Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/5qIJiE-KvsTG_4jFGQzBsMR1_nA.roa
File: 5qIJiE-KvsTG_4jFGQzBsMR1_nA.roa (raw, json)
Hash identifier: oY1sahCLQ5T1S3LyDNQhWR/8JLyHwCUXM5UTI+bB4cA=
Subject key identifier: E6:A2:09:88:4F:8A:BE:C4:C6:FF:88:C5:19:0C:C1:B0:C4:75:FE:70
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 01939BF0B002C4ABD7E5053731F5CDD57BEE
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/5qIJiE-KvsTG_4jFGQzBsMR1_nA.roa
Signing time: Fri 06 Dec 2024 12:27:42 +0000
ROA not before: Fri 06 Dec 2024 12:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15779
IP address blocks: 194.15.208.0/24 maxlen: 24
194.15.210.0/24 maxlen: 24
194.15.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:f0:b0:02:c4:ab:d7:e5:05:37:31:f5:cd:d5:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: Dec 6 12:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6a209884f8abec4c6ff88c5190cc1b0c475fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:71:7e:bd:bf:8b:29:6c:eb:92:cd:e7:7a:
c7:58:5d:63:3b:ae:d0:ee:75:ec:67:69:b7:56:36:
fe:4f:52:44:cd:e5:05:f6:2a:e8:f5:85:67:26:db:
15:e6:40:35:57:f9:f0:6d:31:ca:02:a8:be:59:3a:
13:90:13:e8:b9:43:ed:7f:8b:5c:d5:db:97:16:d8:
cb:84:a6:a9:d4:39:4c:ef:f9:bb:f8:6b:f3:06:1b:
1b:56:61:15:d1:6b:af:5a:c4:a6:b8:2d:08:fe:98:
4a:66:8d:f8:f8:f1:3f:25:27:64:1c:b9:36:9f:eb:
b3:fd:e5:e3:8a:58:c7:f4:28:0a:09:ce:b5:d4:d2:
39:1d:4e:98:52:2b:c2:fd:bc:df:e3:07:9d:89:3d:
1e:1f:09:91:6c:4e:c6:44:2f:23:de:78:6a:cd:5d:
8f:6a:97:96:7a:37:31:de:1c:d8:09:5c:7d:0b:89:
22:d4:d2:26:7a:f7:a7:3b:c9:e7:74:8f:88:0e:75:
d6:74:a5:fc:6b:ec:a6:66:db:4c:97:26:73:a5:9d:
89:0b:5f:af:61:aa:7c:08:17:83:42:c3:c7:50:15:
50:0f:e5:9b:6b:36:f3:81:9b:fe:d0:c3:e5:9a:3c:
40:10:b2:19:e7:e9:84:50:bd:38:f3:b0:3f:8c:51:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:09:88:4F:8A:BE:C4:C6:FF:88:C5:19:0C:C1:B0:C4:75:FE:70
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/5qIJiE-KvsTG_4jFGQzBsMR1_nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.208.0/24
194.15.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:40:e8:09:d3:d9:97:a2:27:5f:e3:af:ae:4f:27:f0:f8:ff:
88:14:ea:48:f4:f4:b7:54:51:b1:ff:5e:45:55:81:f4:6f:de:
89:65:0d:e0:52:27:55:8e:67:9b:be:29:d4:40:46:83:a8:a9:
44:ee:51:4f:55:9f:45:f5:11:71:83:e7:7f:66:e5:4a:ed:db:
2d:06:c2:9e:8d:18:b7:d8:0a:1e:47:5c:be:74:97:03:6b:86:
3d:da:1c:60:fc:27:a9:1e:96:e9:a4:a7:46:30:3e:7c:d8:bd:
04:b3:53:5c:80:a5:43:04:fd:6c:55:ed:54:38:d6:af:2c:00:
a6:9e:ff:a3:9c:e9:4f:ab:06:e7:1d:9c:58:80:d8:99:5e:32:
64:8e:dd:14:33:a5:3e:00:28:e9:cb:c4:d5:b1:e6:1b:56:88:
b7:bc:cb:77:a6:d1:fb:d0:2e:b2:58:01:d2:a5:a5:1a:6e:92:
e3:0a:53:2e:9c:bf:d0:3c:54:91:e0:3e:53:38:f9:2a:1b:88:
40:8e:af:a3:dd:0e:57:ef:36:37:6f:2f:ed:70:b8:2a:3d:ea:
58:f9:61:3d:fd:4a:4d:a4:85:5e:2e:82:60:09:0f:98:20:a4:
95:f6:54:f1:3c:f8:6d:c6:c1:77:20:45:df:69:b6:a0:e6:8b:
1d:ac:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net