Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/E379aSotXVQihxChrhQcdYfVSSs.roa
File: E379aSotXVQihxChrhQcdYfVSSs.roa (raw, json)
Hash identifier: 9R9AneJbbWH9TXvFCJDviTfPPYbKhAdylZYpFUbpnSo=
Subject key identifier: 13:7E:FD:69:2A:2D:5D:54:22:87:10:A1:AE:14:1C:75:87:D5:49:2B
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01946A5A8C7BD8A78E1443E819752BADC92E
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/E379aSotXVQihxChrhQcdYfVSSs.roa
Signing time: Wed 15 Jan 2025 14:25:06 +0000
ROA not before: Wed 15 Jan 2025 14:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 109.162.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:5a:8c:7b:d8:a7:8e:14:43:e8:19:75:2b:ad:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 15 14:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137efd692a2d5d54228710a1ae141c7587d5492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:09:1f:e2:54:41:e1:9e:bf:eb:16:57:14:
fa:43:01:12:95:7e:81:c7:3f:45:d7:ec:ef:18:aa:
c9:6d:5c:c8:e6:ac:40:f4:32:6d:b8:5d:74:f6:a6:
23:13:72:93:96:f4:4f:b2:8f:e8:d4:d0:97:89:d1:
c6:0c:01:30:8f:b8:39:bb:9b:c5:96:2d:59:9e:f9:
a1:5f:ca:72:0e:f6:e4:40:54:1d:5e:f0:42:e8:89:
1d:02:24:f9:67:82:35:0c:7e:7d:48:78:29:78:a8:
25:0f:e7:a5:4f:13:48:ff:d8:08:44:7b:90:23:2a:
c3:be:c5:d6:02:e3:2c:55:f9:6d:68:3a:d9:b3:ea:
37:96:bc:38:13:51:06:2f:73:25:22:80:60:05:a8:
1f:de:fe:1c:3b:8b:0d:ed:04:9d:86:8a:10:81:a5:
5f:b5:78:ac:e2:5f:1a:f8:02:d8:f5:71:dc:d6:49:
d3:6b:c8:89:8b:21:f6:64:ce:b3:7d:67:92:37:ff:
b9:2a:02:e2:0c:06:a2:94:7d:2a:93:9f:f6:ca:fb:
e5:11:f2:a1:54:f4:e1:f4:91:e2:b8:69:77:3d:5b:
24:36:50:2a:45:87:8f:b3:77:df:21:22:ec:ee:96:
9d:64:cc:03:26:b8:3d:22:df:92:57:48:d9:f2:5c:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:FD:69:2A:2D:5D:54:22:87:10:A1:AE:14:1C:75:87:D5:49:2B
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/E379aSotXVQihxChrhQcdYfVSSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.248.0/24
Signature Algorithm: sha256WithRSAEncryption
39:21:ef:38:23:c6:a5:81:fb:2d:b9:1e:8c:3f:22:09:0c:b8:
94:60:27:74:b7:fc:19:2a:c8:ff:a4:cc:5f:67:eb:b6:f7:98:
7f:54:5b:4c:47:29:a6:5b:8b:fb:3a:77:c2:a9:d3:47:25:1c:
51:47:a7:b3:19:ce:85:2b:50:2b:d5:4b:a7:41:d0:1b:cb:14:
e4:60:3a:61:ee:8a:de:ba:69:be:3b:bd:30:43:84:e9:5f:da:
20:d8:58:88:db:5b:58:c6:a5:37:48:ef:cd:f3:3c:84:bb:1a:
0b:10:4d:f0:b6:92:3a:3e:6b:c7:ad:95:34:e8:e9:99:94:9b:
c6:1f:7f:22:5d:d4:b4:9d:ff:f8:89:36:ba:0e:89:78:46:f7:
cf:63:ff:55:59:36:11:8e:f4:3e:58:88:e8:e0:dd:d5:6e:42:
41:17:b2:e5:68:91:bb:9d:0f:bc:8b:a7:bd:8f:03:78:b5:a6:
b6:c2:d5:3e:33:78:5d:0b:2f:49:8a:92:19:22:66:7c:d6:b0:
66:c3:d9:a8:46:7f:fe:45:23:2f:5a:13:28:d7:8d:36:f9:2a:
62:12:a4:24:7d:0e:c1:3f:d5:24:d3:5c:ad:5c:b4:9c:95:eb:
85:d0:d2:b9:8c:3f:2d:52:6c:84:c9:fe:43:33:61:0f:3d:f9:
8c:d8:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:06 2025 by rpki-client on console.sobornost.net