Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2bTTF9ZQRM30OX52baBzVG70ZAE.roa
File: 2bTTF9ZQRM30OX52baBzVG70ZAE.roa (raw, json)
Hash identifier: 7QwwSEvF1OWCVMCj6NBbw8jZAz48RklyApsrEW+dQ00=
Subject key identifier: D9:B4:D3:17:D6:50:44:CD:F4:39:7E:76:6D:A0:73:54:6E:F4:64:01
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01904B4F6D6BE5892C0A6599C3359F6C1A15
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2bTTF9ZQRM30OX52baBzVG70ZAE.roa
Signing time: Mon 24 Jun 2024 17:33:34 +0000
ROA not before: Mon 24 Jun 2024 17:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201525
IP address blocks: 5.149.252.0/23 maxlen: 23
79.141.166.0/23 maxlen: 23
2a01:8640:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:4f:6d:6b:e5:89:2c:0a:65:99:c3:35:9f:6c:1a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jun 24 17:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9b4d317d65044cdf4397e766da073546ef46401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:68:70:d8:3a:94:90:ce:2a:a9:0c:60:4d:
81:5e:03:9c:b6:de:74:b6:05:36:9d:0d:73:99:39:
5c:20:95:86:58:d8:de:0c:61:42:de:8d:63:f9:13:
4f:fa:3e:de:88:ce:87:49:73:b6:4c:e3:59:f6:9a:
75:55:6e:c9:c3:f5:1d:75:cd:a3:65:b2:11:8b:4b:
38:2b:47:f1:6d:e3:05:49:87:b1:06:48:b3:1d:97:
b3:5e:8c:12:4a:49:31:7f:e4:47:06:00:23:fa:26:
22:dc:4f:de:0f:2c:ae:f8:d8:ea:a9:9e:02:bf:ac:
3f:b7:55:0d:fc:69:47:2d:97:cf:5e:b1:49:9d:8d:
24:15:81:f4:06:03:86:9f:51:d1:3a:3a:de:7f:95:
d8:ed:35:d6:fa:ec:3b:f1:a5:56:f8:04:52:40:24:
fa:fe:aa:12:92:9d:54:46:de:f1:50:52:32:13:ba:
79:d5:43:7e:0c:af:20:d3:97:8c:c7:1f:26:59:1f:
38:7c:e6:75:e2:c0:2b:82:02:45:a3:49:03:a0:a0:
7c:4b:07:b6:54:d9:94:ab:0f:58:97:bf:01:ff:2c:
b1:a0:f8:0e:da:d9:e0:e6:18:ab:5f:e9:7b:9c:cb:
a0:9a:88:39:b5:45:a0:d4:63:24:4f:a8:80:90:76:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:D3:17:D6:50:44:CD:F4:39:7E:76:6D:A0:73:54:6E:F4:64:01
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2bTTF9ZQRM30OX52baBzVG70ZAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.252.0/23
79.141.166.0/23
IPv6:
2a01:8640:3::/48
Signature Algorithm: sha256WithRSAEncryption
39:88:7b:68:b8:3f:fe:bf:dd:1f:da:40:a8:a2:a4:12:b6:5a:
f5:34:3a:e8:95:19:a0:c5:b3:40:6a:5f:95:ff:85:25:cc:32:
74:ad:2f:b9:c4:0b:5d:c3:17:c6:95:b5:15:0f:7c:91:7a:c4:
29:91:80:e9:e0:09:06:8c:36:53:98:59:43:96:e0:84:38:c7:
77:2b:77:c3:33:63:11:9e:33:4f:f7:99:a6:93:d9:10:99:b0:
24:21:41:ba:d9:14:40:b7:a3:16:94:ae:ff:7f:06:4a:26:73:
2f:a5:ac:b6:4f:a0:7c:9a:b5:0e:8d:e2:92:10:b1:5a:cd:7d:
ec:32:a4:c6:60:fd:9c:48:2e:64:b3:24:24:08:f5:0d:7a:52:
39:98:81:b8:fc:08:54:3d:9c:65:f8:10:32:f1:ae:bb:27:b4:
e6:36:9d:b8:21:dd:1f:5e:92:49:e7:ce:60:17:68:78:49:15:
b2:b6:5a:fa:3d:f6:2f:3e:30:38:8b:e1:74:44:b1:45:09:89:
d6:3e:31:84:b8:e8:2b:07:eb:8d:3a:ec:b0:e1:d1:4c:fc:47:
67:3f:4a:6d:32:d0:7f:4c:d4:2c:2b:23:a8:9f:19:35:10:49:
63:b1:91:99:92:af:7c:04:83:9c:75:10:54:88:23:d7:0e:c0:
38:f9:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:46 2024 by rpki-client on console.sobornost.net