Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7axHnL9mi3nx1VpliLXd8B0Znhk.roa
File: 7axHnL9mi3nx1VpliLXd8B0Znhk.roa (raw, json)
Hash identifier: sjvFlyS97J1z2QbiuQe1k3hJpEJE44YdM/PSa5DbSPM=
Subject key identifier: ED:AC:47:9C:BF:66:8B:79:F1:D5:5A:65:88:B5:DD:F0:1D:19:9E:19
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019295019423287C5C1D91FC38DF6199689E
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7axHnL9mi3nx1VpliLXd8B0Znhk.roa
Signing time: Wed 16 Oct 2024 11:06:01 +0000
ROA not before: Wed 16 Oct 2024 11:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197324
IP address blocks: 46.17.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:01:94:23:28:7c:5c:1d:91:fc:38:df:61:99:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Oct 16 11:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edac479cbf668b79f1d55a6588b5ddf01d199e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:1e:ea:2d:79:67:00:e5:07:66:49:e4:c7:
9b:16:ad:db:32:13:96:b1:1b:bb:f7:54:2a:51:98:
8d:12:0f:ad:87:ed:4a:66:b8:cc:63:f8:c4:11:91:
3a:34:52:81:f1:b8:73:2d:7e:df:af:1d:7f:e0:3b:
8f:91:94:7f:81:e7:f7:ef:6e:e0:1d:13:8d:5f:30:
bf:96:fa:96:3d:65:0c:f4:32:00:8c:5f:f3:b8:98:
1a:4d:93:b5:35:a2:0e:0b:6b:62:38:88:59:aa:de:
f1:7a:38:c2:77:d6:05:48:8a:ff:e1:31:06:06:09:
0d:2b:20:58:f7:98:9e:47:f0:18:5c:07:b2:f3:03:
c9:f3:69:21:b2:7b:00:6f:fb:63:fc:25:b7:ef:ed:
60:e2:33:16:56:c6:e6:49:1e:c0:bb:cc:3f:2c:a8:
3f:ec:b9:2a:50:fa:1b:0b:55:d2:82:c7:e5:51:a9:
27:5e:03:6c:e5:c7:93:08:37:44:e2:b8:ec:91:03:
de:a9:33:5e:86:3b:3c:5e:68:e8:02:f8:f5:00:bd:
1c:a4:31:de:f8:e4:be:32:ab:34:16:7c:83:9e:48:
31:89:a9:66:d8:64:5e:2a:2c:14:77:87:00:76:dd:
90:98:76:81:06:02:44:16:4c:d3:09:46:bc:7c:17:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:47:9C:BF:66:8B:79:F1:D5:5A:65:88:B5:DD:F0:1D:19:9E:19
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7axHnL9mi3nx1VpliLXd8B0Znhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.120.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f2:e5:54:19:c0:1f:e3:db:46:0e:67:da:56:ef:64:ec:2d:
f5:8a:1d:80:6f:67:9f:a0:e9:2c:77:90:5f:16:a6:a2:c3:58:
0a:53:8f:7e:0a:45:33:40:93:e8:5c:20:df:63:f2:eb:5d:d2:
b2:2f:50:89:6c:d6:92:c9:e6:c8:04:f0:17:6a:dc:85:f8:75:
eb:e0:60:f3:c3:e0:17:d0:b0:f2:94:37:22:b0:54:36:85:e3:
53:4b:c9:d9:af:e4:a6:6d:86:42:c5:25:75:7b:2d:53:1c:eb:
58:6f:0a:35:28:fe:e3:95:80:d0:39:2d:85:fc:c5:44:49:52:
49:0f:da:7d:c3:f7:27:3c:a6:ed:c8:80:60:b3:b0:5f:a1:06:
b9:48:11:96:57:48:78:a2:27:a3:df:78:e9:55:fb:59:f3:d6:
0b:a2:92:6d:d4:13:d9:97:ba:da:d3:4a:49:4d:85:b6:76:ea:
e6:0e:d4:f8:4a:74:bc:6f:b2:75:5d:04:5c:c2:7c:62:17:a6:
1a:93:c2:9f:54:fd:07:9a:da:b2:74:c9:85:6f:22:ef:73:f4:
9b:d2:8d:83:6b:06:5a:8e:a7:4b:58:9b:c4:21:1c:7e:4a:f6:
92:e1:88:92:33:fa:5b:79:87:b5:61:1a:3c:c3:70:46:a8:ff:
76:3b:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:32 2024 by rpki-client on console.sobornost.net