Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/oXnY6jHG4uRxiuAbhn6sCvg2MTY.roa
File: oXnY6jHG4uRxiuAbhn6sCvg2MTY.roa (raw, json)
Hash identifier: rMAGqKK1rdqWeEdJUShUDAuf7x+LVqUXAaL3rWkj08o=
Subject key identifier: A1:79:D8:EA:31:C6:E2:E4:71:8A:E0:1B:86:7E:AC:0A:F8:36:31:36
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01939B21ED1132469BE63474F4F0A20A66C8
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/oXnY6jHG4uRxiuAbhn6sCvg2MTY.roa
Signing time: Fri 06 Dec 2024 08:41:51 +0000
ROA not before: Fri 06 Dec 2024 08:41:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25308
IP address blocks: 212.118.44.0/24 maxlen: 24
212.118.46.0/23 maxlen: 23
212.118.46.0/24 maxlen: 24
212.118.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:21:ed:11:32:46:9b:e6:34:74:f4:f0:a2:0a:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Dec 6 08:41:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a179d8ea31c6e2e4718ae01b867eac0af8363136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:97:80:74:a0:21:70:a5:15:2a:8a:e5:7f:
d6:32:87:66:f6:56:ad:a4:10:ea:10:31:f6:0a:5e:
f6:9e:64:b9:36:12:22:74:1a:95:77:9b:2b:40:da:
4b:40:88:cf:03:1b:39:33:01:c1:e2:da:61:35:b9:
39:23:cc:4a:23:58:8a:2b:ec:a5:6d:10:8b:1e:7e:
37:b6:6c:e4:2c:ff:af:37:78:24:e2:75:b7:2e:41:
f2:85:74:f6:9e:62:d1:9c:bc:71:d6:fd:5d:e2:a0:
89:0f:36:96:5a:33:9c:44:15:fa:ad:8a:58:cf:25:
59:63:ee:81:7a:82:fd:84:55:52:df:ee:c2:73:9c:
64:83:de:09:55:74:08:5b:96:20:27:2f:8e:f5:ad:
bb:44:8b:07:10:1b:57:41:e7:f3:a2:c8:af:e2:0a:
d0:31:26:4e:a0:73:0f:ba:2e:7f:6f:27:43:54:01:
a5:7d:c0:c1:84:7a:8a:d6:db:ab:65:ed:1f:d6:27:
2a:c9:a6:10:cc:99:06:9f:8a:54:28:d8:1e:2e:88:
c8:53:a9:8c:8e:d2:b2:60:15:49:8c:e2:4d:95:cd:
b6:4d:63:02:fd:eb:fe:1b:90:bd:ef:c2:2c:1d:1f:
c6:89:b6:c6:cc:67:36:9b:bf:c1:cb:ef:16:90:5a:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:D8:EA:31:C6:E2:E4:71:8A:E0:1B:86:7E:AC:0A:F8:36:31:36
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/oXnY6jHG4uRxiuAbhn6sCvg2MTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.118.44.0/24
212.118.46.0/23
Signature Algorithm: sha256WithRSAEncryption
45:24:af:94:d4:64:f0:ee:53:90:d1:e3:70:02:1f:a0:5b:66:
8c:e1:93:3e:b7:52:4a:fb:80:de:ef:52:c1:c1:25:28:f8:33:
5e:d8:de:2d:97:60:f6:85:c2:6e:8e:1a:df:98:56:91:cd:ae:
f3:dc:82:91:3e:55:61:1b:1c:fe:62:6e:57:66:dc:39:c5:80:
f9:9e:9c:4b:76:bc:7d:4e:4e:d4:ec:81:95:9e:26:bb:4e:4f:
8c:96:a7:58:2b:3c:af:ba:df:46:28:b5:38:2d:50:1b:61:9d:
e8:8a:24:03:e5:f0:4e:d7:62:52:77:07:7b:8d:56:3d:a7:4a:
43:21:15:5e:9c:f6:af:b2:b5:73:c1:d3:b2:a4:ed:eb:fd:7f:
e6:ea:54:bc:02:e0:62:0a:17:bc:b9:ee:3b:2b:b2:4f:f5:84:
f6:05:45:55:de:42:8a:7c:14:3a:18:42:a1:ab:ad:34:3f:d8:
75:be:79:16:d9:d9:ba:16:62:e5:cb:cb:69:d5:9a:f6:89:5a:
75:20:98:aa:27:89:52:5f:24:92:7d:17:d8:f4:fa:05:c3:d8:
51:1a:65:20:f1:3d:f2:15:fb:05:20:20:ad:44:96:8d:96:89:
0a:41:5e:67:e3:5e:40:9c:6c:3f:50:96:f0:a9:75:6f:8e:27:
22:e2:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net