Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/rDxXXkE1UiJ3FgCmh1y_TLS5EY8.roa
File: rDxXXkE1UiJ3FgCmh1y_TLS5EY8.roa (raw, json)
Hash identifier: 2KRLD4icX3/nGnDVbEro6uAPJunT0Ivuz3VgFQ8UjMI=
Subject key identifier: AC:3C:57:5E:41:35:52:22:77:16:00:A6:87:5C:BF:4C:B4:B9:11:8F
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 0193DA7E80C510B2F8403ACA0E7CECA26897
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/rDxXXkE1UiJ3FgCmh1y_TLS5EY8.roa
Signing time: Wed 18 Dec 2024 15:59:03 +0000
ROA not before: Wed 18 Dec 2024 15:59:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215790
IP address blocks: 185.238.40.0/22 maxlen: 22
185.238.40.0/24 maxlen: 24
185.238.41.0/24 maxlen: 24
185.238.42.0/24 maxlen: 24
185.238.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:7e:80:c5:10:b2:f8:40:3a:ca:0e:7c:ec:a2:68:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Dec 18 15:59:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac3c575e41355222771600a6875cbf4cb4b9118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:93:ea:c8:df:5d:57:9f:a2:57:83:67:99:
ba:6c:8f:d5:25:7f:25:1d:98:13:79:db:e6:4b:51:
84:d7:72:ac:8b:3f:9d:e5:5f:76:51:ec:9f:f4:17:
fc:36:3a:36:d3:9c:c1:9b:09:fc:98:cc:f6:7f:97:
e3:65:c2:08:38:d9:83:54:b2:ab:f9:b7:9a:83:51:
0c:09:fd:57:ee:70:13:7b:e8:d0:1e:56:66:ae:c8:
66:a6:0b:11:7b:7c:71:db:99:9e:e8:0a:ba:be:5a:
62:bf:aa:ff:91:bd:99:4d:17:a0:c6:7c:f0:c8:4f:
4f:dc:08:10:f0:0b:08:1f:1f:f1:fd:23:72:54:19:
d7:0c:34:00:7b:73:23:95:7f:c3:25:3b:92:c8:c6:
4f:b1:11:6c:19:0f:8a:f1:28:86:71:07:6f:8e:4d:
44:50:43:91:57:18:a8:77:3d:51:c6:b4:d1:63:41:
41:ad:0f:f3:4e:98:12:8f:32:66:6a:16:05:0f:13:
b3:a5:b3:8e:96:7f:51:99:1e:cb:18:5a:3f:ed:c0:
e1:b8:d3:58:cb:9b:e9:62:0d:d7:b8:ca:ef:63:c0:
45:84:f2:9e:6b:15:c6:0d:3e:d9:3d:e8:36:c7:9f:
b4:a3:9f:45:a3:88:18:56:ba:13:6b:28:2c:f3:b7:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:57:5E:41:35:52:22:77:16:00:A6:87:5C:BF:4C:B4:B9:11:8F
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/rDxXXkE1UiJ3FgCmh1y_TLS5EY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.40.0/22
Signature Algorithm: sha256WithRSAEncryption
87:4c:56:49:9a:e0:1a:e6:13:68:70:c8:41:73:04:2b:49:3f:
2d:5f:cd:35:47:3c:05:0b:85:e1:24:44:d4:f6:57:ca:ed:10:
f8:a7:71:41:87:51:d8:d7:f7:2f:d7:da:71:df:8d:af:6d:4d:
59:3b:67:01:48:77:bd:8d:a9:3e:37:69:b3:89:29:ef:c4:d5:
71:4e:db:ba:6b:1b:98:41:f0:88:9d:37:6a:64:37:01:cd:57:
0d:3a:82:34:fe:e6:2c:5c:7e:83:b0:77:83:1a:cd:75:bd:a6:
53:33:cf:ce:bc:74:de:65:b9:84:0f:84:f0:d5:93:38:0d:42:
f6:ce:5d:f4:53:b7:6c:03:0c:a4:2a:8a:44:22:9f:4c:e8:ce:
a0:94:29:c1:c3:17:d5:cb:d2:e8:47:63:23:f9:9d:84:ae:d3:
6f:52:54:7b:5d:18:cd:8f:a0:a1:f0:51:86:db:46:2d:14:7c:
37:b1:17:31:2c:47:d0:08:ec:5c:c9:c5:35:b5:c5:8d:4d:f8:
4d:de:80:15:78:06:40:42:94:de:32:24:fd:d6:f3:f5:ff:bc:
01:0e:94:35:73:17:4b:0e:a4:f1:c9:1d:d8:ed:04:cd:db:35:
ac:df:ee:57:d1:71:80:0f:49:8e:54:32:70:18:61:98:7e:47:
5c:f3:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:42 2024 by rpki-client on console.sobornost.net