Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Eb_9fTiMcE3_jdnW1IOmBPCwITk.roa
File: Eb_9fTiMcE3_jdnW1IOmBPCwITk.roa (raw, json)
Hash identifier: x6TM5BcAZpF4cjfBU22uB+R/usp/qdEghFdq48ZmSEc=
Subject key identifier: 11:BF:FD:7D:38:8C:70:4D:FF:8D:D9:D6:D4:83:A6:04:F0:B0:21:39
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 018CC6B792CE990F4E4B2B800460965D777E
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Eb_9fTiMcE3_jdnW1IOmBPCwITk.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207864
IP address blocks: 193.22.168.0/24 maxlen: 24
193.22.170.0/24 maxlen: 24
193.22.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:92:ce:99:0f:4e:4b:2b:80:04:60:96:5d:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11bffd7d388c704dff8dd9d6d483a604f0b02139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:93:dd:90:ae:75:02:74:10:9d:b7:18:af:
d7:02:19:b2:49:c2:ad:1b:5c:b7:fc:7e:62:b4:d6:
6d:32:5c:bd:80:b8:20:88:5d:c9:e6:61:c7:7e:7d:
66:31:66:69:11:e4:bf:1b:60:bb:d4:ca:71:5c:c4:
48:5f:8f:a1:f3:43:9c:a8:c1:d4:1a:fb:2a:4a:59:
e4:3f:f1:c5:a5:ab:4a:7d:de:88:d5:3b:ee:ce:f7:
ee:67:bd:4c:99:97:c2:6d:62:98:60:5f:43:60:dc:
a7:d7:68:9a:f4:8d:46:93:ae:69:20:91:42:bd:04:
73:75:3c:ed:e8:26:df:64:d8:89:57:10:ce:f3:38:
c1:28:a4:68:6e:b2:be:db:85:e0:f7:bd:63:0a:3a:
08:8e:09:0b:b6:af:48:6b:66:83:ee:e3:f3:f0:68:
9d:b1:54:5c:06:95:b0:0d:10:7e:97:60:89:59:9b:
cb:b2:96:84:5f:04:2b:c2:44:ce:57:69:4f:4b:59:
b6:09:4c:05:1c:19:e5:f6:a5:48:6c:2f:4d:d0:d9:
af:7e:c8:ba:6e:07:16:7a:77:ae:d7:ef:ef:36:8c:
b6:25:fa:21:d0:75:90:b1:48:4c:03:b8:64:5a:99:
81:9c:2d:b4:e6:28:b6:2e:39:7f:7c:4b:15:ee:76:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BF:FD:7D:38:8C:70:4D:FF:8D:D9:D6:D4:83:A6:04:F0:B0:21:39
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/Eb_9fTiMcE3_jdnW1IOmBPCwITk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.108.0/24
193.22.168.0/24
193.22.170.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ff:13:74:f2:db:39:80:b4:28:20:17:8e:46:f2:0c:69:b7:
65:28:ee:a5:f1:c5:f2:e4:f1:1f:c3:35:5b:eb:b3:8d:5d:70:
8a:df:e1:9e:81:c9:2e:48:8d:34:4b:41:b4:ba:72:99:29:b6:
02:dc:1b:a3:fa:c9:3c:61:16:26:4f:2a:cc:bc:52:2d:7c:fd:
c0:12:c9:34:53:12:76:da:8f:49:fd:83:55:38:a7:e0:15:55:
bb:85:c2:30:9d:da:62:27:76:82:17:92:25:1a:39:ca:f5:0e:
03:7f:85:bb:ec:8c:88:dd:4a:5b:8f:1f:13:68:08:03:30:f5:
d3:b9:a1:a4:4d:80:a3:8f:46:b9:96:24:62:66:17:fc:86:e8:
91:18:91:da:fa:ad:7e:7d:13:9a:8e:92:ea:e0:d1:be:fc:b6:
a5:ea:1f:ad:8a:13:ba:d4:a9:ed:ad:d5:d1:b3:c3:1d:2d:37:
e5:f4:cd:e3:6b:1e:5a:66:9a:f5:c3:25:3b:03:b5:98:64:ae:
bf:c8:5a:bb:b5:68:60:8f:dd:40:bd:b6:a3:8b:25:b1:2e:58:
ea:19:92:ca:45:60:f6:d4:7d:24:0a:35:3f:cf:cc:bc:3c:25:
9c:ce:05:d1:02:7c:7d:27:fb:6e:4d:b4:e4:ee:1d:2f:93:67:
dd:27:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net