Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/E8ubAzFBl-NwRL-LZL3SM6WLAKs.roa
File: E8ubAzFBl-NwRL-LZL3SM6WLAKs.roa (raw, json)
Hash identifier: IKz3APIUZHJXPrzeL5enxkHJ65HZgpIYp2Gq9o+X/No=
Subject key identifier: 13:CB:9B:03:31:41:97:E3:70:44:BF:8B:64:BD:D2:33:A5:8B:00:AB
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0193D1544C1932309666198E9AAE49A17924
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/E8ubAzFBl-NwRL-LZL3SM6WLAKs.roa
Signing time: Mon 16 Dec 2024 21:16:22 +0000
ROA not before: Mon 16 Dec 2024 21:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:54:4c:19:32:30:96:66:19:8e:9a:ae:49:a1:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 16 21:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13cb9b03314197e37044bf8b64bdd233a58b00ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:a2:f1:e2:8a:e9:a7:37:3d:15:23:88:2c:
f9:63:ac:32:1d:6d:f9:b8:ed:96:55:87:66:1f:94:
a7:ef:53:3f:ce:81:74:b4:f3:70:06:d6:f8:44:2f:
1b:c6:df:90:b2:54:04:ac:5b:a5:ec:2a:d9:04:e4:
2c:87:42:33:a2:75:a9:ec:6d:b2:b8:5a:00:cd:44:
ba:db:ff:aa:32:a2:2a:aa:a8:c4:ae:aa:0a:5e:98:
3d:9a:98:66:97:c0:4e:04:85:d5:cf:e2:0f:43:eb:
4d:7f:f0:fc:9b:3a:10:17:76:d0:7f:0d:d1:40:73:
08:83:4d:21:fb:b4:6a:ab:9d:bf:db:71:24:2a:81:
a5:76:7a:53:53:67:18:75:9d:db:37:1c:5c:df:eb:
84:78:7f:23:e3:b6:f7:4f:17:d1:8c:95:3b:af:65:
f9:05:28:58:31:9e:1e:0e:16:b3:54:c5:9a:6a:f1:
7c:f0:4c:23:26:86:e7:73:98:b4:76:15:07:b0:50:
63:d3:a6:cb:c4:b6:9f:2e:74:53:5c:0a:ae:13:50:
70:f8:bb:e4:bf:a2:b5:7e:f2:08:97:24:69:23:70:
93:a0:05:bb:ae:4b:a5:96:fa:34:d0:f9:14:47:f2:
cc:b2:51:60:29:9d:dd:b5:c9:8f:6d:b7:27:60:81:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:9B:03:31:41:97:E3:70:44:BF:8B:64:BD:D2:33:A5:8B:00:AB
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/E8ubAzFBl-NwRL-LZL3SM6WLAKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:79:8e:bd:cd:33:6a:79:93:36:0c:b9:5d:bc:a4:6a:10:30:
8d:1b:34:2f:d6:44:3a:57:57:f9:b7:99:74:f2:a5:ee:bc:2d:
d9:f6:8d:99:88:ea:f8:46:3d:8e:6d:4f:cc:68:92:50:bf:c6:
3d:24:c8:d3:10:ba:10:33:ee:cd:df:3c:5d:f3:ea:00:a3:fa:
e1:49:fe:af:a4:8a:3b:12:26:45:f0:3a:99:7c:8b:fc:51:13:
61:0d:3b:28:58:cd:e7:de:33:cb:c3:2a:b3:12:ed:fd:f1:5b:
10:90:2a:6c:46:91:02:30:ca:85:06:25:19:93:f8:ab:20:aa:
46:94:39:2e:23:c3:df:12:17:c3:21:c7:68:e9:1f:4b:9b:b2:
72:1d:0e:fe:ca:ea:08:67:88:c5:ac:88:6c:cb:85:68:8a:4b:
39:1a:8a:1b:21:31:cc:28:27:e1:5a:ea:ea:b2:ec:ee:27:b9:
d2:27:e3:26:aa:c7:07:dd:0a:79:00:23:9c:c1:18:f0:76:a1:
55:5e:c2:38:02:60:a0:16:a7:b0:76:7a:bd:9f:74:bf:52:ee:
ba:9c:f4:42:1d:5f:f6:a9:9e:ae:e9:bc:c5:f2:57:28:71:ad:
f7:ee:98:4b:41:f6:b9:9c:0d:a3:33:8f:6c:53:3e:d1:0a:71:
d1:59:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:53 2024 by rpki-client on console.sobornost.net