Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/fOWw_jGADXZzK1_OtES6XPG3FZc.roa
File: fOWw_jGADXZzK1_OtES6XPG3FZc.roa (raw, json)
Hash identifier: AaPhh7Y6h3BdGmfuDPXHbNuyaXcnG6SOlBJLBfiy0gs=
Subject key identifier: 7C:E5:B0:FE:31:80:0D:76:73:2B:5F:CE:B4:44:BA:5C:F1:B7:15:97
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 0192D77624F65535461A45AC568F8B45CB60
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/fOWw_jGADXZzK1_OtES6XPG3FZc.roa
Signing time: Tue 29 Oct 2024 08:48:17 +0000
ROA not before: Tue 29 Oct 2024 08:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208006
IP address blocks: 5.253.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:76:24:f6:55:35:46:1a:45:ac:56:8f:8b:45:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Oct 29 08:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ce5b0fe31800d76732b5fceb444ba5cf1b71597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:15:05:36:d6:e7:92:5d:a6:61:b7:84:18:
33:50:99:af:48:15:7c:71:a4:2c:bf:1d:32:52:90:
13:ac:91:5f:33:d8:ef:f3:68:c2:c6:47:25:e6:d0:
94:c6:bc:27:8c:73:ac:19:08:69:27:f0:25:22:2c:
14:df:d2:57:5f:5b:86:8b:34:00:6a:db:65:3f:90:
18:c9:17:5f:46:44:52:d9:3a:85:26:ad:b2:16:65:
2a:bc:99:78:7b:13:16:27:cc:29:f1:99:0d:3a:7d:
ad:0b:9f:86:26:9c:2a:9d:13:b6:d9:f4:dd:08:14:
0b:20:17:8e:88:b6:2e:c0:af:09:98:ac:a8:8a:a9:
f6:85:a2:9c:2d:b3:b6:d8:81:c5:22:3a:6b:19:fe:
71:01:8d:be:d6:42:6c:23:54:c9:3b:a1:8c:11:cb:
e9:d9:74:56:6d:44:e2:46:2c:2d:38:43:58:9e:1c:
82:7a:15:28:08:35:25:01:6f:7e:8e:8d:92:44:1b:
89:99:ac:c8:9f:aa:0a:6e:66:6b:ef:87:a4:4e:90:
e9:2d:ae:89:36:75:27:31:56:56:4d:b2:26:d3:58:
cb:17:3e:16:ea:26:a8:02:35:33:bf:ef:29:b9:bd:
bb:08:cc:f3:68:48:cf:d4:d3:62:fe:cd:22:ac:8d:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:B0:FE:31:80:0D:76:73:2B:5F:CE:B4:44:BA:5C:F1:B7:15:97
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/fOWw_jGADXZzK1_OtES6XPG3FZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.24.0/22
Signature Algorithm: sha256WithRSAEncryption
11:2d:5b:16:cd:90:a2:b9:5e:8a:37:0b:eb:e8:37:91:16:ca:
2c:87:c9:5e:23:2f:1f:63:df:ba:10:fb:dc:13:9f:50:5f:1d:
1a:82:dc:69:d3:5d:c4:81:d5:ab:00:d4:d2:bb:87:23:3b:00:
36:98:7a:0f:6c:b4:cc:3a:95:f6:6b:56:fb:12:81:6c:a7:25:
fa:af:01:a8:45:b7:12:80:be:96:55:76:1b:9c:a9:f9:1a:4e:
7c:8a:a8:f3:4b:20:55:c2:8f:62:7b:86:98:19:98:62:c5:99:
f7:d4:1a:a8:0e:26:e7:d4:05:32:e6:c5:47:58:57:85:c8:bc:
a6:3d:23:39:83:72:21:df:4d:12:4c:ec:f0:fa:39:9c:64:3a:
30:af:8e:bd:70:e9:e2:de:b5:6e:85:0d:2b:f9:07:41:e5:df:
72:ac:18:fb:c5:3f:5c:3c:52:d5:fa:98:87:2a:38:31:d4:61:
07:c6:6f:e9:d5:99:f0:60:7e:4f:10:bc:db:e1:d6:b9:3c:1e:
14:c7:15:9f:9e:45:9c:95:e0:be:42:21:16:af:32:cf:6d:22:
8d:66:cf:ec:9f:ab:8e:cd:01:7a:a7:7c:14:d4:e1:b5:13:82:
7a:e5:9e:f4:c1:ef:f9:58:b0:88:bb:85:d5:97:b7:a9:fe:6b:
5b:f4:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net