Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/_FjO0FWe-rhixI8ADCPrtk360cQ.roa
File: _FjO0FWe-rhixI8ADCPrtk360cQ.roa (raw, json)
Hash identifier: mrFDonrrhtEIB3Z2P2vWetY28OO8Bke4KSWq/T4eTTc=
Subject key identifier: FC:58:CE:D0:55:9E:FA:B8:62:C4:8F:00:0C:23:EB:B6:4D:FA:D1:C4
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0193F81FF91B87C96A1F251F17651377BD60
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/_FjO0FWe-rhixI8ADCPrtk360cQ.roa
Signing time: Tue 24 Dec 2024 10:04:25 +0000
ROA not before: Tue 24 Dec 2024 10:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44694
IP address blocks: 81.24.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:1f:f9:1b:87:c9:6a:1f:25:1f:17:65:13:77:bd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Dec 24 10:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc58ced0559efab862c48f000c23ebb64dfad1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:42:7d:5f:2d:90:47:11:17:a0:d2:19:04:65:
07:91:ef:d3:15:15:e4:3c:a3:d5:86:17:6d:ee:de:
36:41:4d:02:0b:a4:42:6b:8d:38:39:b2:1e:0a:d2:
02:c2:76:b7:3d:99:67:96:7c:ca:93:96:37:9d:8a:
82:77:bd:7c:2f:50:03:bb:37:b6:31:eb:fd:a9:6a:
46:01:a2:f3:69:c3:6a:a6:d0:4b:84:83:eb:a6:04:
4b:17:e6:ca:27:d1:59:75:56:1c:70:44:f9:a7:2e:
15:16:51:4e:32:2c:82:2f:dc:77:53:63:46:ff:b1:
d3:14:df:bd:ab:6e:70:a4:08:f5:3a:87:19:0f:71:
d6:d8:b1:e1:22:c7:91:a3:aa:be:7f:f1:a2:05:db:
85:ea:bc:50:8e:ac:0b:50:1d:91:80:b0:6d:e3:8f:
5b:a6:b7:d3:49:fe:6e:50:18:31:6f:57:a5:b4:18:
5c:0f:e6:96:e6:f2:4d:75:b3:d4:22:a2:44:c9:64:
96:d7:a9:4e:32:eb:dd:ff:96:38:b6:33:0b:62:63:
e2:a6:36:40:2a:f0:13:58:48:91:81:9c:f4:5b:c9:
91:89:c0:f4:5e:b3:ed:85:1a:31:43:99:c1:6e:e5:
bd:c0:07:cc:07:83:84:01:18:8e:b8:98:a7:e2:3c:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:CE:D0:55:9E:FA:B8:62:C4:8F:00:0C:23:EB:B6:4D:FA:D1:C4
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/_FjO0FWe-rhixI8ADCPrtk360cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:1d:5d:5f:59:83:f0:24:d2:5e:03:1a:31:b0:9d:2c:33:d0:
df:83:17:d6:d3:33:4f:a9:ac:28:46:ae:9f:3f:8b:68:96:7e:
20:f8:2b:e4:7b:d6:0c:6c:c0:87:db:3c:d0:2c:bd:25:da:ac:
be:e1:57:05:5a:63:0e:ae:51:50:2a:6c:1d:32:91:bf:27:b1:
b3:a5:65:78:2e:b7:82:71:11:1d:b9:8d:b1:55:6b:c3:df:d6:
83:09:4e:26:5a:e5:b2:e2:35:6b:e5:52:95:24:f6:27:20:60:
fc:60:cb:9c:51:23:e3:d4:e8:e4:a3:f9:2a:91:04:7e:6d:7f:
19:af:8a:8e:60:89:51:21:d6:60:5a:a5:26:50:c6:89:7e:bf:
80:f3:73:c5:02:8a:a6:fa:ee:85:ca:e2:d5:3d:1b:a8:db:ec:
4f:c6:20:49:94:41:7e:8b:60:e0:78:61:20:04:aa:23:33:b2:
50:a3:48:d6:91:90:80:bd:61:6b:bc:58:67:f1:be:a9:b2:1f:
5b:60:6e:ce:30:a3:16:07:6f:b6:6b:c3:ca:ec:3f:32:69:f3:
6c:d5:8f:ef:9d:8f:bb:df:b4:7f:f4:9f:b0:db:19:6a:26:b8:
8a:80:5c:76:a1:9a:b0:9f:a9:23:fb:92:51:18:de:0c:c7:18:
90:59:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:19 2024 by rpki-client on console.sobornost.net