Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/9GPpEesdHx1IzmqGHqKqYFyKbCM.roa
File: 9GPpEesdHx1IzmqGHqKqYFyKbCM.roa (raw, json)
Hash identifier: 9MEz+rcWGDXwoAlOBzivupmlJyg//F71nV7SlXQ7/E8=
Subject key identifier: F4:63:E9:11:EB:1D:1F:1D:48:CE:6A:86:1E:A2:AA:60:5C:8A:6C:23
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 018CC26D827336BB757C39A1ECE046D4452F
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/9GPpEesdHx1IzmqGHqKqYFyKbCM.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3266
IP address blocks: 78.24.73.0/24 maxlen: 24
78.24.74.0/24 maxlen: 24
78.24.79.0/24 maxlen: 24
2a00:1909::/32 maxlen: 32
2a00:1909::/48 maxlen: 48
2a00:190a::/32 maxlen: 32
2a00:190a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:82:73:36:bb:75:7c:39:a1:ec:e0:46:d4:45:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f463e911eb1d1f1d48ce6a861ea2aa605c8a6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:ec:d7:a3:45:ac:cb:07:9c:8b:aa:56:cb:
f2:69:ce:2c:c2:4a:7d:1c:8a:e5:c6:f3:8e:6a:42:
a9:14:c1:b5:3c:fe:03:d6:87:8f:64:94:d9:7a:31:
39:39:fa:f9:d1:08:11:b2:1a:07:2f:41:f9:f9:e8:
b8:7c:6b:ba:6e:94:3e:95:5e:fa:82:de:dc:4d:e7:
4b:09:73:ee:e1:14:4b:ed:db:52:36:0a:79:cb:6d:
e6:6f:2e:0c:3a:d4:50:2e:ad:6d:ea:c7:5a:ef:15:
c3:c8:bc:e2:25:e3:34:45:de:0f:38:86:ba:84:ab:
67:8a:f3:9d:af:17:26:5f:01:2a:56:b3:b1:62:49:
6c:34:2b:07:34:eb:ae:6b:c8:f0:72:9c:d1:f0:5d:
b3:82:21:99:37:b0:26:2d:82:89:4d:93:14:3e:5a:
b1:2e:4e:35:41:f2:66:42:fe:be:65:96:9c:96:e7:
18:6f:26:dd:5c:4c:c9:e7:cf:21:4e:64:3c:58:aa:
ad:46:37:97:20:3e:4b:a4:67:b8:8a:12:12:a7:4f:
c3:e6:48:e0:47:8c:3c:f6:e3:b2:1e:a9:4c:79:01:
65:db:2f:55:aa:b1:b9:31:d9:d6:a8:f7:c8:77:b0:
da:6e:fc:f8:fa:79:19:a4:70:bd:48:77:66:7a:da:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:E9:11:EB:1D:1F:1D:48:CE:6A:86:1E:A2:AA:60:5C:8A:6C:23
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/9GPpEesdHx1IzmqGHqKqYFyKbCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.73.0-78.24.74.255
78.24.79.0/24
IPv6:
2a00:1909::-2a00:190a:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:6a:9c:d0:46:8a:33:f7:81:ea:fa:b6:bd:47:df:ab:c5:66:
7d:bc:86:92:46:b6:96:00:56:58:96:d6:4a:0d:8a:c4:42:60:
1b:58:d5:88:75:f1:a2:f6:4e:ae:6a:2a:4f:60:12:4b:e6:bf:
75:75:64:be:98:38:41:27:c4:85:d5:29:52:c5:30:92:8e:3d:
86:a4:78:7a:d6:b5:0d:a4:47:75:54:8a:da:36:79:08:01:4d:
22:03:53:d2:2f:db:7d:85:92:ef:06:c0:7d:85:e4:af:dd:27:
a8:25:60:fd:a0:1e:19:50:93:59:38:7d:f1:c3:a8:ae:d1:21:
65:cd:9d:85:95:b8:02:a3:92:7d:75:bd:f1:47:51:c5:a0:aa:
c4:27:9c:93:2d:20:25:5d:ce:14:b5:7b:33:27:cf:91:af:a8:
62:4f:23:78:6c:04:21:ff:be:56:52:d5:fb:ec:9a:4e:b2:68:
e5:f8:75:05:70:d9:36:31:38:0b:80:fd:b8:7f:b7:d8:22:76:
fe:76:e0:36:95:ee:b1:61:bb:dc:60:7f:3a:0c:10:71:d8:68:
74:d1:19:6f:d3:91:a6:fe:83:c0:c4:64:4c:94:51:e9:69:38:
ca:03:36:35:14:00:ba:6c:54:a3:4f:91:17:7e:ba:b6:45:37:
0b:2a:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net