Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tjTkWs0GY7R4o1qJbV5QN_HjBtM.roa
File: tjTkWs0GY7R4o1qJbV5QN_HjBtM.roa (raw, json)
Hash identifier: 7dVrNwuApp0dxlTd2X9hbtK/DxKA7MV4oL9OZLmfz68=
Subject key identifier: B6:34:E4:5A:CD:06:63:B4:78:A3:5A:89:6D:5E:50:37:F1:E3:06:D3
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 0193F3DD9458041E7E5B82ECDA0BD7BD2A3E
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tjTkWs0GY7R4o1qJbV5QN_HjBtM.roa
Signing time: Mon 23 Dec 2024 14:13:25 +0000
ROA not before: Mon 23 Dec 2024 14:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214625
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:dd:94:58:04:1e:7e:5b:82:ec:da:0b:d7:bd:2a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Dec 23 14:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b634e45acd0663b478a35a896d5e5037f1e306d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:6e:a3:ac:e7:51:72:5d:05:b7:e9:ca:08:
99:25:ce:7d:c6:bc:ae:35:2e:54:b9:7a:ee:98:43:
89:ca:d2:37:06:b5:d8:c7:cf:2b:2c:61:ca:b5:0b:
d3:38:d2:1e:97:1a:73:92:df:93:3b:82:c1:30:55:
8e:f2:79:13:80:8d:ad:7a:65:d4:cb:dd:32:2b:ce:
da:07:8b:06:ad:e1:6f:9d:29:6a:0a:d7:55:3a:db:
0f:cd:0a:f3:61:20:40:5b:3c:83:4f:24:17:2a:1f:
a4:61:7c:b9:21:34:a0:b2:d0:8f:b2:02:bf:7c:60:
66:62:7e:af:70:8a:f1:58:5d:ad:00:29:52:6a:0c:
95:8b:c0:f9:28:0e:85:20:1c:4b:b0:b7:74:3e:4a:
fd:1a:31:8b:40:9f:e7:90:f9:14:19:0d:fd:3f:c8:
53:7a:5e:56:4b:b8:cf:0b:12:d4:d7:22:f1:a6:8e:
69:74:55:df:33:a8:de:1e:0e:7f:82:a9:3d:e6:5f:
6a:99:dc:86:95:aa:3e:8a:17:65:72:45:4c:35:10:
97:d8:57:dc:55:84:cb:91:e4:c9:06:9a:37:5d:28:
dd:a1:34:8e:d0:f8:87:98:eb:b0:fe:3b:59:cc:4b:
d3:40:90:03:fb:4a:aa:9b:98:72:3b:f2:9e:28:e5:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:E4:5A:CD:06:63:B4:78:A3:5A:89:6D:5E:50:37:F1:E3:06:D3
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/tjTkWs0GY7R4o1qJbV5QN_HjBtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e5:91:d7:9e:92:68:a0:fc:f0:fc:6b:b3:bd:cb:67:a3:d2:
dc:31:15:13:d6:71:70:35:67:b0:1e:21:ba:69:87:73:1c:18:
70:71:42:1b:92:31:c8:5c:6d:11:77:8e:52:79:37:b7:5a:e3:
08:70:c4:80:ec:cf:b8:c4:db:c5:46:34:9e:ce:85:96:6e:53:
09:33:ab:4d:e7:40:9f:05:e2:47:64:62:3c:d3:90:84:10:03:
d5:7b:5f:7f:e5:48:73:40:68:2e:99:8e:ac:14:bd:bd:8c:0f:
0b:93:be:6a:4a:fb:17:e8:32:ad:b7:9c:66:be:04:b6:ad:5d:
b5:2f:2a:36:7b:f6:dc:3f:7a:21:04:37:20:02:53:7c:fe:0e:
3a:bd:c0:3e:2c:d3:06:8e:39:a3:0d:61:b3:d6:22:b1:31:30:
10:c0:16:4c:53:dc:ef:b4:66:59:6e:4b:66:a2:79:08:96:92:
f0:e3:a3:d9:bb:da:2f:9f:f1:90:62:07:79:8d:ab:b4:24:8e:
39:fe:37:fa:39:31:a7:6c:be:3c:0d:c6:95:33:43:6c:cf:ac:
41:96:3c:2d:b7:49:4f:e5:fd:ad:88:93:62:b9:01:b9:fc:50:
90:cc:25:74:39:20:31:f4:f7:6e:1b:30:42:47:a4:27:9e:d8:
ea:13:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:12 2024 by rpki-client on console.sobornost.net