Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/TOKxDPAgan2rkuaOHiIJaQXribU.roa
File: TOKxDPAgan2rkuaOHiIJaQXribU.roa (raw, json)
Hash identifier: nFSP/6nueEZSKUuN8DQrzO5C1y+6EXUnVQ2ySykDgQM=
Subject key identifier: 4C:E2:B1:0C:F0:20:6A:7D:AB:92:E6:8E:1E:22:09:69:05:EB:89:B5
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 01909B0EC32352BEE4C4D6439E1B9D8EAFB0
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/TOKxDPAgan2rkuaOHiIJaQXribU.roa
Signing time: Wed 10 Jul 2024 05:12:34 +0000
ROA not before: Wed 10 Jul 2024 05:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 155.45.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:0e:c3:23:52:be:e4:c4:d6:43:9e:1b:9d:8e:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jul 10 05:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ce2b10cf0206a7dab92e68e1e22096905eb89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:03:15:89:98:9d:4d:7b:06:84:fc:f2:0c:
25:18:2e:5c:3d:c6:83:ee:c0:40:ad:a1:32:dc:16:
35:8f:d7:95:e0:89:b3:a9:e1:95:44:5e:3d:66:a0:
49:30:f7:ce:0a:a9:f4:d8:a1:ef:13:66:af:be:c9:
37:b1:06:f5:55:73:c8:24:4c:de:be:4f:38:09:dd:
3c:ab:00:98:92:4b:41:d3:ad:fa:a1:a8:d0:dc:7b:
8c:d4:5e:6f:65:a9:47:1a:48:0f:05:99:ac:59:27:
5e:d4:fe:d0:8f:eb:07:9c:5f:41:c0:30:57:82:91:
7b:af:f9:87:88:3f:47:34:1c:5d:fe:b2:8d:fd:59:
90:8e:f9:af:94:c8:ac:b2:4c:03:f6:e8:09:a9:f4:
7c:b3:46:33:39:d6:e5:5e:f7:74:0c:52:51:02:38:
fc:24:cc:40:bb:d1:be:61:d1:9f:f1:8a:89:f8:a6:
fb:53:b5:9c:ee:bb:9d:a9:19:ff:bf:68:bb:f9:fc:
4b:c1:14:11:6f:de:db:c8:c0:29:d8:10:de:b0:54:
3e:ce:79:fe:32:85:6d:be:b8:74:bc:5f:d5:6b:2c:
72:1d:5e:40:6a:d5:ab:a1:4c:48:04:63:9c:2c:48:
45:74:10:6b:6d:67:18:09:b3:84:91:f1:e7:7f:5c:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:B1:0C:F0:20:6A:7D:AB:92:E6:8E:1E:22:09:69:05:EB:89:B5
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/TOKxDPAgan2rkuaOHiIJaQXribU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.249.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e5:2f:5b:d6:fb:8b:94:a2:87:89:c6:1f:9a:3d:fe:56:41:
92:db:7a:cc:75:f9:ab:a8:ee:48:7d:f3:63:75:0e:b6:f6:22:
4e:a1:59:68:d4:5f:27:b0:65:97:56:af:95:77:75:41:3b:33:
25:3e:73:52:d0:6c:b0:84:53:97:0f:67:a2:e5:5a:bd:95:46:
10:20:9d:2f:b1:3d:e0:d6:86:19:eb:72:7c:6c:e7:cb:b0:eb:
5f:8e:0c:61:f6:2e:4c:c8:c5:b5:6e:3f:ce:05:51:09:ea:48:
6a:10:05:88:28:91:45:f2:89:28:d6:d7:cd:c2:5e:da:4d:18:
91:fc:66:ca:2b:6a:94:61:b0:d8:b2:72:9b:32:22:a7:c6:b9:
38:c7:b7:2a:d5:87:fc:a2:db:a1:23:28:c4:b5:53:e0:f5:6f:
22:59:ae:48:3e:ea:8f:8c:d1:05:5e:15:85:95:5c:cf:24:7f:
d8:f5:5f:0b:e1:7b:07:4c:b7:6f:d6:fa:2a:b4:1c:49:cf:54:
a4:07:58:5b:27:01:63:f9:81:db:1d:42:f4:cb:75:e1:1a:62:
62:80:54:b7:10:8e:42:78:4b:90:7a:8f:24:28:ac:59:e9:98:
d1:11:59:d9:11:da:80:19:a7:e1:11:15:f7:f1:db:46:cd:01:
cc:82:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net