Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/R3K9qLWL1VzroALN6Ua3sEZw-zY.roa
File: R3K9qLWL1VzroALN6Ua3sEZw-zY.roa (raw, json)
Hash identifier: Mu47kVp9Gs5rCQ8Q327VhdqCc7cB7PIEgEotkmWN6kY=
Subject key identifier: 47:72:BD:A8:B5:8B:D5:5C:EB:A0:02:CD:E9:46:B7:B0:46:70:FB:36
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 0193F14FD0E34AE1072FEF80B856884F5A12
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/R3K9qLWL1VzroALN6Ua3sEZw-zY.roa
Signing time: Mon 23 Dec 2024 02:19:20 +0000
ROA not before: Mon 23 Dec 2024 02:19:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.222.200.0/22 maxlen: 22
31.222.204.0/22 maxlen: 24
37.148.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:4f:d0:e3:4a:e1:07:2f:ef:80:b8:56:88:4f:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Dec 23 02:19:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4772bda8b58bd55ceba002cde946b7b04670fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:04:c1:20:0b:79:d1:1c:f2:b0:1a:f7:23:
85:b0:3c:74:41:49:93:75:54:a9:08:2c:12:84:ff:
f8:df:a5:ef:93:1a:f3:81:7f:49:ec:af:19:53:85:
0f:19:30:bd:29:2a:a2:cc:9a:db:fb:1a:de:59:e3:
c3:4e:b0:ca:45:7d:2f:7a:cd:ae:fb:65:d9:53:98:
32:d5:e8:c8:20:16:ae:28:c0:cd:b8:26:54:4f:da:
07:e3:b3:b0:92:d2:07:b6:44:a7:57:ff:79:c0:f7:
c1:d8:25:19:ad:21:92:2b:0b:24:fe:c0:0d:5d:9f:
71:be:17:16:f2:39:08:a0:c4:e9:45:91:50:e9:df:
bd:2f:96:e0:6b:88:79:93:6a:81:39:67:f7:0a:b0:
34:dc:df:a7:9f:da:53:d7:a3:1f:24:69:63:7e:3e:
fb:4f:f7:90:1d:e7:7c:95:03:0c:a0:b1:88:82:ca:
32:5d:3a:fd:fe:98:6f:3f:bf:bd:f3:bf:b8:cb:8e:
06:a0:b6:8d:20:28:99:e5:30:03:c9:0b:f4:57:9c:
7a:39:32:17:b5:65:94:f1:cf:8c:7d:e2:1d:79:e7:
b9:cc:fc:b6:0d:ab:b3:84:af:9f:83:92:f6:ca:9d:
ee:3b:9b:12:63:e5:c5:0e:d3:44:33:80:27:ff:56:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:BD:A8:B5:8B:D5:5C:EB:A0:02:CD:E9:46:B7:B0:46:70:FB:36
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/R3K9qLWL1VzroALN6Ua3sEZw-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.200.0/21
37.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
42:51:29:2d:8c:8c:f0:a5:6d:2e:d8:78:00:8f:a1:f4:f1:54:
b2:6e:10:af:54:1a:4e:c9:cd:e8:df:c5:7d:8f:13:2c:53:e9:
b1:83:bc:f7:10:d5:6b:c6:74:d8:81:52:38:ec:73:10:7e:52:
ce:c0:fc:15:3f:d0:0a:fe:fd:fb:83:60:ec:45:c3:a4:3b:f1:
01:2d:9d:dd:c5:ad:3f:42:87:78:b4:78:3d:5d:8a:19:16:ed:
c7:ae:a6:25:c4:6b:45:ab:6b:42:84:c0:4f:b6:96:5b:92:82:
23:d2:86:ab:93:34:c3:3a:2e:21:bc:ea:9e:ff:85:d4:0d:d9:
73:21:db:bb:a7:0c:5a:d8:59:8f:e0:8e:94:92:28:08:da:72:
02:ca:d0:49:75:5a:fb:26:3c:09:bf:3f:45:13:8a:30:c1:67:
34:f2:25:f9:1b:9b:32:39:fa:ac:86:24:98:d0:dd:c1:d0:93:
35:e3:1d:35:e6:1d:a3:b1:94:d2:0e:fe:06:95:10:bc:de:f8:
10:33:98:ed:b1:f3:f9:2a:66:e9:80:c9:2b:4b:c6:a8:c5:27:
15:47:ca:5e:e5:f0:ad:32:31:86:64:c3:fa:3b:f0:7a:50:d9:
95:9e:63:d9:a6:53:62:51:c6:7f:96:70:5c:d5:73:b7:da:d4:
3b:e1:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net