2a:90:b0:f7:40:b5:db:fd:e4:8a:c6:65:33:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Oct 8 12:46:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b53fb1e9968e123de31eab56e1c79d5b8c244864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:d9:f7:ca:a8:b3:5a:f3:e0:35:23:50:38:
ae:ac:58:b4:09:b6:11:98:74:8e:df:ce:d8:ca:6f:
61:f9:19:e6:13:22:80:08:de:98:d5:99:17:88:b5:
7d:20:e6:08:61:bb:4c:18:54:a8:6d:c3:6d:8c:bf:
22:5d:17:7d:c1:f8:40:79:f1:85:15:be:ee:53:ba:
52:59:e5:7c:1e:a8:4a:2e:a3:77:0c:6b:05:7c:3d:
59:84:ad:e4:8a:dd:6c:82:7b:fe:38:5f:5c:ee:dd:
ab:ea:e9:7b:a7:e5:96:51:01:05:c5:0f:4f:dd:0d:
60:61:46:94:f0:9c:b5:d1:c4:e0:f7:77:5c:20:17:
e4:d6:28:76:68:f6:d6:e4:d6:90:67:48:a1:63:b7:
11:bf:58:26:80:95:78:fc:ec:8f:b8:58:2d:bd:70:
29:0b:a0:66:80:4a:03:a7:3f:0e:6a:f7:c4:4a:cb:
d7:1a:10:12:98:ee:d0:f9:bd:8d:95:e9:fd:da:ed:
b2:bb:f1:25:b3:21:5f:a4:05:6f:94:09:9a:3f:2f:
13:0f:3d:44:22:0c:a4:27:c6:f4:5c:94:5a:eb:f5:
a9:a6:67:c4:0e:0c:90:95:81:6d:f1:7a:c5:0d:26:
42:f5:e3:10:07:3d:72:e0:62:12:65:d4:e9:d1:46:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:B1:E9:96:8E:12:3D:E3:1E:AB:56:E1:C7:9D:5B:8C:24:48:64
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/tT-x6ZaOEj3jHqtW4cedW4wkSGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/23
IPv6:
2a06:6180::/29
Signature Algorithm: sha256WithRSAEncryption
a6:db:21:e0:d1:3c:15:38:85:65:6f:27:d7:f9:d3:50:28:52:
65:fc:85:bc:a4:df:14:73:64:8b:dd:c0:62:bb:c4:35:42:d1:
a8:b9:78:f1:4d:b1:02:d2:1e:95:44:94:4a:cb:e0:15:74:19:
c2:e4:28:07:d9:54:b1:4d:a0:52:32:b2:3f:13:65:ea:0b:aa:
bf:5f:b5:c2:fa:eb:3d:df:d0:0b:55:2d:cf:99:65:7d:e4:a1:
f3:9d:79:22:aa:5c:92:22:08:48:a4:8d:a1:65:db:51:59:de:
ca:eb:3d:22:d2:19:13:3d:b3:b6:bc:93:48:a0:59:b2:4a:5f:
10:5c:d2:73:79:8b:04:b2:b4:12:07:a9:e6:30:da:46:b9:e0:
f2:af:14:58:5e:22:fb:f1:24:a9:f1:9b:ff:88:c7:51:f4:6a:
e2:a7:9f:be:a3:9d:b3:61:9a:34:cd:cc:95:58:2d:cc:9e:b1:
a8:9b:83:f4:c8:a2:38:90:e5:6e:f7:ed:88:66:b9:11:19:f2:
92:b6:d9:e1:b8:e7:e8:79:9d:b1:68:39:8e:f8:41:47:22:34:
2b:77:8b:ff:86:d1:56:6d:6f:c2:96:87:34:ea:88:63:ee:7c:
b9:cf:d8:7b:41:4f:1a:0a:0c:c0:28:31:4a:26:33:93:64:9b:
fd:6f:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net