Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/_8fqZWhuWabrywBt-KYS5PLtCJs.roa
File: _8fqZWhuWabrywBt-KYS5PLtCJs.roa (raw, json)
Hash identifier: CrFQ7RkEUYkxcZgJSrZr8/jFWB18HH4ILsrk1Kx0smQ=
Subject key identifier: FF:C7:EA:65:68:6E:59:A6:EB:CB:00:6D:F8:A6:12:E4:F2:ED:08:9B
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 018CC500F3CA8AD9619C425AC3519F835C1E
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/_8fqZWhuWabrywBt-KYS5PLtCJs.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29015
IP address blocks: 195.245.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f3:ca:8a:d9:61:9c:42:5a:c3:51:9f:83:5c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffc7ea65686e59a6ebcb006df8a612e4f2ed089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:c7:f0:c9:83:41:e9:21:95:5f:1c:5a:c1:
b4:e3:89:66:88:ca:ed:b0:a7:cb:f1:2a:b6:3f:8e:
41:c2:9d:b1:71:3e:a6:08:85:f2:e1:f0:7e:a7:01:
7b:25:7d:62:49:03:69:5c:35:f5:d4:af:bd:3c:59:
84:b2:e1:61:12:41:93:e6:9b:04:0b:98:14:20:b3:
a8:5f:90:ae:ca:f4:ec:d9:ad:78:c7:1f:20:02:d3:
8c:5a:ab:14:47:1b:2f:ab:e9:d1:1a:47:df:15:68:
55:0f:0d:2a:11:fa:3a:6f:9c:f7:32:b4:89:67:a5:
2b:6e:61:68:9e:17:cf:92:9e:a1:50:25:38:00:bf:
0e:61:74:91:f2:e4:6d:9b:ba:3b:9a:89:d6:fe:60:
9f:46:e0:70:73:f9:c7:d9:14:08:1b:3c:fa:05:4f:
04:0e:a7:e8:5a:a5:1d:c5:9f:35:bb:55:32:91:f3:
45:da:a3:ea:0f:39:9f:99:b3:d6:be:3b:61:4b:0c:
e4:7c:8b:4a:7a:68:38:9c:19:f1:bc:0e:34:3b:31:
f9:09:6f:f7:ae:ad:1a:a6:7a:09:9c:1a:09:3a:ef:
c2:e8:26:49:2d:dd:af:f4:03:9b:18:cd:7d:ef:a3:
92:1a:92:0e:51:a9:1b:e0:3b:c0:3e:f8:f2:14:69:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:EA:65:68:6E:59:A6:EB:CB:00:6D:F8:A6:12:E4:F2:ED:08:9B
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/_8fqZWhuWabrywBt-KYS5PLtCJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:52:37:61:7f:f6:f9:fb:6b:ce:0a:ed:69:f1:df:bb:ab:0e:
d7:52:5b:70:fc:56:01:a1:ba:30:92:c5:d0:5a:a2:bc:59:dc:
b6:b4:b0:77:35:31:c0:5b:73:29:f9:0c:02:fe:41:90:93:dc:
df:c4:cf:e4:d6:37:76:00:95:4b:6c:d9:77:3f:d5:88:b3:dd:
f8:35:58:6e:a7:9a:a6:c3:bd:d5:01:7e:8b:13:67:1d:36:00:
10:4a:65:ce:54:af:8c:63:21:89:38:5d:df:e1:db:93:c4:04:
61:13:b7:78:da:72:5a:6d:97:0f:53:07:22:cc:c6:a3:52:91:
06:b7:f9:df:b5:81:df:2a:e6:10:4f:dc:e0:ae:b0:be:2e:9c:
cf:66:5a:1d:41:38:c8:86:ce:df:ef:3c:9d:6f:c2:9e:33:37:
4e:bf:05:32:2d:3a:cc:c9:82:6e:75:69:14:30:9f:40:24:b4:
9d:af:41:0f:b1:87:de:01:de:ca:a0:2a:0e:22:94:0d:5d:dd:
7b:a4:00:d2:94:84:fa:e4:0f:0b:af:12:19:9d:b9:0a:3e:17:
3b:f6:02:ad:72:a2:c5:dd:76:ee:71:06:cf:d5:11:ec:20:b2:
b2:42:a2:0c:e4:ef:82:ef:40:cb:f0:f6:ad:79:a3:7d:00:c8:
e6:47:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:45 2024 by rpki-client on console.sobornost.net