Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/tA3q5lzAMT685HmAADdGUIceNWo.roa
File: tA3q5lzAMT685HmAADdGUIceNWo.roa (raw, json)
Hash identifier: 4iDTY72p72lTnrw8f7pzxVEZAEbx9kchSw+fme4bgcg=
Subject key identifier: B4:0D:EA:E6:5C:C0:31:3E:BC:E4:79:80:00:37:46:50:87:1E:35:6A
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 0190496B1B8913E0D0D1D405AEF595A7F70A
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/tA3q5lzAMT685HmAADdGUIceNWo.roa
Signing time: Mon 24 Jun 2024 08:44:34 +0000
ROA not before: Mon 24 Jun 2024 08:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215013
IP address blocks: 188.72.103.0/24 maxlen: 24
188.72.104.0/24 maxlen: 24
188.72.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:6b:1b:89:13:e0:d0:d1:d4:05:ae:f5:95:a7:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jun 24 08:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b40deae65cc0313ebce4798000374650871e356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:44:2b:96:ce:a8:f7:89:e0:25:6e:09:e7:
b6:be:92:89:7d:cd:8c:88:ee:09:59:f4:4f:c3:30:
5c:4b:1a:c1:c2:be:fa:91:a0:21:6b:5b:39:ad:88:
84:91:b1:7d:30:d1:b9:01:b9:51:ba:29:e6:11:af:
05:bc:38:43:aa:bb:85:f5:fa:34:34:f8:e0:6a:0f:
28:85:37:92:db:29:45:72:be:4c:f5:19:42:d3:54:
4a:d0:94:cd:62:89:8b:16:85:eb:85:fe:71:5a:c6:
ac:b6:2d:a4:8d:b6:da:91:d0:e7:e3:b3:c9:1d:87:
41:5f:6d:ff:a3:47:41:37:30:9d:9d:ae:35:d0:8c:
60:dc:7a:71:66:b8:2b:e0:c7:68:aa:c3:7c:ed:9c:
d6:d4:f8:b8:7d:03:3d:04:0d:52:96:a7:4b:34:16:
25:be:55:dd:80:47:03:99:2b:61:e2:a7:6c:f1:81:
c7:0c:b1:b3:70:07:6b:ed:f9:0e:22:86:f9:55:48:
16:af:53:bc:4d:a0:fd:ba:3a:85:9b:25:60:f4:ad:
ef:3a:be:71:18:a1:c3:d8:32:5d:ea:4d:16:b9:87:
7c:3e:ba:89:80:10:ba:33:c2:c6:1b:44:bb:a4:01:
cc:91:2a:75:3f:86:0c:81:fa:2c:43:53:f3:4c:59:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:EA:E6:5C:C0:31:3E:BC:E4:79:80:00:37:46:50:87:1E:35:6A
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/tA3q5lzAMT685HmAADdGUIceNWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
1f:7c:2f:57:4a:45:c8:fd:fa:e4:ec:f6:3d:5b:b5:15:a0:30:
b9:72:be:f5:be:27:ac:8e:a1:6c:7b:66:14:7e:11:f7:01:12:
f9:8f:b8:7f:58:b9:e6:e4:9b:ed:0d:a9:4f:2d:5a:15:72:33:
d3:d4:4b:87:d3:8d:c0:50:a9:6d:11:7d:94:76:0f:80:ad:93:
91:68:79:b8:85:f8:30:a6:b5:a9:99:40:52:92:e0:db:e4:6d:
30:99:b2:dc:2e:67:da:b2:61:f2:e6:02:45:59:59:1b:d1:51:
70:0f:e7:5d:d7:80:85:8e:df:ca:c7:1f:10:f9:62:21:79:fa:
f5:2e:98:3b:8f:1c:2a:44:45:0d:66:fb:78:32:24:58:ff:6b:
04:84:9b:d6:9a:95:ed:5a:99:ad:a1:d8:4e:9d:bb:3c:32:8e:
3e:c6:96:b9:6d:75:f2:78:ac:75:0e:cd:cd:d2:24:17:04:c1:
45:fb:49:16:06:06:8c:d8:73:14:3d:12:57:0b:bd:94:28:4e:
9a:d5:6f:ea:e7:f6:68:6e:4a:b0:97:b2:a5:4e:dc:b0:65:e1:
fd:82:89:cf:e2:ba:22:ca:3b:91:19:98:c0:91:cb:83:00:b7:
66:15:de:c7:b5:56:f7:aa:33:c5:3c:c9:1a:e3:1b:a1:9b:57:
da:84:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:12:13 2024 by rpki-client on console.sobornost.net