Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UODFOfRcEBl2Nfat34oTac6bihA.roa
File: UODFOfRcEBl2Nfat34oTac6bihA.roa (raw, json)
Hash identifier: gg/v+Zfo9IKYel3Zgt1r9ZSn1xY4E0yG6B+EK1I8ltM=
Subject key identifier: 50:E0:C5:39:F4:5C:10:19:76:35:F6:AD:DF:8A:13:69:CE:9B:8A:10
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0193BB2D83AB7EF5D75E59FC18A5E584B100
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UODFOfRcEBl2Nfat34oTac6bihA.roa
Signing time: Thu 12 Dec 2024 14:02:22 +0000
ROA not before: Thu 12 Dec 2024 14:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203937
IP address blocks: 185.125.4.0/24 maxlen: 24
185.253.233.0/24 maxlen: 24
194.42.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:2d:83:ab:7e:f5:d7:5e:59:fc:18:a5:e5:84:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Dec 12 14:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e0c539f45c10197635f6addf8a1369ce9b8a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:9a:d3:44:99:3c:37:49:3c:8a:9d:ab:26:
20:5b:2e:3b:39:74:6c:fc:84:23:8c:68:37:a5:b4:
18:9c:77:fb:03:6a:83:2b:06:82:f1:5c:3d:1f:c8:
c2:6a:a3:33:c8:dd:dc:3e:85:9a:f8:3c:45:d7:c7:
b4:02:47:18:e9:f2:77:d6:4b:c8:5c:67:25:30:48:
68:8b:8f:1e:4a:7e:06:40:c8:af:05:0d:62:04:3b:
ef:aa:0d:46:cf:51:f9:5c:1d:6b:bb:5f:79:72:5e:
a1:f8:43:74:4f:a4:11:63:e6:be:e0:18:b6:fb:8c:
83:85:53:a6:f3:87:e5:34:8a:0c:6f:f2:fc:27:52:
ff:40:21:80:a3:3a:68:74:99:6e:de:4e:40:3e:bd:
39:d6:ed:7f:71:58:c3:30:b3:cb:77:76:74:c8:05:
f4:fd:54:d2:e8:bf:50:61:de:45:d9:78:fc:70:b6:
c7:13:6a:30:82:ae:2f:08:34:d0:a0:99:08:fa:9a:
fb:00:af:5d:a1:9c:e5:d3:6c:da:63:11:e6:a8:11:
17:15:35:cb:c7:25:00:c4:d4:0d:34:62:69:b5:f5:
8e:4e:0b:f6:97:e3:7b:c1:e5:a0:99:b9:9a:c7:2c:
41:32:1f:a8:95:f4:9f:0d:90:dc:ae:1b:5c:0f:5c:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:C5:39:F4:5C:10:19:76:35:F6:AD:DF:8A:13:69:CE:9B:8A:10
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UODFOfRcEBl2Nfat34oTac6bihA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.4.0/24
185.253.233.0/24
194.42.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:06:1e:ad:82:3d:c1:41:06:74:00:f5:ea:9f:a4:88:6f:42:
e3:fe:a7:d7:c4:d2:ae:72:a4:06:e2:73:48:42:5f:2d:11:40:
2c:47:67:10:78:66:23:c8:ec:5a:89:38:47:d4:b6:8b:12:f7:
7b:64:72:97:1f:17:a2:be:9e:10:25:3a:3b:9a:f6:ad:40:57:
4d:10:e6:b5:8d:b8:3d:f1:87:e6:93:75:2a:28:78:54:ae:1a:
9b:76:b6:84:43:92:3e:e8:8d:00:ff:c7:44:bd:a4:51:02:59:
37:af:f2:e5:f8:c0:01:63:58:2c:9b:4c:14:b2:30:e8:53:c8:
93:1a:fb:85:99:36:0f:25:14:ff:7d:1d:63:ba:7a:4a:ba:e2:
f3:97:b2:c7:35:1c:4d:ce:22:cf:dd:f4:00:2c:0d:38:c7:46:
4d:77:6c:64:95:2d:af:46:98:ad:e5:47:1e:ac:e0:c0:18:ca:
60:e8:6f:e0:5f:71:87:da:28:73:f9:cc:e0:d4:5a:44:fe:fd:
b6:c5:a3:6d:e8:99:f6:ed:6f:a6:9e:7e:8c:4f:0b:cf:06:f9:
07:5a:b5:d0:24:9f:a1:85:c0:39:09:7a:58:e1:a7:2d:c9:6b:
63:35:77:8b:8b:50:a9:b3:56:c8:4f:ad:1b:27:4d:ae:aa:b9:
0e:0d:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net