Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/UV1cb4OJLVf1ZIoPgkh-EYDnBCg.roa
File: UV1cb4OJLVf1ZIoPgkh-EYDnBCg.roa (raw, json)
Hash identifier: pg0kqyIaiLEviNlT0/TO4j8xh8AUFSsv3xyJmMuTvXA=
Subject key identifier: 51:5D:5C:6F:83:89:2D:57:F5:64:8A:0F:82:48:7E:11:80:E7:04:28
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 018CC349345C26CEBEA2E550FCFFBABB7111
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/UV1cb4OJLVf1ZIoPgkh-EYDnBCg.roa
Signing time: Mon 01 Jan 2024 04:30:03 +0000
ROA not before: Mon 01 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203951
IP address blocks: 185.119.4.0/24 maxlen: 24
185.119.4.0/22 maxlen: 22
185.119.6.0/24 maxlen: 24
185.119.5.0/24 maxlen: 24
185.119.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:34:5c:26:ce:be:a2:e5:50:fc:ff:ba:bb:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=515d5c6f83892d57f5648a0f82487e1180e70428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:9c:5b:a1:0e:6c:7d:82:12:d5:8c:3a:62:
c4:7c:cc:2b:aa:2b:d9:c0:f4:7b:6c:77:dc:91:0c:
98:a0:f8:bd:93:02:e8:0f:21:1b:e4:f5:c2:84:eb:
b2:c0:7f:9e:99:7a:ff:f5:b7:69:8b:fa:a6:13:5f:
bf:4b:e0:ff:f2:9a:fa:4e:f2:9e:d6:ce:88:04:9d:
4c:c3:3f:ea:83:ec:13:63:94:b0:56:53:55:0e:fe:
d5:1f:5b:e9:46:20:cb:e0:56:b2:cc:83:ec:76:06:
7e:33:78:0c:91:18:56:ff:a6:ef:8c:e6:24:48:f9:
53:f8:c1:09:ae:74:b2:25:2f:37:ab:5d:b3:a0:30:
27:47:ae:b1:62:f1:52:9f:13:6e:85:8d:67:0b:4f:
4d:13:a4:53:4c:79:c5:c4:7b:a1:5d:78:77:ab:68:
2a:41:62:7c:ff:3c:1e:4b:cc:bf:17:75:b5:a5:6b:
68:0b:19:d1:37:ec:91:b7:8b:64:7e:60:d5:66:dc:
ed:7a:cc:8f:a4:42:23:eb:ef:f4:87:16:24:0f:ba:
f0:85:87:0b:35:61:46:77:2d:d1:62:1b:08:4f:f8:
55:de:67:3f:09:ca:e2:42:b9:14:23:1d:de:00:7d:
0b:a4:8a:77:d3:7b:d9:17:0a:da:fe:a4:a6:3d:28:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5D:5C:6F:83:89:2D:57:F5:64:8A:0F:82:48:7E:11:80:E7:04:28
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/UV1cb4OJLVf1ZIoPgkh-EYDnBCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.4.0/22
Signature Algorithm: sha256WithRSAEncryption
12:b5:11:dc:4e:a6:f2:0c:51:56:86:c6:a8:f7:15:80:12:6a:
31:c3:e3:73:28:4d:49:60:64:6a:17:ec:27:8e:54:25:5a:ac:
d3:d2:9c:47:5f:d1:20:ab:0f:be:69:28:a9:5c:7e:ba:10:46:
80:54:fb:4a:dd:a4:99:bd:b7:5c:e7:65:e6:1f:ab:4a:71:eb:
ba:86:fa:0b:75:a1:7c:a3:bf:19:f6:e9:b0:59:8f:cd:fb:33:
c0:6f:7c:a3:01:0e:9f:35:27:58:e5:6a:66:43:40:d2:7b:9e:
35:0f:fb:1c:b3:22:37:ab:8a:82:c5:2a:29:71:55:2b:1c:1d:
f0:7b:c9:d6:97:7c:8a:44:b5:c1:81:c6:5b:3f:ff:e5:95:1b:
fb:9a:d0:93:6d:03:fa:18:f0:44:85:ab:2d:e4:e8:1f:50:c6:
90:b9:4e:48:0d:9f:66:3b:b1:dc:93:87:c6:71:51:ef:b9:db:
3e:82:1e:85:aa:32:a1:22:f1:4e:36:7b:5e:10:64:1c:6f:c2:
bf:82:8b:10:2a:81:cf:07:6c:5f:b0:b7:4a:b5:f6:83:e6:eb:
98:5d:94:10:d3:0b:6e:89:58:fb:20:61:5c:5d:8e:39:f2:e2:
c4:3b:5d:f0:eb:9d:a4:56:c1:22:de:08:0e:71:bc:8f:e2:0d:
67:06:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:45 2024 by rpki-client on console.sobornost.net