Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/jX4nf8NQJgBMQI5M5GsL8TCfewQ.roa
File: jX4nf8NQJgBMQI5M5GsL8TCfewQ.roa (raw, json)
Hash identifier: zxLoYJkNmuCgwkIPdAUWV5ei6sZgTRyixDxQaz2nXEo=
Subject key identifier: 8D:7E:27:7F:C3:50:26:00:4C:40:8E:4C:E4:6B:0B:F1:30:9F:7B:04
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 018CC26D093E4809A54B5179EC8D8799E3D3
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/jX4nf8NQJgBMQI5M5GsL8TCfewQ.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16085
IP address blocks: 193.109.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:09:3e:48:09:a5:4b:51:79:ec:8d:87:99:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7e277fc35026004c408e4ce46b0bf1309f7b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:48:d1:57:7e:fc:f2:cf:36:86:ea:79:ea:
cd:fe:c1:b5:de:0f:40:36:58:40:1a:ff:64:da:fb:
3c:d7:fd:53:db:2e:e1:a7:17:d6:f3:e8:2c:95:c3:
3f:c2:6d:9b:5a:68:14:e3:76:af:94:ee:99:53:01:
4e:0c:4b:6d:3e:30:4b:a8:ca:4b:6f:49:37:0b:65:
7f:40:c9:ea:b8:d2:d5:95:b4:1e:56:40:20:cd:06:
68:42:fc:11:e7:d1:0a:a2:1e:5b:2a:6b:e5:a3:d7:
28:9a:49:2d:2a:4a:8d:84:47:00:fb:f0:17:38:34:
63:f6:da:62:7c:54:b4:eb:78:26:40:4c:b1:87:c7:
43:5b:38:16:b8:b0:5f:d3:91:bb:c7:a8:c9:3a:72:
35:a3:7b:b7:01:92:72:d9:c4:8d:83:35:8a:25:be:
e2:b3:43:3b:f5:3b:2a:9b:af:a7:25:60:51:c0:15:
5a:52:c6:ef:0d:09:38:bd:1e:24:34:66:27:48:e6:
5e:43:53:8f:6d:7b:9d:09:98:ea:fb:64:45:30:4d:
6f:06:da:22:70:d4:f4:c9:c8:f3:dd:1e:10:44:98:
7b:18:ac:08:a0:54:7f:04:49:3e:41:ee:55:02:9a:
1a:fc:5b:18:75:d7:38:84:c1:e0:bf:ae:b5:de:fd:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:27:7F:C3:50:26:00:4C:40:8E:4C:E4:6B:0B:F1:30:9F:7B:04
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/jX4nf8NQJgBMQI5M5GsL8TCfewQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9d:30:f3:36:e7:53:bf:07:6b:ae:eb:f2:c9:0c:9f:52:fd:
24:bb:19:93:58:b9:9c:9e:f3:22:ce:c0:f2:2e:92:48:15:d8:
cb:72:8e:f0:b8:5f:be:6c:3b:c8:03:4e:1d:66:ff:5a:7a:02:
02:f8:0a:af:b4:03:14:ab:77:35:94:b8:d1:44:66:db:7b:48:
b0:aa:10:b1:fe:83:f6:b9:6e:82:47:c9:43:67:65:60:12:26:
e3:41:d2:08:6d:66:f3:2e:ff:2c:6c:1f:4b:98:18:52:8d:1c:
5c:7f:d7:21:37:c7:16:7c:eb:e5:cd:5f:77:8f:40:4a:6e:fa:
b3:bf:cc:1e:86:da:11:bc:43:bc:eb:3d:ef:44:d7:bb:e7:cb:
dc:6a:a7:6d:72:ef:0c:22:96:73:ef:2b:be:d2:9a:85:98:7c:
3d:1d:3d:dd:50:46:e4:9e:05:ec:d4:c5:46:21:7a:c0:6a:2b:
2f:9a:dd:11:c9:6a:8e:ec:07:db:01:b6:75:1c:e9:62:2f:06:
9a:84:81:c0:75:c6:97:81:8e:ca:18:5b:25:a7:03:d6:4d:bc:
8d:6c:69:20:46:40:ed:6e:fd:37:e4:bd:4b:5b:da:37:fb:ee:
55:42:7e:f1:d8:c3:0b:f4:f5:3b:bb:ad:96:26:72:55:b2:a8:
21:5d:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net