Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-GLjol1-8ra2UIX-EH9ev2qddSQ.roa
File: 1-GLjol1-8ra2UIX-EH9ev2qddSQ.roa (raw, json)
Hash identifier: 3RMFxH9l/WKybse02VzVv6cEIT6TEh5EKQ2rjbxt0zg=
Subject key identifier: F8:62:E3:A2:5D:7E:F2:B6:B6:50:85:FE:10:7F:5E:BF:6A:9D:75:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019371785012282C190736A2D4E60A50185C
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-GLjol1-8ra2UIX-EH9ev2qddSQ.roa
Signing time: Thu 28 Nov 2024 06:32:10 +0000
ROA not before: Thu 28 Nov 2024 06:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 185.49.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:78:50:12:28:2c:19:07:36:a2:d4:e6:0a:50:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Nov 28 06:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f862e3a25d7ef2b6b65085fe107f5ebf6a9d7524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:42:36:79:01:5a:ee:02:d9:6b:56:3a:19:
b8:f2:85:ae:b4:33:11:92:13:08:03:17:92:28:a0:
e6:72:43:9d:44:e9:27:50:2f:fb:9f:a6:f2:c5:b3:
b5:13:45:9d:1b:11:3e:e6:27:9c:fc:30:60:57:4d:
b8:cf:a5:39:75:1f:61:c3:3a:75:6b:f9:34:3b:e8:
f0:37:4a:c2:bf:bc:f7:8c:71:3e:73:ae:6b:06:9e:
34:0f:c1:fe:85:d3:ad:d1:bd:51:30:f0:50:e2:69:
fd:9f:0d:66:3b:f2:a8:bd:35:64:e5:30:e1:88:2f:
15:74:70:c4:f3:80:bd:75:c3:9e:f0:3d:8d:18:ab:
f9:f3:17:c8:60:88:b4:f8:10:18:aa:ca:cb:75:46:
d7:59:86:e7:82:84:0f:4f:f5:8d:50:47:cd:f3:51:
ee:09:91:49:36:26:36:90:7f:d5:00:3f:7c:ca:24:
08:db:2b:74:cf:44:53:79:0d:c2:77:c6:06:3c:53:
31:bd:bc:a0:80:79:38:bc:81:c4:aa:c2:dd:9b:16:
21:0a:50:1d:3d:36:5d:c3:5e:27:94:9c:1c:42:a5:
84:12:36:b4:a3:79:a3:cf:bb:60:2d:e0:05:6b:4d:
1b:b0:b4:ee:55:dc:c0:14:5d:13:6b:92:a2:a9:8e:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:E3:A2:5D:7E:F2:B6:B6:50:85:FE:10:7F:5E:BF:6A:9D:75:24
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-GLjol1-8ra2UIX-EH9ev2qddSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ff:02:98:2d:27:20:51:cc:56:35:a5:9b:d3:62:55:87:4d:
87:50:dc:d5:8c:f3:c9:71:5e:88:57:17:d7:ba:16:8c:12:99:
39:8b:17:c8:de:31:d3:3d:36:ae:12:3c:76:4b:6c:a4:1c:0a:
fb:ee:8e:f7:e8:c2:98:80:cc:ea:07:61:d0:7c:c6:67:34:90:
4a:1b:1a:f0:9e:53:9b:56:fb:e3:96:ea:74:ab:20:00:07:69:
25:3c:66:fd:77:3a:c6:e1:1d:80:1f:5a:f8:59:25:23:ab:1e:
d4:bf:83:81:6a:f6:6d:ed:a2:73:cf:b2:f6:26:68:61:8e:a4:
5c:4f:d6:df:fc:30:a6:e7:70:50:68:29:3f:02:2e:41:88:a0:
90:f3:fe:a9:77:85:7c:c7:c0:f7:00:79:b4:51:81:6b:c7:f4:
14:42:81:e2:79:99:e7:d4:dc:63:a3:13:95:c2:8f:84:8c:11:
46:22:fb:9c:17:18:20:e2:c4:38:b8:4a:b6:1f:d9:59:df:46:
fd:ea:d1:00:3d:2c:86:7b:46:e6:dc:2c:00:43:e1:5c:30:e8:
b9:34:e5:9a:9b:8c:f7:6d:cf:98:94:b7:5b:a4:43:54:99:c6:
1a:44:eb:79:ff:08:be:f8:51:41:7e:97:a9:49:c0:55:c2:01:
40:d4:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net