Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/V-25e7Gnp3mMmLP2lM7fcOz6cxo.roa
File: V-25e7Gnp3mMmLP2lM7fcOz6cxo.roa (raw, json)
Hash identifier: gacNV5KeejIgaWlEUNM7YJE2h7AJ0vKwSiBkiFcmdbQ=
Subject key identifier: 57:ED:B9:7B:B1:A7:A7:79:8C:98:B3:F6:94:CE:DF:70:EC:FA:73:1A
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 0192AE3EB0B618D4BEDB7BE928079C90CE72
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/V-25e7Gnp3mMmLP2lM7fcOz6cxo.roa
Signing time: Mon 21 Oct 2024 08:43:16 +0000
ROA not before: Mon 21 Oct 2024 08:43:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13647
IP address blocks: 2a00:bc80::/32 maxlen: 32
2a0d:4240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:3e:b0:b6:18:d4:be:db:7b:e9:28:07:9c:90:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Oct 21 08:43:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57edb97bb1a7a7798c98b3f694cedf70ecfa731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:d3:77:c8:91:84:30:fd:bd:30:0b:d4:18:
06:1f:e9:be:c0:90:21:fe:a3:d6:5c:a7:ed:a4:ae:
1a:60:0e:ea:14:76:2d:01:85:db:50:86:95:a0:8d:
c3:c6:73:b9:9b:d6:94:6a:77:2c:f9:7a:05:89:b0:
8f:6c:e7:93:6e:a9:72:f3:d4:63:47:ba:1b:ee:1e:
fa:78:d1:ab:d4:38:2f:78:cb:81:9f:58:27:b2:f4:
c9:25:19:7c:a5:45:21:c0:b5:d0:38:61:d0:14:3e:
6d:e4:cb:b4:6c:53:5b:02:9a:ab:38:11:5e:32:87:
ec:bc:bc:98:43:f2:77:47:7a:08:b6:49:09:36:b7:
65:ad:38:43:4a:4b:32:1e:0d:19:44:e9:01:00:f1:
51:2a:e5:25:0e:eb:c6:a0:c5:c2:bf:df:4c:cd:9c:
20:22:87:7d:8b:51:dc:d0:63:a0:bd:e4:9f:26:fe:
f2:da:87:05:44:6d:de:84:cb:15:a2:35:ae:77:11:
59:c5:46:a7:13:5e:d9:6c:d0:0e:56:c0:18:84:ee:
bb:12:3a:b5:e8:12:13:34:57:95:18:12:55:30:24:
c1:01:6c:12:04:f0:05:77:fd:d3:3e:e5:c5:ce:69:
b1:61:ac:98:54:18:89:e1:29:ad:8f:e5:81:19:ab:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:B9:7B:B1:A7:A7:79:8C:98:B3:F6:94:CE:DF:70:EC:FA:73:1A
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/V-25e7Gnp3mMmLP2lM7fcOz6cxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:bc80::/32
2a0d:4240::/29
Signature Algorithm: sha256WithRSAEncryption
3d:a8:35:d6:e3:7b:c0:48:77:a9:81:27:12:44:40:a0:d6:d7:
2e:f6:0f:c8:cc:2a:ea:aa:f9:89:0f:48:13:64:6a:c0:fc:3d:
5d:ef:d5:ad:fa:03:9a:75:5b:a6:e8:51:73:bd:34:50:3a:56:
cd:13:30:27:73:94:e4:a2:ca:5e:3f:c7:d5:a5:9a:49:dd:a8:
08:ef:d2:8e:6b:7c:57:f5:49:03:09:28:a8:c6:d9:71:07:4c:
c2:45:bf:39:4c:9f:1f:eb:93:3c:ab:1a:7f:d1:49:cc:36:fe:
9a:a3:c6:fa:73:92:ab:f0:56:f4:a1:42:77:9d:4c:2b:9f:bc:
cb:2a:7d:30:2b:7d:db:49:73:47:2f:93:8f:b7:7b:37:6b:01:
cf:25:be:6a:76:78:05:e7:6e:52:ea:cc:ea:30:52:5f:b8:4c:
2f:c1:5b:fc:7a:c6:74:46:32:74:28:69:76:fc:13:52:d4:e6:
07:93:f6:7e:1d:6b:c4:cc:f6:56:d8:7c:ee:d6:dd:b0:d6:47:
b7:f3:f0:cf:fa:3a:90:1a:96:59:1f:6c:e4:50:b1:22:ed:95:
e1:06:53:4a:f5:93:f6:c7:ab:0b:65:01:63:bf:fc:a6:d7:63:
24:ab:5b:7d:0c:ec:6b:98:34:89:99:31:ba:20:a1:81:02:d3:
4a:29:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:11 2024 by rpki-client on console.sobornost.net