Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/ocrjydJfHCurKkgaugagX2ybQts.roa
File: ocrjydJfHCurKkgaugagX2ybQts.roa (raw, json)
Hash identifier: SApWZK5WPTw0SUebLZBiiIiOtxp3qj3UOqrWip+6KZk=
Subject key identifier: A1:CA:E3:C9:D2:5F:1C:2B:AB:2A:48:1A:BA:06:A0:5F:6C:9B:42:DB
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 018DA297EC64FA9BF7B7F1FC90CB1DDF650A
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/ocrjydJfHCurKkgaugagX2ybQts.roa
Signing time: Tue 13 Feb 2024 13:11:21 +0000
ROA not before: Tue 13 Feb 2024 13:11:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16645
IP address blocks: 46.236.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:97:ec:64:fa:9b:f7:b7:f1:fc:90:cb:1d:df:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Feb 13 13:11:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1cae3c9d25f1c2bab2a481aba06a05f6c9b42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:ac:da:67:1e:dc:76:18:cd:72:73:90:b2:
4b:e2:4f:cc:d6:8f:fe:a1:bd:41:0d:97:c3:87:97:
8b:4f:5f:06:57:46:1b:9e:d4:3c:7c:82:76:7b:f1:
ef:03:82:91:54:a5:6d:53:4b:0e:e7:92:74:ae:64:
94:e2:4f:41:9d:b1:87:54:dc:57:15:cf:40:96:e3:
ca:85:f9:00:6d:3f:e5:6a:fa:e5:42:01:bd:91:79:
f3:c0:07:9f:68:13:01:26:58:e0:66:70:1d:00:7f:
5c:85:f3:db:d7:68:95:58:32:9e:a8:f9:0b:96:b6:
3a:8e:b1:1a:7e:73:b3:ef:41:16:aa:7b:be:52:33:
13:06:96:1a:66:ca:d3:cf:20:05:ea:c5:2c:74:54:
19:41:8e:3c:3f:7c:e5:e3:6b:e9:aa:b7:96:56:4d:
32:d3:27:19:02:19:77:68:a4:16:5a:68:58:3d:33:
72:1f:2d:ef:72:6e:5e:4e:5a:5f:41:f4:87:00:50:
e6:65:8f:f3:54:b3:a6:47:f7:44:1b:1b:24:39:9e:
04:ef:fc:af:3c:a5:c3:26:e6:77:d5:91:33:55:4b:
28:e6:8f:94:55:fe:f2:7b:12:2b:5f:ce:83:de:76:
aa:03:3b:bf:44:ce:92:be:f3:5c:68:5e:b8:eb:27:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:E3:C9:D2:5F:1C:2B:AB:2A:48:1A:BA:06:A0:5F:6C:9B:42:DB
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/ocrjydJfHCurKkgaugagX2ybQts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.56.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:00:5d:5a:b5:67:83:78:da:01:9d:4c:ea:91:ab:63:51:
cb:04:ad:5e:a3:ef:ce:66:37:0d:d3:a2:86:10:4f:c3:81:6c:
ca:6e:17:de:3b:d5:dd:fc:7d:ed:b3:91:af:d4:82:15:6a:5a:
7e:e0:94:aa:7d:88:20:cb:0d:76:70:63:f9:a1:e8:c6:a8:a7:
94:e8:37:84:b8:0a:ac:e3:57:5f:71:1c:1e:45:86:42:1c:19:
bb:87:dc:59:15:65:ad:87:7a:89:70:4b:f9:16:35:1d:4c:74:
ed:c0:fd:ef:4f:14:2d:89:86:f1:c3:84:a6:e2:63:35:2f:81:
80:70:ec:a5:d1:57:ae:7c:56:98:f0:e1:15:46:73:f2:31:e7:
b3:bd:c5:00:f5:e1:8a:85:64:3e:05:2a:b9:e1:e3:07:d7:80:
f7:0b:4d:8e:cf:69:fb:91:2e:20:e7:9c:b4:8a:72:51:dc:96:
35:f4:69:3e:95:d1:3b:d0:f5:49:55:03:93:65:e2:ce:ff:b2:
f4:52:d6:6c:17:ff:56:8d:80:6f:5c:4c:8a:04:cc:1f:de:3b:
03:76:40:e9:07:24:01:49:a4:27:87:2c:a3:71:56:c1:57:4d:
79:1c:56:ab:39:66:a6:e7:5d:fc:7d:22:09:7a:c2:a5:0f:80:
ba:f9:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net