Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/yQm1fB3M5qctdGlhz6CPrZ_4sd4.roa
File: yQm1fB3M5qctdGlhz6CPrZ_4sd4.roa (raw, json)
Hash identifier: 8kxu8niyJ+q89QUC5g+xgMKmPhj6lPv59dlLItICBbc=
Subject key identifier: C9:09:B5:7C:1D:CC:E6:A7:2D:74:69:61:CF:A0:8F:AD:9F:F8:B1:DE
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0193AFF1D788196D75AE1B2F7960A9EDEBC1
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/yQm1fB3M5qctdGlhz6CPrZ_4sd4.roa
Signing time: Tue 10 Dec 2024 09:41:22 +0000
ROA not before: Tue 10 Dec 2024 09:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.162.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:f1:d7:88:19:6d:75:ae:1b:2f:79:60:a9:ed:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Dec 10 09:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c909b57c1dcce6a72d746961cfa08fad9ff8b1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:cc:72:f6:7c:4d:d1:17:ad:97:d6:dd:4c:
46:45:19:bd:fb:7a:ba:6d:64:f9:cc:07:a6:da:fb:
a5:3c:4e:2c:1b:b5:d5:8f:f7:78:7b:2a:f6:6a:34:
94:6b:4b:b2:88:ab:10:1a:c0:c4:65:22:ba:3a:e4:
53:69:4f:15:b0:f5:b4:dd:fe:7d:36:41:3b:16:56:
6e:9d:31:f2:b3:8d:37:5a:8f:ac:e1:0e:34:90:fc:
6c:7a:d7:8c:0c:23:60:88:33:85:2c:d1:14:a1:79:
84:41:aa:cf:8f:7e:40:50:7d:84:dd:25:3e:47:c5:
74:62:97:ea:90:99:cb:06:e1:9a:83:a8:63:50:27:
d4:72:8b:a7:fe:61:47:91:19:8e:5c:ea:6c:6e:e9:
89:7f:4f:a4:f0:e6:6e:42:1d:1d:31:3e:d4:03:94:
9b:ae:77:29:3e:65:cd:a2:4c:97:b5:2a:cb:3b:60:
a9:86:15:69:58:5d:5d:2c:bc:24:35:7c:74:35:06:
f4:3a:7d:cd:4a:7d:22:0a:83:ed:42:29:f5:b5:e7:
75:73:9d:33:dc:9c:47:33:e8:9a:1d:03:67:d2:b0:
7c:ea:ff:54:07:01:3c:30:1b:e6:ff:92:e3:02:9a:
83:f2:cd:c7:76:18:78:ca:8b:7a:bd:74:e1:75:7c:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:B5:7C:1D:CC:E6:A7:2D:74:69:61:CF:A0:8F:AD:9F:F8:B1:DE
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/yQm1fB3M5qctdGlhz6CPrZ_4sd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3c:5b:69:8b:37:33:82:bf:26:53:52:17:87:6a:3b:48:7c:
34:d4:f9:6c:c4:97:9c:52:ef:c0:fa:d6:9f:03:da:9e:ab:a9:
15:dc:6b:29:a8:47:c2:13:a7:65:d9:41:3b:31:78:10:3a:4e:
2e:ad:e6:39:ac:1d:be:14:1b:36:6c:02:ca:28:70:58:67:4e:
c9:ed:d9:a9:47:ca:8f:81:13:08:68:14:fa:42:b5:ab:d7:26:
69:ed:6d:d5:e2:3c:d7:e9:9a:7e:d0:f9:ee:2f:e1:df:61:b1:
7f:e0:a3:0a:f2:3d:b1:d9:6b:15:73:34:ea:d0:3f:9f:66:5e:
b1:d4:a2:a7:6a:81:f6:f5:d6:4a:1c:39:ad:38:da:6c:df:5a:
f7:f7:74:fb:f5:8a:c9:5a:0d:2d:3f:b0:5e:da:8c:1d:51:55:
ac:35:45:c6:97:4b:08:2e:75:b8:ce:c0:4f:81:75:b8:99:ce:
42:f9:cd:c7:ee:b2:7a:e4:34:07:7e:70:07:a2:f9:55:a2:35:
26:23:e7:df:f5:f6:1b:29:10:6a:dc:2f:38:66:92:c2:44:b1:
76:fa:fa:60:f0:ba:0d:0b:e4:6b:f5:5a:08:69:f9:f5:6d:8f:
3e:e8:ff:d6:c5:35:56:1a:b7:ff:b7:0f:c6:30:93:a1:c7:31:
5d:5c:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:39 2024 by rpki-client on console.sobornost.net