Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/35V84Mo6Q2LWgZRKmR8pWPSkDkg.roa
File: 35V84Mo6Q2LWgZRKmR8pWPSkDkg.roa (raw, json)
Hash identifier: 8YcDcfGXMGcbJ0aTZetVKqvEv+0Ble1hgBdLBx/RiPs=
Subject key identifier: DF:95:7C:E0:CA:3A:43:62:D6:81:94:4A:99:1F:29:58:F4:A4:0E:48
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0193B1FE70BB682EBE3C8B91D39DA7E78765
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/35V84Mo6Q2LWgZRKmR8pWPSkDkg.roa
Signing time: Tue 10 Dec 2024 19:14:22 +0000
ROA not before: Tue 10 Dec 2024 19:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:fe:70:bb:68:2e:be:3c:8b:91:d3:9d:a7:e7:87:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 10 19:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df957ce0ca3a4362d681944a991f2958f4a40e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:6c:30:dd:93:00:be:6c:fe:cb:7a:d2:0c:
14:ff:86:c1:44:d5:0f:a9:0e:d7:31:a2:0a:85:aa:
48:d0:76:24:9c:1a:19:1d:1a:ce:08:b8:38:ce:e2:
24:a1:c2:83:09:88:bb:fa:2b:13:89:0d:f4:ec:6a:
47:4a:63:e9:6d:a0:33:35:d0:6c:1e:56:bd:6a:5e:
cd:ad:23:6d:75:6d:ec:81:2a:92:47:e8:40:2a:05:
dd:15:a7:c8:09:99:88:55:80:f7:97:fc:76:c3:64:
e1:9c:89:f6:98:35:a2:27:94:cf:53:e3:90:74:d7:
fb:d4:49:16:22:80:d1:42:5f:c7:e2:7c:f3:cc:d8:
87:cd:fd:31:ca:8f:a4:33:6a:ac:f1:77:0e:95:94:
f6:e9:d8:48:91:39:5a:f9:18:26:2b:3b:9a:9a:b7:
fe:bd:16:82:86:21:46:90:fa:bc:d3:07:92:79:40:
1f:bd:80:d3:03:f7:34:3a:ad:51:5f:b8:9c:0f:ca:
74:ed:55:66:e9:11:14:97:1a:03:4f:79:36:c3:65:
94:dd:87:d7:64:2a:ba:aa:0f:1c:a1:8e:36:7d:bc:
9d:cd:8c:58:59:ff:b0:77:8b:8d:20:f6:5f:e0:65:
91:2f:a4:8e:25:9d:05:ea:a0:e9:c9:2e:c2:4f:48:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:7C:E0:CA:3A:43:62:D6:81:94:4A:99:1F:29:58:F4:A4:0E:48
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/35V84Mo6Q2LWgZRKmR8pWPSkDkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f6:bf:a9:29:4e:dd:46:32:74:af:21:da:8c:9b:52:2c:b7:
5e:1b:39:1b:22:8b:af:86:02:14:e2:0a:7e:35:30:8b:8f:2a:
52:0f:f0:45:93:02:cd:d1:ce:ec:14:8c:b5:09:e5:82:8a:65:
5a:70:bd:af:cb:6d:3c:88:29:f6:fc:6a:34:0f:61:5f:7e:69:
fc:d6:c8:63:b0:c7:5a:5a:8f:e0:3e:6f:d4:27:bb:16:0a:57:
48:7e:13:ed:84:fb:29:96:86:64:21:74:fe:02:66:58:b3:77:
13:8f:6b:c5:36:0b:f3:06:ff:69:5f:2d:d7:0a:28:46:50:24:
c5:14:0c:d6:d8:55:05:0b:11:50:73:61:b6:d0:be:ee:13:00:
2d:29:69:5b:d0:88:3f:e2:89:77:5c:e7:f9:30:15:fb:f5:62:
a8:55:4d:1f:b1:8d:82:e2:42:ce:d2:b6:e1:7b:a9:c9:a3:08:
e0:28:16:3b:66:79:03:13:6f:51:a6:d6:65:39:d3:28:2f:04:
d1:0b:28:96:fa:03:16:8f:81:d2:22:71:23:fe:76:96:dc:3b:
53:2c:03:b0:11:17:fd:6d:4e:dd:ec:d8:75:91:c1:7f:2e:62:
fd:3c:42:27:49:d1:94:ea:9d:8a:80:bd:bf:4d:3d:99:df:e3:
f0:ad:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net