Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/x2QQhOYKRTJliDo7adcP3wmZO_8.roa
File: x2QQhOYKRTJliDo7adcP3wmZO_8.roa (raw, json)
Hash identifier: gfe7PYAGPDRYMqQkKUB/7n15UZfKgjAnhCTizY0puxk=
Subject key identifier: C7:64:10:84:E6:0A:45:32:65:88:3A:3B:69:D7:0F:DF:09:99:3B:FF
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0193DF02F40010C21C67E1F3C8F95B9CCFA7
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/x2QQhOYKRTJliDo7adcP3wmZO_8.roa
Signing time: Thu 19 Dec 2024 13:02:12 +0000
ROA not before: Thu 19 Dec 2024 13:02:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210893
IP address blocks: 31.41.250.0/24 maxlen: 24
195.5.127.0/24 maxlen: 24
2a11:2c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:02:f4:00:10:c2:1c:67:e1:f3:c8:f9:5b:9c:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Dec 19 13:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7641084e60a453265883a3b69d70fdf09993bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:69:7c:c6:61:f7:7f:b6:ff:29:93:34:2b:
36:8c:d6:fc:5f:8c:43:c8:59:f6:76:01:72:59:86:
4b:a8:25:72:34:64:10:fa:21:7f:ef:37:af:61:10:
34:60:c4:14:c1:e7:a2:f2:bc:5e:35:4f:9b:d5:4d:
d4:16:56:96:ae:1a:91:9e:1e:2d:a5:a0:63:c8:d6:
49:27:8f:66:77:b8:29:cb:4a:1b:ea:b4:d4:65:9d:
1e:4d:ef:44:18:7b:ca:d8:30:aa:e8:1b:10:3d:72:
67:57:3c:8e:9b:8d:e4:59:e5:dc:67:1d:12:8a:8a:
24:d9:6c:55:65:18:3c:51:96:a3:33:6f:2b:82:49:
18:75:31:39:5c:bd:6b:53:1b:c4:01:2c:32:94:54:
47:a2:4c:2b:28:43:79:6b:e0:4f:fa:62:3d:c4:6c:
3e:a1:3a:7b:36:c4:25:20:e6:f6:bd:2b:3b:c0:06:
e2:f1:89:88:5b:20:fb:a7:62:75:22:b6:be:ea:08:
6b:25:82:9c:bc:a4:84:6e:e8:78:62:85:7a:9d:95:
8c:31:e9:68:c5:49:04:22:e1:08:d2:b1:b4:27:c8:
57:99:4e:82:81:83:a3:9c:a1:8e:eb:1a:89:33:6e:
73:04:52:e0:0b:82:44:19:4d:0b:3c:9a:61:c8:45:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:10:84:E6:0A:45:32:65:88:3A:3B:69:D7:0F:DF:09:99:3B:FF
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/x2QQhOYKRTJliDo7adcP3wmZO_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.250.0/24
195.5.127.0/24
IPv6:
2a11:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
03:39:e4:99:27:da:67:7e:f4:c0:df:72:cb:20:d7:36:79:a2:
11:f2:c5:31:01:2a:0d:5b:c8:27:36:1c:42:f9:a9:3a:d6:2b:
cf:c1:10:65:3f:3a:76:13:18:99:b5:56:82:1b:81:3e:72:36:
fd:f9:fb:0a:29:2e:9d:0d:c5:47:e7:65:fc:00:af:d5:28:2b:
c9:60:db:97:b9:fa:bc:ab:e3:2e:ec:65:42:81:ca:de:00:af:
5f:a7:ec:e9:12:d8:a2:3d:4f:30:fd:1c:32:12:e0:af:0a:8f:
1d:6a:16:7b:a1:d8:26:6e:58:66:e1:b9:be:1c:ce:ad:22:62:
83:32:40:31:ec:f1:83:63:83:f8:76:c3:38:41:ec:c0:ef:4f:
a9:55:27:d8:e4:95:e3:5c:64:2d:38:85:e7:0c:7f:68:2d:f8:
31:37:8d:34:4b:4e:3d:47:f5:13:b2:c3:5c:95:6f:4b:f0:af:
07:79:5b:eb:6a:c3:b2:3d:50:89:fa:48:4c:0a:d3:41:00:8e:
bf:bb:ff:2c:ee:47:68:45:ee:11:d9:08:e5:7a:20:92:87:79:
34:40:45:bd:b0:cf:b3:2c:b5:cd:27:ee:a9:11:4f:6a:8e:df:
84:1c:4e:78:c5:5c:70:11:97:0f:81:11:ab:be:9d:84:1a:fa:
09:4e:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net