Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/JlDpGks1gJi5KC48OJLljbc2Jjc.roa
File: JlDpGks1gJi5KC48OJLljbc2Jjc.roa (raw, json)
Hash identifier: +q/9wnBDk+UoPNuzlzH+WSesy7WzQsVTpoZnpA3imcI=
Subject key identifier: 26:50:E9:1A:4B:35:80:98:B9:28:2E:3C:38:92:E5:8D:B7:36:26:37
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 0193B4DA1F962B97CDA487C522D5C07D9ED6
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/JlDpGks1gJi5KC48OJLljbc2Jjc.roa
Signing time: Wed 11 Dec 2024 08:33:33 +0000
ROA not before: Wed 11 Dec 2024 08:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199585
IP address blocks: 45.158.108.0/22 maxlen: 22
81.162.208.0/21 maxlen: 21
194.93.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:da:1f:96:2b:97:cd:a4:87:c5:22:d5:c0:7d:9e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Dec 11 08:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2650e91a4b358098b9282e3c3892e58db7362637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:15:aa:d1:b8:df:73:e2:68:f6:3f:dc:ab:
5a:89:31:a9:4d:af:09:b9:16:03:bf:e2:0a:c6:2d:
e3:bf:7b:7e:c2:53:45:d3:22:ba:b3:c3:4c:2c:84:
52:bb:f1:68:59:13:32:cf:6e:43:e1:4c:93:52:16:
b4:10:7d:f0:20:fb:aa:35:65:68:c5:7b:bb:08:7e:
3c:fb:3e:43:ba:21:37:f6:d5:a0:41:a9:a1:0a:7c:
a0:20:e0:ad:4e:cf:6d:3e:c6:05:51:e7:70:49:c8:
f2:6a:50:ad:40:b6:3e:25:b4:bc:2d:f8:50:34:0c:
b8:ee:e8:a7:e2:ea:b2:ef:73:0c:95:38:31:98:7d:
4c:fe:87:ef:5e:46:70:23:d7:1f:ff:c0:aa:49:52:
38:d6:29:a2:5f:be:92:4c:d4:71:45:36:a9:18:bd:
cd:71:07:3b:f9:a5:15:fa:9c:0b:f9:e4:9c:0a:f3:
c1:40:8c:0e:38:66:8d:bf:1e:d8:c8:14:fd:2b:93:
ac:f2:73:6f:5e:35:71:ad:e8:dd:e1:2e:f9:56:f4:
61:7c:d5:2b:9a:86:10:66:0f:d3:e1:8a:0f:51:59:
8d:11:be:e2:c6:e5:b7:10:7d:70:5f:96:8b:29:4e:
3a:04:5a:8f:31:f6:ae:f7:48:e7:89:23:4d:14:d1:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:E9:1A:4B:35:80:98:B9:28:2E:3C:38:92:E5:8D:B7:36:26:37
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/JlDpGks1gJi5KC48OJLljbc2Jjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.108.0/22
81.162.208.0/21
194.93.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f5:ab:d6:e9:64:b1:53:f4:ae:09:12:d5:fc:98:2f:a5:5b:
e9:69:75:a5:9c:2d:1c:15:84:53:f9:33:ec:27:29:52:a1:3d:
28:67:a3:9c:48:71:20:57:af:63:3c:cf:08:f1:ea:5b:10:92:
b8:4e:59:95:88:24:25:b5:b6:13:3c:c4:5e:06:23:97:e1:14:
70:f0:46:a3:41:15:c2:56:71:26:af:b8:da:fa:04:ba:02:a8:
b0:a7:0e:31:09:a2:92:c0:a3:f0:c0:08:20:de:0c:89:5b:0f:
1a:a5:c5:a5:23:26:b3:36:04:27:39:5a:87:a2:6a:f2:4b:f0:
a5:f2:95:57:b4:b1:6f:fa:84:49:71:77:2b:51:4b:43:07:c6:
47:86:a9:ea:ff:ab:a0:51:00:2f:f7:26:1e:8a:98:ec:f4:5f:
22:cd:6a:a2:55:31:12:50:a3:02:3f:28:6f:45:a4:79:e0:29:
24:84:d5:a8:dc:42:d2:fd:09:16:53:12:e1:53:6b:f4:26:ad:
13:4d:a7:6c:1c:23:4b:1c:0c:24:dd:63:8b:91:b7:ed:e5:0b:
4a:c4:ad:a0:a3:38:70:df:22:fe:39:43:ab:47:5a:4d:16:97:
58:9f:ce:49:6a:bf:d5:be:97:5e:73:d0:ed:94:e7:e9:4c:c0:
6b:84:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net