Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/1tKAYi3R2AgeCzuJUaDn2stc8Ho.roa
File: 1tKAYi3R2AgeCzuJUaDn2stc8Ho.roa (raw, json)
Hash identifier: vCro+YbaNGx0nciSdEdX+8IceCk6cHtfZ7P5EQzi5XI=
Subject key identifier: D6:D2:80:62:2D:D1:D8:08:1E:0B:3B:89:51:A0:E7:DA:CB:5C:F0:7A
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 018CC86F156FBB36961D3C40F05B02B25F24
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/1tKAYi3R2AgeCzuJUaDn2stc8Ho.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50000
IP address blocks: 185.135.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:15:6f:bb:36:96:1d:3c:40:f0:5b:02:b2:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d280622dd1d8081e0b3b8951a0e7dacb5cf07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:22:2d:42:fa:c3:ef:50:3d:a1:30:6f:5d:
9b:76:43:7b:d1:9c:5b:e1:3a:22:5f:e3:d9:8d:3c:
25:64:06:ff:56:64:9a:22:5e:f6:c5:00:e7:a6:f1:
93:b3:1f:d5:4a:16:58:3b:95:5c:bd:f1:5d:ef:63:
19:f4:1a:e8:ff:48:0b:19:36:ae:5f:e3:99:ca:08:
1a:42:40:df:57:2e:72:21:27:a6:ca:1d:67:ac:af:
cd:7f:a5:c4:ff:b9:dc:5c:e1:33:f4:d5:50:ed:21:
9f:b2:3e:92:74:b4:b7:22:10:57:ac:e4:55:3c:e8:
44:4f:d4:b9:d4:ad:bb:32:d6:2b:01:e9:2d:2f:66:
13:c3:53:74:f4:38:a8:59:d0:09:52:1c:60:d2:53:
96:92:5e:eb:c6:57:a9:22:e3:11:6e:3e:29:b6:44:
e4:65:d4:ec:00:84:f6:d7:ed:f5:d7:e6:a7:e9:5b:
2c:2e:06:a1:1a:68:2b:43:59:49:7d:3e:5f:1f:5d:
8e:12:9f:7e:05:c0:1d:4d:f1:c6:3b:93:0d:47:f9:
f1:a9:33:0c:39:d9:14:67:b7:35:77:00:55:dc:c4:
52:50:00:24:4b:67:0d:ec:d0:96:1e:5b:54:28:79:
66:28:85:22:ac:20:8a:fc:42:26:59:a3:35:76:bf:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:80:62:2D:D1:D8:08:1E:0B:3B:89:51:A0:E7:DA:CB:5C:F0:7A
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/1tKAYi3R2AgeCzuJUaDn2stc8Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:26:6a:4a:70:71:fb:24:f8:43:63:05:67:3c:14:ce:0a:be:
73:68:84:a6:30:5d:79:ea:2e:ac:4f:38:38:b9:3c:76:f2:64:
c4:76:ef:6f:d2:6d:cd:d4:db:5a:84:96:73:11:9f:79:1e:fa:
4f:64:9c:3a:f0:7b:c7:3a:ef:f3:4e:5e:dd:0b:ac:68:bd:ec:
f4:d7:41:59:d2:9e:48:72:49:d4:72:e7:a1:2d:9c:58:e6:a7:
45:08:04:3b:ef:6f:e0:87:06:77:65:64:72:22:14:d6:f0:02:
79:4e:87:25:ce:4c:e3:d5:a6:0b:40:81:12:2b:5f:4a:6a:cf:
8f:7d:fd:1d:d7:cd:29:6e:3c:f3:61:d1:5d:64:82:06:5c:f1:
cf:10:ee:85:96:52:43:3c:3e:06:a5:db:f1:a3:b1:8e:de:c3:
a4:2e:f3:6a:82:39:b6:4b:a8:df:54:b8:48:a8:33:bb:91:f3:
52:a1:eb:e5:3e:93:95:0a:24:ef:97:14:45:ca:9f:cf:f7:7c:
d8:56:01:43:f6:9f:fc:1e:a5:99:1f:dd:3e:e7:1c:50:36:40:
97:53:44:0f:ae:fa:28:4d:2f:3f:d7:32:db:27:75:eb:9f:89:
f8:fd:b6:89:73:11:3f:e7:ae:f0:4c:fa:12:db:8f:5e:f7:b1:
cf:10:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:58 2024 by rpki-client on console.sobornost.net