Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/ipJuK89-stjuPgSNyLgmE-Sy0HE.roa
File: ipJuK89-stjuPgSNyLgmE-Sy0HE.roa (raw, json)
Hash identifier: x6sm0Zllo62NqCm3+CRcHaJJ2sDLz+q7v55S5+9JtJg=
Subject key identifier: 8A:92:6E:2B:CF:7E:B2:D8:EE:3E:04:8D:C8:B8:26:13:E4:B2:D0:71
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0193D396E8E648DCAA4A2905FE55BCA6F659
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/ipJuK89-stjuPgSNyLgmE-Sy0HE.roa
Signing time: Tue 17 Dec 2024 07:48:22 +0000
ROA not before: Tue 17 Dec 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199584
IP address blocks: 185.61.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:96:e8:e6:48:dc:aa:4a:29:05:fe:55:bc:a6:f6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Dec 17 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a926e2bcf7eb2d8ee3e048dc8b82613e4b2d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:db:65:6d:30:47:cd:78:e5:8f:dd:cf:1c:
ff:14:b9:06:48:ca:c7:38:56:73:ee:fd:1e:1d:e6:
01:5e:d9:18:c7:fe:e7:67:c4:04:ea:69:39:51:4c:
3d:7b:15:c6:f4:cc:c9:97:bd:f3:89:bc:10:bd:69:
50:ea:2e:c6:37:5e:8a:ef:f4:0a:0e:86:5c:72:f2:
8d:82:c3:bb:ce:d3:fc:62:0d:61:52:e3:27:63:d9:
af:68:f8:84:87:07:b2:b5:8a:51:82:64:b3:c3:14:
1b:d1:c1:f3:eb:91:86:24:bf:10:16:14:18:1b:c7:
4a:62:1a:a0:af:39:02:f0:de:82:d5:f1:6c:62:44:
b9:35:37:0f:c5:c6:1c:1a:3c:e8:0e:19:74:15:27:
74:b5:7d:f5:5f:f1:79:8d:be:83:3f:38:c0:df:4d:
f0:3f:06:46:a4:e9:da:cf:30:05:af:2e:15:0c:f0:
4a:81:b2:f2:f9:76:cc:5f:99:74:b5:03:a6:5f:f2:
61:b0:04:8f:c3:81:92:55:e8:db:14:49:03:11:8f:
6e:e5:26:c9:de:d7:7d:20:b1:3c:b0:df:8c:e3:11:
fc:51:f3:aa:dc:60:c0:53:1a:4c:8d:db:52:c3:05:
37:d0:14:a0:9c:4b:25:ff:5b:e9:a8:99:d3:1c:4e:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:6E:2B:CF:7E:B2:D8:EE:3E:04:8D:C8:B8:26:13:E4:B2:D0:71
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/ipJuK89-stjuPgSNyLgmE-Sy0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.7.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0e:7e:6a:bf:13:01:de:4c:8e:f1:46:d8:cb:91:bc:2f:f6:
16:f2:fa:14:8b:1c:4b:93:fa:f0:08:16:83:cf:cb:72:4b:a1:
50:c6:fc:5a:65:aa:c4:6f:39:a1:b1:45:46:c6:30:4b:21:d9:
b8:8d:05:2d:de:e7:cb:9e:92:d1:fb:64:f7:97:97:2a:93:05:
6a:f8:00:1c:cf:6c:c5:19:07:04:dd:9f:eb:57:43:f6:6d:5d:
b8:27:68:db:7f:f1:a6:54:5e:1f:c5:98:af:29:e2:7c:dc:92:
15:09:8f:18:cb:be:eb:ee:67:24:48:c5:b4:14:d8:de:57:dd:
01:82:83:3b:47:05:71:99:a9:da:e7:9c:b0:d8:4f:78:2f:20:
6a:ba:f4:a1:99:c8:c4:d1:1b:89:11:e4:6f:7a:9a:27:fa:0b:
0b:e3:ce:1b:69:83:f1:dc:82:dd:83:1e:46:43:7f:d3:09:93:
a6:d4:61:0d:ce:e9:c9:5a:a4:0f:3f:62:17:17:a6:b3:e5:a7:
95:3c:d3:22:d8:35:15:68:aa:7d:ac:09:b3:7f:99:23:05:75:
d5:4a:5e:27:dc:3f:ac:aa:07:da:4c:60:69:a2:cf:99:c5:25:
6a:9b:f0:23:62:e1:51:bc:9a:54:33:eb:4e:e3:bd:dc:be:80:
a1:06:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:09 2024 by rpki-client on console.sobornost.net