Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Bi0okTloovPrtL3uZDrRlpbwMR4.roa
File: Bi0okTloovPrtL3uZDrRlpbwMR4.roa (raw, json)
Hash identifier: TE+cQ/28ZsFGimW61pzy0Fb/nWpvRypPQakXNrG0F/w=
Subject key identifier: 06:2D:28:91:39:68:A2:F3:EB:B4:BD:EE:64:3A:D1:96:96:F0:31:1E
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 018CC5DBE40CB5D9624A72690855E838A5E8
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Bi0okTloovPrtL3uZDrRlpbwMR4.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62046
IP address blocks: 212.59.104.0/24 maxlen: 24
62.181.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e4:0c:b5:d9:62:4a:72:69:08:55:e8:38:a5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=062d28913968a2f3ebb4bdee643ad19696f0311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:53:3f:05:7d:f1:57:e3:bc:30:55:98:8a:
0d:f2:a0:1e:d1:4b:ef:2a:40:00:67:90:59:14:c7:
b8:34:9f:8b:93:79:8e:f3:3a:be:fd:69:05:58:4b:
97:57:e6:24:8d:39:ed:d8:11:c8:a1:d0:e3:4c:d2:
b5:4a:a8:6a:17:a3:b9:1a:28:4d:cf:9b:20:94:bf:
94:34:d8:81:67:19:ea:c6:c4:cb:9f:58:f9:45:59:
f1:23:59:75:75:53:8d:31:b7:57:5e:84:42:2f:6a:
3b:30:a5:55:21:cc:14:e1:59:62:cd:ff:23:e1:5f:
35:c9:63:33:3d:d5:d4:8e:e2:17:7d:8b:68:e1:c0:
fb:4e:29:80:c3:ee:12:f4:18:4d:d3:49:62:ea:58:
23:1f:fb:02:0a:fd:74:65:81:ef:09:16:f6:31:6b:
2d:fa:f6:c3:20:79:90:ce:49:49:02:9c:57:fe:0d:
12:38:60:ca:0f:f1:18:5d:dd:7b:76:22:f0:d9:b5:
8a:70:cf:56:27:81:b8:3e:29:b6:8a:85:d9:f9:25:
99:6c:94:19:a9:bd:df:48:38:8c:db:43:c7:50:4a:
0b:3c:dd:4d:f6:22:40:46:89:af:58:ed:c5:1b:9f:
e2:13:ad:7e:cf:52:ac:9a:b4:5d:f0:78:04:d9:c5:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:28:91:39:68:A2:F3:EB:B4:BD:EE:64:3A:D1:96:96:F0:31:1E
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Bi0okTloovPrtL3uZDrRlpbwMR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.56.0/24
212.59.104.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7f:15:3b:a8:3a:21:94:5f:b4:ba:e6:b8:3b:58:80:6a:40:
f0:4b:ab:34:8d:9f:5a:0e:a2:6b:6f:90:30:04:0d:f3:f0:1d:
fc:19:9b:ab:6e:43:03:9e:e8:9f:65:f1:d5:bf:f2:c0:a3:4a:
94:f1:bd:4b:2a:ee:f2:74:5c:0c:d2:8f:64:f4:e6:d0:1e:12:
24:35:19:7c:40:fe:39:dd:4b:83:cf:d4:75:bb:cc:77:3b:46:
b5:6d:d8:a0:74:50:74:ee:4e:64:95:59:63:77:88:a7:3a:23:
ca:90:dc:d6:c7:89:50:25:49:d0:53:e2:d7:6d:4d:62:90:f7:
35:71:08:da:86:fe:2f:47:e9:dd:df:d9:66:b3:f1:93:67:d6:
86:a0:eb:f5:af:47:67:a3:09:58:2a:1c:02:33:eb:36:71:95:
9e:5d:6d:95:12:ab:d3:e6:f1:4c:1b:81:f2:ae:c9:d2:33:9a:
7e:46:2a:2f:5e:39:ff:a7:c5:a1:73:07:55:c4:ee:ae:19:9c:
18:82:34:bd:1e:04:1b:72:0d:5a:1d:05:8c:b6:45:ad:35:a0:
11:b6:d0:4e:3d:f5:f7:61:b0:1c:67:74:ea:b1:3e:18:07:45:
e3:0e:77:13:6b:1d:80:a0:f4:9d:74:c0:40:f0:44:6c:92:35:
5d:99:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net