Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/0dkK58GR_6TrPo71TLBABZphjpE.roa
File: 0dkK58GR_6TrPo71TLBABZphjpE.roa (raw, json)
Hash identifier: xWq8QE9ldoEGTFlsA5NTIZIWYGHhhhVuSalzigZSjq4=
Subject key identifier: D1:D9:0A:E7:C1:91:FF:A4:EB:3E:8E:F5:4C:B0:40:05:9A:61:8E:91
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 0192DA5D8D85357C351E589B68C10A4C75D5
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/0dkK58GR_6TrPo71TLBABZphjpE.roa
Signing time: Tue 29 Oct 2024 22:20:17 +0000
ROA not before: Tue 29 Oct 2024 22:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61427
IP address blocks: 194.88.13.0/24 maxlen: 24
194.104.123.0/24 maxlen: 24
2a05:e207:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:da:5d:8d:85:35:7c:35:1e:58:9b:68:c1:0a:4c:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Oct 29 22:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1d90ae7c191ffa4eb3e8ef54cb040059a618e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:f3:79:b6:d0:07:bd:24:26:6d:80:8a:3d:
74:93:e1:7b:53:29:08:70:32:f5:06:15:4f:c8:c6:
92:e3:12:ca:df:03:5e:be:a7:35:bc:29:7a:60:88:
48:f5:16:e5:61:f4:22:59:f0:9e:a2:1f:50:90:cb:
a8:25:04:9e:43:d9:86:6f:e5:ce:1d:9a:3a:50:48:
e2:77:24:9c:ad:a8:8c:a6:7b:8f:0a:29:90:ba:2f:
13:e2:00:4b:75:96:32:f2:dc:45:46:c0:3b:81:ab:
07:1a:59:cb:94:15:dc:eb:ff:cf:2f:52:b1:e2:ee:
d2:9a:d8:22:5c:7b:77:a9:a2:d6:37:0b:6c:62:88:
1b:bf:f7:fe:35:d6:8c:b0:08:5c:13:ee:2b:46:9f:
18:c0:8a:55:1c:6d:d5:00:19:7b:8a:21:b9:01:36:
40:49:3b:89:ef:5a:3f:e5:f9:63:1c:5c:f7:d4:11:
a0:93:51:5f:fa:f8:94:89:1b:43:24:c4:42:ea:d4:
6c:60:1a:62:2f:e5:ca:4f:a1:d7:85:fc:58:6e:9c:
f4:ae:b6:d3:f8:43:f9:b9:f1:34:c3:36:0a:a2:bc:
04:f1:e1:30:f0:fe:84:fc:a7:0a:b9:c0:06:c0:6a:
5d:f0:53:5c:2e:ed:25:c7:86:cd:31:f5:04:1c:f7:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:0A:E7:C1:91:FF:A4:EB:3E:8E:F5:4C:B0:40:05:9A:61:8E:91
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/0dkK58GR_6TrPo71TLBABZphjpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.13.0/24
194.104.123.0/24
IPv6:
2a05:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
0f:21:87:a9:68:dc:a8:c4:23:a1:b3:58:ea:07:08:96:fd:4b:
e4:c4:62:ea:89:b3:59:f8:f9:d0:8f:9b:3e:59:5e:da:14:70:
c1:22:25:51:e3:3b:4f:79:72:f2:47:91:2e:8a:97:fd:72:39:
df:70:4d:e4:d1:57:c8:62:8c:32:f3:d1:b4:1e:30:f4:67:81:
1a:9f:7c:1f:cf:f3:a2:c9:6d:49:89:92:a8:36:f6:1d:fd:42:
9f:42:2d:6b:05:66:11:1d:05:54:8b:af:6d:5a:84:79:97:8e:
8f:97:18:c4:1b:31:4e:40:7b:9f:d0:ce:e5:ae:55:cd:4d:b3:
28:eb:4e:f8:54:61:a5:9f:e8:9f:f7:eb:af:14:7b:f1:05:c1:
98:79:3d:bb:56:53:12:77:1d:8d:fb:d9:4d:d2:be:12:34:47:
b3:48:c1:4f:4a:80:0a:33:e2:6e:e5:80:c8:a0:6b:da:9b:5c:
d7:93:d8:72:a2:68:ba:8c:29:18:ce:15:5d:ca:35:35:7f:85:
f5:54:05:58:ee:43:2c:73:64:91:b9:ff:39:2b:d2:cb:98:9f:
8a:7d:7b:ca:03:50:7d:cf:51:ee:4e:0c:34:10:35:63:aa:4d:
fc:12:c3:79:b6:0e:03:5f:7e:42:95:b8:af:5b:f7:54:a2:7b:
d8:d5:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:26 2024 by rpki-client on console.sobornost.net