Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/4ebIB9EkqgfL2rwLQ026fKc8UnU.roa
File: 4ebIB9EkqgfL2rwLQ026fKc8UnU.roa (raw, json)
Hash identifier: i2ssoZ4MrtmRZ5LGe3XA8mtwJj1aLmZH7O9StAa0jaM=
Subject key identifier: E1:E6:C8:07:D1:24:AA:07:CB:DA:BC:0B:43:4D:BA:7C:A7:3C:52:75
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0192AF4831FAA451CBCB865C98AAE10F8EB5
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/4ebIB9EkqgfL2rwLQ026fKc8UnU.roa
Signing time: Mon 21 Oct 2024 13:33:17 +0000
ROA not before: Mon 21 Oct 2024 13:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56704
IP address blocks: 31.15.112.0/21 maxlen: 21
185.154.116.0/22 maxlen: 24
2a03:eb80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:48:31:fa:a4:51:cb:cb:86:5c:98:aa:e1:0f:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Oct 21 13:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e6c807d124aa07cbdabc0b434dba7ca73c5275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:f4:25:7c:bf:3b:ac:1e:e7:b9:94:80:54:
34:b6:c9:4d:eb:ca:7f:4d:17:2d:3d:b2:9a:3b:40:
0e:8a:f8:88:0a:d5:8f:a2:21:34:a4:1e:cf:31:2b:
c3:cb:16:13:4d:ba:b3:1e:f6:e5:c0:06:7c:98:35:
b4:dd:44:7e:c9:53:2a:ae:de:5f:d0:36:2c:c8:12:
c5:3c:8a:cc:d2:09:0c:87:43:30:a2:25:f8:cc:a8:
f1:39:9e:9b:9a:f4:df:2a:0a:ed:23:00:61:81:1a:
4c:ad:0d:e6:31:44:b9:1b:60:07:4b:dc:a7:bf:40:
80:cb:d2:5d:6b:fb:19:66:58:a6:dd:e3:f0:ef:3d:
16:44:65:1b:03:4c:55:46:b6:42:e0:38:7f:57:73:
12:f6:a3:2b:26:20:ca:7b:66:1f:23:ac:f0:16:ec:
17:3f:2a:f1:45:84:d0:dd:2f:15:09:d0:2f:cf:7e:
09:5f:54:9b:f6:16:58:59:8e:45:99:88:4b:bc:7d:
94:9d:56:5a:8d:7f:61:2e:86:ba:71:13:1b:76:2a:
f2:db:ab:e7:0a:c2:68:76:22:9a:bb:eb:0a:23:05:
12:e6:07:aa:63:eb:a3:1d:63:04:01:3b:d4:77:7f:
8e:1b:11:c3:c4:fc:3f:01:a7:06:b6:52:8d:55:80:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:C8:07:D1:24:AA:07:CB:DA:BC:0B:43:4D:BA:7C:A7:3C:52:75
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/4ebIB9EkqgfL2rwLQ026fKc8UnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.112.0/21
185.154.116.0/22
IPv6:
2a03:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
8f:7a:71:76:56:cd:b0:ae:13:48:b6:44:5e:f0:bd:da:17:45:
21:19:34:04:5d:9e:a2:5f:c7:7b:0e:c5:cb:64:6c:6e:6a:9a:
a4:75:a1:c7:45:23:9e:64:ee:94:c5:a9:13:eb:da:63:62:82:
f6:f8:3d:23:db:0e:dd:87:88:f9:e3:ad:9b:64:d8:f5:80:4b:
72:70:9a:4c:53:7d:5b:00:a4:0b:92:a6:dc:e8:18:16:59:ea:
82:d8:72:99:6f:53:f2:3a:ce:71:1e:08:e5:77:3f:62:04:f7:
af:00:8b:e7:ad:46:71:0e:ef:b8:0d:77:ac:eb:cf:cc:fd:1e:
18:04:5a:d9:27:5c:08:fc:0a:68:cc:8e:f5:b2:4e:44:5d:8e:
b3:ce:40:05:ae:1d:7b:af:7c:91:b5:a7:24:c9:68:2e:8a:53:
ca:46:ad:8b:e6:13:94:b1:52:44:1e:88:3a:42:7d:70:e8:8f:
d3:81:bb:e6:73:de:7e:4f:4a:06:c3:ae:19:b0:58:59:c5:f1:
be:68:31:4f:a4:6b:69:2f:aa:b4:f0:a7:04:a9:fe:b1:e8:c6:
37:db:b1:4e:f5:8b:d9:72:f3:6f:50:c2:05:f9:68:54:8f:44:
d5:04:10:0f:c5:19:53:a4:1e:f8:53:0d:00:a5:ed:35:8c:2c:
d8:7c:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net