Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/3FkFj_bTYLCbGAOsuzabseJZQBY.roa
File: 3FkFj_bTYLCbGAOsuzabseJZQBY.roa (raw, json)
Hash identifier: KHIBc1Ehl+m5MfBzVl0BsM0AI/4f166T6qNT19zp3fc=
Subject key identifier: DC:59:05:8F:F6:D3:60:B0:9B:18:03:AC:BB:36:9B:B1:E2:59:40:16
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 018CC56E20A00CEBB7F7A0E8F0A5CE530BA7
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/3FkFj_bTYLCbGAOsuzabseJZQBY.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51309
IP address blocks: 46.28.16.0/24 maxlen: 24
46.28.17.0/24 maxlen: 24
46.28.23.0/24 maxlen: 24
46.28.20.0/24 maxlen: 24
46.28.22.0/24 maxlen: 24
46.28.19.0/24 maxlen: 24
46.28.21.0/24 maxlen: 24
46.28.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:20:a0:0c:eb:b7:f7:a0:e8:f0:a5:ce:53:0b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc59058ff6d360b09b1803acbb369bb1e2594016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:8c:f5:2d:94:1b:43:3f:9f:8d:66:df:da:
1a:41:50:e3:2c:da:b9:7c:ff:50:c8:cf:56:b5:d4:
ca:65:15:d9:be:98:82:91:fd:ad:4f:db:cd:21:4c:
d1:cc:73:a1:c9:45:91:ef:ed:22:24:1f:9d:00:a0:
90:d9:b5:01:61:2f:5d:b7:f5:74:30:1e:7d:3f:c9:
a1:7b:b8:a9:1f:f0:d7:50:63:38:77:78:ec:ae:33:
d1:8e:78:aa:7d:77:dc:2e:e2:ae:7e:58:72:04:f4:
f7:f2:ff:c7:41:c7:3a:8e:99:df:5f:75:5f:0a:07:
ec:6c:9e:92:16:05:22:e8:fa:94:6e:92:5d:df:26:
dd:d0:c4:83:02:4d:af:5b:80:ca:fa:0c:71:ce:7c:
08:bb:93:d3:92:79:37:45:b4:77:54:c8:2b:6f:17:
aa:6a:8e:f7:27:45:6e:1d:6d:3d:d6:69:eb:f1:4c:
fd:a2:22:d7:43:22:74:45:a8:77:b9:a9:f4:7f:5b:
3d:bc:20:9b:39:b4:66:7c:91:49:5e:57:43:c2:cd:
5e:b6:f6:b5:c9:3d:fd:e9:99:4d:19:75:af:71:78:
bb:50:37:f5:37:41:2e:fd:f0:58:fd:ba:5f:2b:0f:
7a:f4:93:da:9f:82:39:7c:77:72:39:8d:b0:00:e3:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:05:8F:F6:D3:60:B0:9B:18:03:AC:BB:36:9B:B1:E2:59:40:16
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/3FkFj_bTYLCbGAOsuzabseJZQBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.16.0/21
Signature Algorithm: sha256WithRSAEncryption
e3:13:12:8e:d4:14:cb:a9:fe:93:9e:be:29:45:1b:20:f9:98:
e0:be:9d:3f:a0:cc:09:53:14:20:ac:8c:6c:67:60:7b:a1:91:
89:8b:2d:e3:99:f5:49:9b:34:c3:45:c1:06:c6:d1:5c:55:70:
5b:5b:df:70:2a:68:37:2a:dc:59:2e:93:b6:19:d9:9c:09:89:
11:02:34:e8:b7:f6:ff:9d:9f:25:eb:58:44:04:bf:a3:ba:0c:
fb:c0:b6:a1:db:1a:91:15:3c:ff:3b:5a:90:4d:06:c3:d3:ca:
b8:40:c6:1f:76:6e:ff:c9:10:28:38:dc:95:3b:a0:00:fe:96:
55:4d:60:52:73:1e:c4:e5:ca:bb:6a:10:ac:cb:bf:0a:af:1c:
bc:91:d0:25:93:4b:13:8d:6e:ca:03:21:8c:c5:64:a5:ff:39:
71:10:14:b5:ae:20:77:6c:3d:29:92:a8:d1:c0:2f:1c:66:62:
39:0d:54:78:e5:d0:6b:23:c0:9a:89:d0:23:1c:70:55:59:bb:
28:8c:79:2e:95:da:4d:00:26:c8:8d:53:89:e5:8e:9f:c9:f5:
08:61:04:ee:27:e1:ae:9e:4e:b0:1b:25:86:e4:82:98:97:ab:
e1:73:27:67:99:21:3b:fa:bd:ca:26:17:3e:a3:c6:89:a5:58:
cf:4b:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net