Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/TIniy0dIhPY-Hk7dow1YWZFWDKY.roa
File: TIniy0dIhPY-Hk7dow1YWZFWDKY.roa (raw, json)
Hash identifier: 1HYWoWiPsNMiVrle+VBt+QL+KgzgfgxMY7MNg2sqtM0=
Subject key identifier: 4C:89:E2:CB:47:48:84:F6:3E:1E:4E:DD:A3:0D:58:59:91:56:0C:A6
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018CC79584458EB6178AB726A055EB4FF94D
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/TIniy0dIhPY-Hk7dow1YWZFWDKY.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16203
IP address blocks: 213.170.41.0/24 maxlen: 24
213.170.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:84:45:8e:b6:17:8a:b7:26:a0:55:eb:4f:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c89e2cb474884f63e1e4edda30d585991560ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:74:ec:4d:82:61:2b:81:21:61:76:46:86:
92:88:7d:84:57:dc:bc:66:fb:e5:44:e3:53:d9:00:
dc:24:5d:21:7c:6c:75:41:ae:1c:01:93:a1:2a:87:
48:8b:c3:84:a6:c2:d6:c8:6e:fb:07:67:8f:f6:f6:
6d:e1:b4:82:ee:5b:52:09:fe:f0:53:73:17:af:33:
c6:22:c7:c9:d7:64:31:33:b3:9c:81:57:6f:ad:e1:
6f:69:dc:0c:33:1e:b6:e9:41:c5:78:f1:1e:f6:9f:
4a:f6:2a:6d:8f:82:d4:cc:34:26:4f:95:38:57:55:
82:fe:40:87:87:74:ae:ac:2d:dc:e3:61:ee:c6:0a:
54:2c:9b:be:95:35:dd:97:dc:85:72:3d:01:a6:d6:
24:03:23:6c:f1:3f:09:66:24:3e:47:5d:1f:61:00:
ab:fe:f1:9c:e1:31:e1:44:96:40:eb:e4:11:ce:6c:
8c:1e:0d:dc:84:48:a5:84:8b:70:db:8c:5e:23:7a:
f3:8e:e9:dd:43:ea:be:58:97:3e:e7:58:6b:08:9e:
57:31:eb:b1:28:a4:37:2a:51:f8:e1:d1:8e:a9:8f:
86:c6:35:3a:77:38:a3:de:c7:0a:3b:aa:92:8a:84:
38:67:e5:8c:cb:57:33:28:3e:58:de:0f:8d:5f:73:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:E2:CB:47:48:84:F6:3E:1E:4E:DD:A3:0D:58:59:91:56:0C:A6
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/TIniy0dIhPY-Hk7dow1YWZFWDKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.41.0/24
213.170.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:59:bd:7a:56:f8:a4:02:88:ba:11:a5:c0:6c:62:4a:eb:47:
85:a6:f7:f2:85:9e:8f:91:92:38:cd:8a:bf:9b:89:bf:44:e1:
ad:c6:d0:91:4d:c9:c5:14:c8:04:3a:d6:a3:67:10:7d:db:1e:
a1:75:50:5b:b5:ef:e3:04:18:29:52:4e:f4:9c:5d:20:a5:1f:
3f:60:89:fd:45:00:81:19:7e:7f:82:3a:d6:f8:51:49:25:99:
c1:2a:f9:33:f7:5a:79:e0:59:dc:1f:a6:03:d8:0a:10:9e:be:
e2:7a:ba:cf:2e:6c:45:90:25:0a:a4:95:93:45:c9:1a:2f:37:
15:5f:d4:3e:28:9c:8d:d3:df:1b:58:93:87:4c:72:bb:d8:44:
95:c4:ae:c2:b1:0d:d5:69:9e:c5:d5:77:5b:1a:fa:2b:15:4e:
6a:3a:92:47:90:23:98:15:09:43:9d:88:e5:d3:4e:5d:ac:6e:
b0:44:3d:c7:8f:3c:0f:ed:95:14:80:53:65:48:f2:16:2e:13:
62:07:70:ae:ee:80:c0:55:c0:25:21:a2:36:65:dc:d6:d5:b6:
40:11:73:0a:15:6a:1e:39:5a:ac:bd:14:d0:2c:bd:a6:fb:38:
ba:10:a6:e1:91:1a:e2:9e:b2:0b:3c:ed:93:1f:e7:d2:dc:24:
cd:0d:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net