Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/p-_7ND0YyCYdbDegtZDw_njigHk.roa
File: p-_7ND0YyCYdbDegtZDw_njigHk.roa (raw, json)
Hash identifier: RL14SDQwdwwz0X/UtzaqoSm8L7uLy9kI/+M6Npkjdhs=
Subject key identifier: A7:EF:FB:34:3D:18:C8:26:1D:6C:37:A0:B5:90:F0:FE:78:E2:80:79
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 018CCA2AF8602210CA6108F8A30E8CDF5426
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/p-_7ND0YyCYdbDegtZDw_njigHk.roa
Signing time: Tue 02 Jan 2024 12:34:22 +0000
ROA not before: Tue 02 Jan 2024 12:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50366
IP address blocks: 109.95.138.0/24 maxlen: 24
109.95.137.0/24 maxlen: 24
109.95.136.0/24 maxlen: 24
109.95.139.0/24 maxlen: 24
109.95.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:f8:60:22:10:ca:61:08:f8:a3:0e:8c:df:54:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jan 2 12:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7effb343d18c8261d6c37a0b590f0fe78e28079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:2a:64:e3:99:e4:36:96:5d:82:a9:dc:63:
7c:c3:a1:84:05:60:36:94:af:72:09:f3:ea:6b:6e:
ea:38:09:06:d2:40:75:00:31:a8:f0:04:47:e3:e4:
cc:7d:65:a2:ea:7d:de:0d:6f:56:8d:32:e9:4f:11:
ea:fd:b6:f6:50:27:61:9b:76:e3:03:d2:84:47:b4:
ed:50:08:ff:86:f2:c2:67:a1:d0:f4:3b:af:83:79:
95:69:6a:f0:cc:a1:da:ce:1c:34:4c:55:8a:f2:e7:
ab:7c:23:71:11:77:b1:92:63:77:d2:35:b8:e7:6b:
72:90:07:c3:45:ec:e5:c8:4e:25:fe:fc:c7:05:d4:
21:3f:eb:65:51:cc:3c:20:51:c1:cf:e4:da:43:6b:
b8:dd:66:26:12:ad:2d:e9:19:63:37:d5:1b:8b:60:
18:53:c1:21:53:04:97:77:4a:1e:52:90:85:ae:12:
2a:3b:8f:74:5c:d6:69:d8:44:57:f4:e9:08:3a:16:
6a:d2:73:41:cf:b1:22:f8:42:c0:54:62:2f:88:f2:
06:78:4d:cc:d2:3a:a5:be:a9:f8:27:6c:82:f5:2f:
b5:f7:81:22:fc:8b:b0:01:06:45:82:d5:f6:16:72:
2d:ff:ed:e5:22:94:e7:f5:79:9d:41:b7:33:c0:26:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:FB:34:3D:18:C8:26:1D:6C:37:A0:B5:90:F0:FE:78:E2:80:79
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/p-_7ND0YyCYdbDegtZDw_njigHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.136.0-109.95.140.255
Signature Algorithm: sha256WithRSAEncryption
07:e1:48:78:cb:ae:7b:3a:12:45:9b:b7:a7:54:35:8d:59:07:
af:6c:6e:dd:81:db:1c:48:c1:c4:ac:6a:8a:b6:58:5b:da:dc:
c4:5d:57:a5:c5:ff:4b:02:45:e0:55:0f:7f:17:e3:7b:48:8c:
fb:cc:e1:f8:25:32:f5:30:14:d0:5a:49:fa:78:a8:f6:f6:a5:
22:b2:b3:15:b6:96:c8:c2:ae:28:bb:af:95:35:9a:f0:30:1b:
f1:1e:18:4f:6a:01:0f:71:10:40:4a:13:dc:12:fd:0d:d7:ba:
cd:94:88:1b:84:3b:8c:92:dd:41:f6:bf:56:6c:35:6d:3f:79:
04:f6:60:f5:c6:4f:77:c8:50:3c:f6:19:15:41:a1:2c:55:79:
f6:2c:3c:e7:03:07:5c:ae:98:a4:7a:9f:bd:03:2d:44:66:d4:
54:33:3c:f6:4e:11:f0:ff:41:b5:d9:bf:86:f5:c1:e4:77:5c:
1c:84:af:a9:57:92:ff:90:1f:93:36:7d:38:d2:e5:dd:4d:39:
21:fb:70:76:d0:6b:bc:19:29:4a:42:4c:bf:fa:10:c1:4e:9f:
69:b4:d0:d5:21:de:b9:ec:a4:fd:e3:f5:3c:0c:d4:c9:95:1f:
9d:ae:4c:3d:91:4b:5f:df:15:4f:4c:cc:d8:71:3a:2c:6b:66:
f9:5d:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:13 2024 by rpki-client on console.sobornost.net