Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5EdEbPX7JWveCRBaBgjBGaJebJg.roa
File: 5EdEbPX7JWveCRBaBgjBGaJebJg.roa (raw, json)
Hash identifier: +OLl+sP9fj1EJK6pYntG5BFSa/A8q1kqYd8Lo+1+u4w=
Subject key identifier: E4:47:44:6C:F5:FB:25:6B:DE:09:10:5A:06:08:C1:19:A2:5E:6C:98
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0192B408EE0399EB36C866F273942750613D
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5EdEbPX7JWveCRBaBgjBGaJebJg.roa
Signing time: Tue 22 Oct 2024 11:42:17 +0000
ROA not before: Tue 22 Oct 2024 11:42:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203937
IP address blocks: 185.125.4.0/24 maxlen: 24
185.253.233.0/24 maxlen: 24
194.42.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:08:ee:03:99:eb:36:c8:66:f2:73:94:27:50:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Oct 22 11:42:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e447446cf5fb256bde09105a0608c119a25e6c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:26:06:9e:70:19:de:05:9a:89:2a:04:8c:
a2:63:5f:62:a9:b5:20:04:7f:e7:10:1b:7a:cd:c2:
f6:90:9e:f0:60:d2:2e:f7:fa:61:60:48:c0:44:e5:
9a:13:62:e3:59:65:8c:00:e2:93:ef:ed:2d:b8:40:
f1:06:04:91:50:62:5b:6c:23:84:98:b9:ff:b9:06:
53:9a:eb:d6:68:0a:03:88:06:32:d4:2e:88:2a:44:
37:9b:c9:40:6e:a2:d9:ed:22:17:09:3a:23:89:21:
98:17:4c:7b:e1:ba:01:9b:39:c0:a4:30:f4:7a:ff:
60:6c:4d:ef:1b:bf:f9:01:ef:e6:4f:1a:97:4c:77:
9c:e7:a1:c1:a8:73:4b:75:16:cc:e1:14:08:4f:75:
27:82:6c:db:c6:a0:6c:1e:e2:3b:74:b0:c3:60:73:
b9:3d:85:d9:b2:03:09:41:7a:bb:88:6f:89:cb:c6:
91:85:a0:57:6b:c3:fb:86:47:9b:d1:98:56:2b:a3:
ef:e9:a3:ea:21:7a:f4:3c:56:93:42:6e:44:58:01:
d1:f9:2a:8b:11:a8:a8:7c:ca:30:b4:3f:90:1e:5a:
bc:e3:b4:2a:4b:3f:47:b8:8a:4b:af:ef:e1:1b:40:
ad:67:a7:d8:82:92:b6:bc:90:cd:c4:d1:fe:93:25:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:44:6C:F5:FB:25:6B:DE:09:10:5A:06:08:C1:19:A2:5E:6C:98
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5EdEbPX7JWveCRBaBgjBGaJebJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.4.0/24
185.253.233.0/24
194.42.118.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c3:51:99:8c:11:fa:27:13:f1:ca:80:5c:1b:e0:5b:58:5b:
43:38:16:5d:c6:ab:eb:9d:a2:75:86:35:e1:b6:f8:03:6a:13:
d9:59:e4:f7:1a:3e:81:cd:59:d1:93:1c:bf:04:d2:56:76:52:
82:b4:0e:4b:e8:96:a0:f4:41:69:b4:10:d8:1c:6b:12:84:e5:
b9:92:8e:97:17:63:00:88:c8:37:03:c6:92:56:e4:55:4e:3e:
4e:b5:2a:0b:d0:15:85:50:43:2c:31:f7:e7:6c:86:a9:5e:45:
ba:5e:2f:65:f2:5e:3b:bf:70:d1:5a:71:f6:dd:6c:c3:61:59:
8f:5e:d3:5c:e7:47:46:d4:bf:ed:b0:d6:7e:bf:35:62:9e:92:
c4:35:48:1b:5d:74:66:d6:18:23:5c:09:e6:fd:3f:8e:d7:bf:
25:3b:58:43:74:2c:a8:a6:8c:73:91:13:04:91:d7:2a:78:5c:
49:95:a4:30:c8:15:3c:e3:5c:12:ef:86:3a:d3:cf:1f:82:eb:
eb:03:ff:02:63:d7:d4:44:fb:5b:56:54:ac:20:ff:d8:b9:fe:
b3:e1:dc:65:16:54:42:39:f5:75:36:6c:d9:c2:eb:87:8d:94:
8f:07:69:a5:21:3f:5a:ab:97:b2:7a:56:1a:42:72:e7:70:6e:
9b:1e:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:45 2024 by rpki-client on console.sobornost.net