Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/SaTf06ov50pZCQof-trOTpdW8_0.roa
File: SaTf06ov50pZCQof-trOTpdW8_0.roa (raw, json)
Hash identifier: DW4IsBJ7cTnBqZDC/YWOqQb9rjrP+C+YPzn1lx11/DM=
Subject key identifier: 49:A4:DF:D3:AA:2F:E7:4A:59:09:0A:1F:FA:DA:CE:4E:97:56:F3:FD
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0192B417946C93B11BDC174D1D1EBD257572
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/SaTf06ov50pZCQof-trOTpdW8_0.roa
Signing time: Tue 22 Oct 2024 11:58:17 +0000
ROA not before: Tue 22 Oct 2024 11:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214297
IP address blocks: 185.241.72.0/24 maxlen: 24
185.241.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:17:94:6c:93:b1:1b:dc:17:4d:1d:1e:bd:25:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Oct 22 11:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49a4dfd3aa2fe74a59090a1ffadace4e9756f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:85:18:5a:a8:2d:3e:7e:ab:ea:7b:61:61:
36:46:c6:0d:bf:f5:ad:6c:85:9c:f7:13:79:de:c1:
f9:42:44:de:a6:4d:a2:4a:0c:c6:83:7b:0b:13:07:
c9:bf:2e:1c:3c:0d:95:de:a8:89:28:c4:2c:ae:c3:
84:e6:fe:0e:de:56:e6:25:0d:c9:1a:63:b4:65:60:
44:68:0e:1d:e4:74:33:cd:6f:d0:1a:c2:bb:57:bc:
63:90:fa:44:b4:6d:48:16:75:b4:f7:5f:d1:b7:fa:
63:92:15:60:97:6a:f6:ba:bb:00:11:3d:aa:40:2b:
7e:62:b0:61:8b:d7:c4:20:b5:dd:f0:e7:c0:6a:da:
71:28:94:80:0c:b8:73:30:38:8a:30:3c:4d:e4:05:
7e:ee:b1:ef:14:74:5a:c9:83:12:bc:2b:9a:41:10:
5c:23:09:ae:33:44:94:cd:fb:15:66:ad:80:06:ef:
ba:32:a1:42:b1:bc:ab:58:ea:3e:59:ad:73:d8:dc:
11:bb:33:41:05:83:5f:bc:1c:da:81:6e:ee:b9:7e:
41:d8:84:f0:06:ef:63:83:46:8e:07:f1:61:4c:f5:
01:4f:59:0d:61:de:04:f9:75:b3:8e:7d:bc:9a:fe:
96:15:69:13:ac:8f:b3:c2:f9:ac:7e:10:9c:f9:bd:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:DF:D3:AA:2F:E7:4A:59:09:0A:1F:FA:DA:CE:4E:97:56:F3:FD
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/SaTf06ov50pZCQof-trOTpdW8_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.72.0/23
Signature Algorithm: sha256WithRSAEncryption
16:2e:17:09:82:59:69:72:90:19:11:76:7c:3b:6b:50:78:96:
3f:2c:37:7c:f6:75:6d:41:67:ff:9e:cc:72:a9:bd:7e:21:96:
5c:a5:9b:64:31:83:d4:d7:bd:1d:cf:61:28:82:b3:6c:e4:2b:
66:ed:e8:73:dd:8b:73:82:7c:44:2b:9d:70:da:c3:fb:ee:f8:
0d:68:8a:14:86:90:96:77:e1:f5:bd:50:04:bd:49:0c:fa:00:
69:2a:39:76:c6:76:ed:9d:61:2a:67:7a:c2:83:eb:4f:1c:ce:
9b:a5:a1:24:9d:c8:f7:90:d0:1c:06:81:c2:02:a9:c4:e2:ee:
f1:9d:86:96:8e:6c:37:28:85:ef:c7:a4:18:17:eb:6c:68:ef:
33:4b:59:61:07:4c:54:98:b6:49:55:44:f8:77:6a:4b:fa:22:
49:ea:3c:56:22:71:b3:4e:1d:a1:86:f6:14:10:52:c8:14:3c:
37:0d:bc:d0:ab:10:10:6c:f5:01:5a:2f:04:8e:ae:25:7c:f1:
ac:49:d5:2a:1f:2c:b3:40:5b:91:c8:a7:2e:3c:7e:11:84:4c:
a4:de:3f:14:c4:fb:30:36:60:c8:3d:b7:f7:32:f5:5c:ac:a9:
49:0b:b4:69:21:7c:5b:76:3a:02:d7:dc:03:4d:a2:bd:46:0d:
8b:c9:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:46 2024 by rpki-client on console.sobornost.net