Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/nLBY-b5pmtoaBrYtyUMYgnM5M80.roa
File: nLBY-b5pmtoaBrYtyUMYgnM5M80.roa (raw, json)
Hash identifier: 9Lb9ZVApUGbWuultsus0JmA3S1JcF1ADzerVXRIfnC4=
Subject key identifier: 9C:B0:58:F9:BE:69:9A:DA:1A:06:B6:2D:C9:43:18:82:73:39:33:CD
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019368E24BC402873CCB450B951EE6D6481C
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/nLBY-b5pmtoaBrYtyUMYgnM5M80.roa
Signing time: Tue 26 Nov 2024 14:31:21 +0000
ROA not before: Tue 26 Nov 2024 14:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62026
IP address blocks: 178.211.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:e2:4b:c4:02:87:3c:cb:45:0b:95:1e:e6:d6:48:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Nov 26 14:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cb058f9be699ada1a06b62dc9431882733933cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:2d:a5:03:00:e6:dd:87:90:33:16:ac:15:
37:ac:8a:87:21:73:58:b4:2d:65:4b:71:96:78:92:
6a:5b:ae:32:77:50:d7:ce:de:22:36:3e:99:34:3b:
e1:1e:66:50:75:be:91:92:60:12:aa:68:f4:3e:df:
89:21:6b:54:12:30:69:d6:f6:ff:ef:62:74:c6:f9:
9e:94:fb:0e:8f:c8:7c:30:d7:8f:3e:f3:9d:79:0a:
ba:99:53:a5:d8:cb:f1:75:9a:c5:fc:f7:35:2d:a7:
ec:dc:ae:eb:86:5c:a0:ea:84:c3:07:10:f9:01:f8:
b1:93:39:33:bf:04:c5:fc:fc:41:d1:ba:1c:f7:ba:
f7:48:9e:2c:8c:e6:ab:55:f8:13:26:6c:6c:21:51:
fc:70:14:27:0e:de:9e:a9:df:4c:f2:df:86:b3:c6:
3e:0f:d9:3c:10:1a:3f:6a:c5:57:bf:4f:48:f8:ef:
e5:15:a4:41:8a:e7:c5:4e:23:5f:a8:f5:65:fa:18:
3a:42:b8:f6:91:57:d9:d8:0a:e2:a2:86:02:52:b5:
1f:cd:f4:be:f6:ef:26:9c:d1:99:3d:47:0d:71:02:
41:b0:67:f6:72:3a:35:46:a8:45:74:58:82:ed:cf:
f8:1a:ae:f2:48:68:fe:8f:ef:6b:29:7b:81:e0:38:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B0:58:F9:BE:69:9A:DA:1A:06:B6:2D:C9:43:18:82:73:39:33:CD
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/nLBY-b5pmtoaBrYtyUMYgnM5M80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:68:bf:96:7b:5a:69:45:57:54:94:5b:74:67:98:9e:3a:d0:
67:c8:06:5f:77:c6:2f:0b:b8:9c:a7:f8:58:ee:c5:86:f1:8f:
21:a0:7b:4c:ec:03:cd:6a:53:78:80:03:4b:f7:bb:51:d6:2f:
a9:b3:58:be:fb:5f:da:82:a5:c1:0c:0d:48:52:83:8a:0f:b2:
57:a0:15:bf:91:94:ec:2b:02:1f:a0:da:d2:5e:d7:ca:84:ee:
c9:b0:29:28:4a:4a:61:c4:a2:4f:85:b6:c8:0e:e7:e5:e5:6d:
37:31:75:69:86:be:20:de:96:50:e1:d3:94:1d:f7:79:cc:a7:
d9:27:0a:e4:fc:79:2d:59:7a:72:b0:dc:2d:75:a4:e2:ec:82:
c4:f7:0b:ca:01:d8:4f:b9:5e:fd:18:8f:ff:bc:75:52:68:dc:
4f:f2:d0:2c:ff:56:93:cd:84:9c:1c:2b:28:63:a2:c0:d9:44:
53:29:b1:ad:ef:6b:fb:c5:88:9c:26:c7:6f:8b:4a:78:3d:23:
80:10:45:f8:ab:88:15:b9:48:d8:2e:16:72:d9:c2:ad:53:3c:
f9:5f:57:fe:82:fa:d7:75:c1:5b:9b:74:1a:3c:04:cf:88:4c:
90:ee:9a:3e:45:11:0b:41:de:65:b7:16:b0:96:da:b9:49:f3:
9e:d2:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net