Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Axrt9m4NHUGrq4rQ80dHdreQMCc.roa
File: Axrt9m4NHUGrq4rQ80dHdreQMCc.roa (raw, json)
Hash identifier: tAuivUMTfY4JUwLoM5MVEWeVIycP6UgkZ3K8ZcojdN0=
Subject key identifier: 03:1A:ED:F6:6E:0D:1D:41:AB:AB:8A:D0:F3:47:47:76:B7:90:30:27
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018DA1B30A7710C91D19B6639465FC5E7288
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Axrt9m4NHUGrq4rQ80dHdreQMCc.roa
Signing time: Tue 13 Feb 2024 09:01:21 +0000
ROA not before: Tue 13 Feb 2024 09:01:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12642
IP address blocks: 213.170.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:b3:0a:77:10:c9:1d:19:b6:63:94:65:fc:5e:72:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Feb 13 09:01:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=031aedf66e0d1d41abab8ad0f3474776b7903027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:7e:8f:37:bd:bb:7e:23:7f:d1:bd:d9:fe:
98:d8:11:51:6d:9b:23:a1:6c:12:7c:35:be:93:fb:
c9:0a:4e:65:e2:3f:78:3e:6e:a6:78:96:ed:c0:e6:
39:3d:c6:9a:be:95:e8:23:4c:28:64:f1:5c:d9:6a:
94:bd:0b:4b:61:a2:0c:8e:31:57:b4:8c:11:d4:b8:
01:5d:e9:91:6e:99:49:22:40:4c:ae:8f:68:13:2b:
2e:f8:8b:c8:50:75:be:b0:9e:a0:c3:19:0b:41:65:
14:c2:da:af:ec:93:5f:47:19:97:ec:ff:89:12:b6:
0b:a7:fd:e6:94:b4:0a:6d:39:a1:5d:f1:97:5d:c4:
b3:4f:19:fa:0d:5a:2a:40:ab:06:e1:20:b2:58:ae:
08:88:1b:44:b1:84:a9:92:c7:3e:03:3b:a2:54:d1:
30:ae:41:0f:16:95:ad:02:99:fb:a1:6d:9e:3a:e5:
8f:7d:cb:06:1b:e4:5e:ab:36:07:92:7a:a4:a3:89:
1c:20:89:79:d3:d2:6d:d8:09:fc:31:2f:38:e6:df:
c7:57:b7:76:6c:4c:e0:14:61:35:73:18:32:11:7a:
b9:ff:e6:20:af:0c:4f:dc:1b:1c:fd:f9:7a:ce:2a:
c0:bf:dd:91:d3:ab:7a:f5:e4:d0:3a:c5:24:e7:ea:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:ED:F6:6E:0D:1D:41:AB:AB:8A:D0:F3:47:47:76:B7:90:30:27
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Axrt9m4NHUGrq4rQ80dHdreQMCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8f:b4:96:6f:6f:95:2f:dc:55:35:c0:22:6b:49:d8:de:b2:
fa:aa:4c:7f:9e:55:f9:4a:2e:8c:43:c9:e0:4e:df:73:18:aa:
ca:5d:98:9e:fb:a7:78:1a:63:b9:3e:43:a7:ce:b3:56:a9:75:
12:25:47:13:51:7e:cf:52:6c:1c:11:0a:0c:81:d6:58:25:a0:
f4:3c:25:5b:6f:0c:15:7b:ef:0c:f5:c1:95:28:d0:cb:bf:98:
8f:11:f2:0a:ec:9d:02:80:e8:2a:cc:a8:1e:0c:c3:8a:13:e4:
8d:04:1b:45:d4:47:7e:01:4b:1f:99:ef:b1:21:0c:fa:0a:42:
f0:ac:2d:d1:2f:95:e2:56:e5:80:7b:9d:51:6f:e8:ca:90:56:
63:bb:7d:f4:d2:83:39:09:b9:94:94:37:69:12:5c:b9:9e:4e:
58:84:9f:c6:87:ef:27:86:e1:6b:05:ad:7a:7a:f4:a7:ef:ab:
45:c9:c6:5c:29:c7:8e:d4:74:32:4f:7a:b1:29:45:d6:9f:e8:
84:c0:95:05:da:c1:91:74:94:04:68:e3:a1:a9:9b:a9:e4:02:
ee:4d:49:53:3e:6a:5c:96:98:12:56:6c:c6:86:aa:49:5a:4e:
27:0e:78:cf:fa:54:96:5e:df:65:2a:43:5f:af:84:8f:78:ce:
4a:0c:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net