Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/9M39Xb-8ThigYZIm_tqkRDwahWc.roa
File: 9M39Xb-8ThigYZIm_tqkRDwahWc.roa (raw, json)
Hash identifier: 3fs18ScNqKsWMTn2O7uIv8pCYBOEW98a5mkkgi+angs=
Subject key identifier: F4:CD:FD:5D:BF:BC:4E:18:A0:61:92:26:FE:DA:A4:44:3C:1A:85:67
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 01931A555A53FDDBDE3EB9A915A09159A29C
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/9M39Xb-8ThigYZIm_tqkRDwahWc.roa
Signing time: Mon 11 Nov 2024 08:27:01 +0000
ROA not before: Mon 11 Nov 2024 08:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216046
IP address blocks: 77.247.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:55:5a:53:fd:db:de:3e:b9:a9:15:a0:91:59:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Nov 11 08:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4cdfd5dbfbc4e18a0619226fedaa4443c1a8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:94:78:4e:a8:0d:74:5c:f8:3c:c3:7f:6d:
5d:cd:f1:fe:8e:3e:8c:04:15:cb:65:75:97:45:99:
8a:4b:4f:a4:df:36:fc:a2:1c:1f:96:fd:ed:0a:7d:
a9:3d:be:ed:11:2a:f8:3f:7d:62:33:87:09:6e:f4:
c9:18:96:7e:cb:1b:76:ae:5b:48:85:05:32:00:ff:
74:8a:e6:91:09:ba:00:0f:fd:5a:76:97:d7:a9:20:
f8:fd:32:82:70:5c:f8:f0:08:6b:1b:67:df:d1:8a:
0f:10:8b:c5:9f:72:f7:ee:47:56:ee:e1:93:23:97:
90:3d:36:c5:11:af:46:a3:3f:34:af:43:cc:67:35:
5d:4e:4a:e7:04:d8:c5:92:e7:d0:1b:e4:25:b5:3a:
e6:73:f5:ae:9e:84:e5:c9:31:a4:23:79:6b:72:15:
6f:a6:ea:78:de:d9:1d:64:c8:c8:6d:af:0a:e6:99:
21:b7:8c:d9:38:d1:29:2f:88:34:e2:9f:da:60:74:
28:f5:1c:01:5c:cf:11:a0:27:fc:7b:14:56:56:b5:
61:e3:ed:0d:3a:ab:47:8d:f1:f9:45:9c:9f:59:a0:
2e:49:a3:87:85:8c:a6:c0:70:65:79:2c:58:a2:13:
7b:a0:c6:c9:08:d0:58:a3:10:f8:31:db:f9:fe:c0:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:FD:5D:BF:BC:4E:18:A0:61:92:26:FE:DA:A4:44:3C:1A:85:67
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/9M39Xb-8ThigYZIm_tqkRDwahWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:30:bc:35:e2:4e:a7:15:22:b1:8e:91:68:a1:bb:7c:65:1c:
c3:df:5f:89:af:58:af:b5:ce:b9:31:f3:ce:0f:d0:a3:56:53:
10:5e:01:f0:33:5a:8e:33:d9:2e:eb:1f:36:b1:03:06:e0:68:
94:4f:5e:56:02:d7:df:a1:99:c1:28:69:b3:0d:ba:85:5e:a9:
51:75:45:0b:c7:7e:05:39:ae:1d:11:ce:72:51:4e:bc:68:08:
b1:7b:f4:e4:f5:c1:8a:55:b6:f3:87:18:c3:99:16:ab:ad:6c:
d0:78:40:e2:07:05:eb:a5:c1:9e:63:18:1c:fe:e6:15:a8:ab:
2d:93:84:fe:de:d2:2d:ec:6c:55:fd:c1:49:f2:9e:d8:1d:b4:
e0:7d:29:b1:13:5d:89:45:d1:7a:97:f7:ea:d9:df:58:61:05:
ac:99:5b:7f:1a:57:82:23:b6:ae:cb:86:37:89:4f:d9:30:95:
dd:3d:85:05:90:5c:b6:53:7f:c1:7b:54:49:3a:42:a0:37:7a:
c8:5c:04:fe:f0:56:c4:8c:f2:d6:49:17:98:39:31:e5:4a:85:
81:a9:14:5f:a1:a7:d8:5e:4d:df:c6:14:0b:e7:21:fe:8d:0c:
c3:08:2c:26:75:45:d6:58:b0:15:c8:50:2f:e3:02:94:61:9d:
7d:08:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:54 2024 by rpki-client on console.sobornost.net