Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/_1R86Nq_agHIL8221DDeddASk1k.roa
File: _1R86Nq_agHIL8221DDeddASk1k.roa (raw, json)
Hash identifier: 86STEZG9mYTcDAPUH7iAy+pI98Hhs7Geiw0//DDEgK4=
Subject key identifier: FF:54:7C:E8:DA:BF:6A:01:C8:2F:CD:B6:D4:30:DE:75:D0:12:93:59
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0193F012210E39A89B3E0C3CBEF2237C51F8
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/_1R86Nq_agHIL8221DDeddASk1k.roa
Signing time: Sun 22 Dec 2024 20:32:20 +0000
ROA not before: Sun 22 Dec 2024 20:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50898
IP address blocks: 46.254.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:12:21:0e:39:a8:9b:3e:0c:3c:be:f2:23:7c:51:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Dec 22 20:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff547ce8dabf6a01c82fcdb6d430de75d0129359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:33:a7:04:d8:ed:21:fb:da:99:74:b2:8e:
b0:51:f6:33:b1:f5:d9:60:96:13:2b:8e:6b:f8:57:
1e:77:aa:50:9c:63:e3:53:8a:23:ac:29:5c:22:e2:
d5:a4:77:93:3b:5a:72:5b:65:16:5c:46:77:75:11:
ad:d2:c1:d4:5b:d7:a6:59:63:1e:b2:ed:53:62:9b:
d2:54:ed:7a:b9:3e:40:bc:7b:5f:b6:ec:38:1d:28:
21:87:44:92:d2:6c:3a:a5:e4:fa:86:4e:9a:a8:90:
f9:24:56:98:88:3c:79:5e:25:e3:60:08:5f:eb:d4:
4b:18:96:19:c2:85:d7:d0:35:d4:06:ff:a5:f2:2f:
be:ec:12:85:97:9a:9b:15:51:c8:06:d1:83:08:6d:
ed:d9:63:2e:b6:8c:1f:34:ad:57:f0:59:66:be:86:
7e:53:d8:32:cc:0a:ff:40:c0:6f:20:4b:3d:31:15:
63:d3:e0:1a:4c:ec:c4:30:b4:70:eb:ce:fc:96:39:
12:da:77:1d:cc:4f:f0:7a:96:86:69:dd:fb:ca:f9:
93:c8:6e:69:38:18:30:8e:81:91:b3:4b:c0:f3:60:
20:06:1e:63:5d:8a:e0:a8:67:a0:ab:5d:c1:4f:ae:
99:b0:2a:8c:26:c8:45:5c:5b:6b:d8:c6:e7:66:99:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:7C:E8:DA:BF:6A:01:C8:2F:CD:B6:D4:30:DE:75:D0:12:93:59
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/_1R86Nq_agHIL8221DDeddASk1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.78.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c1:7d:f4:2b:3b:74:2e:37:e1:2b:ba:09:29:ea:29:6b:ee:
36:2f:fa:45:1f:9c:49:32:a0:34:69:64:40:26:1d:3f:7a:81:
a0:71:cf:13:8c:91:86:50:28:5f:36:74:ff:e4:e4:fc:c3:fa:
87:76:0d:ed:10:1d:f3:6c:69:5e:0d:ec:e8:82:6a:62:33:6c:
67:5c:f0:e3:a3:7d:20:88:56:9e:f5:0a:af:18:7f:91:14:ab:
33:38:57:f6:7a:ee:7c:bb:bb:d7:61:9c:93:b3:49:37:49:be:
90:04:8a:3c:12:ea:00:11:1d:26:c0:27:8c:60:16:c1:71:5e:
d4:05:8a:60:91:18:36:5d:54:05:d1:66:bc:b2:0c:f1:33:a9:
05:22:ec:dd:49:e6:28:10:62:08:9d:3e:8d:78:13:66:9a:cb:
bc:33:ed:3e:21:bb:5b:f3:7d:0e:a9:d7:b4:e2:d9:f3:18:11:
fc:bf:53:c6:85:c7:c5:41:5d:d0:9f:af:28:b6:6f:de:23:88:
d5:ba:2e:df:92:83:4a:c6:b8:66:ad:ca:8b:ae:16:db:bd:b1:
c3:04:70:d7:fe:ee:1a:67:ac:bc:eb:2e:2c:fb:b1:92:15:89:
d6:5f:9a:88:5c:ee:5e:f6:9b:11:6f:aa:61:e4:b4:2a:02:2e:
70:88:b5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net