Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/sTWxxsrOD2qKtEwlTqL_Pil3Twk.roa
File: sTWxxsrOD2qKtEwlTqL_Pil3Twk.roa (raw, json)
Hash identifier: lCACWUpD8FGPVGJ0CKAyvJVrjm2SZnl1A6u0Z3N8sag=
Subject key identifier: B1:35:B1:C6:CA:CE:0F:6A:8A:B4:4C:25:4E:A2:FF:3E:29:77:4F:09
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0193A112792B80B2A6FEA5B8692C707007A1
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/sTWxxsrOD2qKtEwlTqL_Pil3Twk.roa
Signing time: Sat 07 Dec 2024 12:22:42 +0000
ROA not before: Sat 07 Dec 2024 12:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47191
IP address blocks: 37.77.80.0/21 maxlen: 24
216.180.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:12:79:2b:80:b2:a6:fe:a5:b8:69:2c:70:70:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Dec 7 12:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b135b1c6cace0f6a8ab44c254ea2ff3e29774f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:03:ae:07:94:a2:25:3b:54:56:a0:c1:2e:
29:9a:2c:a9:30:10:b2:bf:ba:33:21:d3:73:30:1c:
0c:82:42:3d:08:2f:39:ac:14:be:d6:93:e5:42:82:
c0:99:8c:56:90:06:0e:1d:65:b8:ca:dd:2c:80:6a:
f1:8e:a6:c2:ff:be:ee:44:af:74:ac:10:11:0b:e6:
27:8f:51:9e:8f:26:87:7f:21:88:12:ae:59:3e:4f:
0b:8d:be:e5:77:5c:29:c6:8a:02:92:84:a5:76:73:
6f:49:af:a8:22:c4:00:11:f7:7c:09:d0:68:0d:c0:
35:63:c7:f3:f7:cb:df:2b:31:54:64:99:0b:5c:3e:
7d:b3:b4:61:76:99:5b:8e:c0:6e:66:07:ec:80:63:
91:4c:ed:a2:b4:c4:56:04:a0:2c:ae:e3:84:99:d9:
42:de:8d:39:a7:38:b6:67:36:7e:86:fc:04:61:01:
59:c0:df:4f:1a:73:b3:ab:4f:8c:31:e5:f6:0b:8f:
39:ab:87:a0:3b:6e:ea:cc:8f:a0:0c:0b:40:65:a1:
dc:3f:a8:bd:9b:0e:ce:c4:df:2c:e8:cd:1e:b3:53:
f1:d0:d4:ae:e2:64:d2:8d:41:b6:cd:52:b0:7d:aa:
82:55:05:fb:a5:17:e3:bd:da:58:93:6c:e4:19:b7:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:35:B1:C6:CA:CE:0F:6A:8A:B4:4C:25:4E:A2:FF:3E:29:77:4F:09
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/sTWxxsrOD2qKtEwlTqL_Pil3Twk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.80.0/21
216.180.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:f8:c6:cd:89:8a:6d:be:ad:65:e4:4a:0b:b1:85:87:a4:32:
06:c4:5e:db:77:09:7f:f9:31:22:55:aa:f2:02:a2:5c:ed:83:
5d:7a:20:b4:3e:01:9a:78:e5:3b:b0:37:4f:19:f2:63:29:99:
13:61:f2:ad:d8:82:50:7e:03:77:d8:ea:cb:a0:70:77:52:6c:
dc:62:0a:fd:23:81:83:a5:3b:55:b8:84:fb:49:5b:34:66:b9:
0f:b0:27:5b:80:ab:f4:1b:79:da:72:0c:3a:1c:f7:6c:13:c4:
1c:46:2f:c3:3c:bc:17:f3:9c:23:ba:fd:17:94:79:26:41:56:
58:91:6c:83:5c:78:8d:69:6b:c9:49:a8:1b:bf:9c:ab:9a:f1:
5a:1d:a1:e5:a3:f9:b9:8a:2f:92:94:35:be:38:78:31:0b:af:
97:d6:7a:4e:45:5e:da:16:9d:e9:5e:b5:69:92:5d:10:14:1d:
59:8c:c1:e6:07:e9:d7:38:b7:25:fa:72:ca:7a:57:e2:94:77:
05:96:b7:3d:0a:f9:88:b1:2b:1e:33:08:76:2a:6e:ad:73:c2:
50:19:17:7b:3a:55:e2:07:a6:d8:7b:fb:31:db:fc:09:48:97:
19:d1:60:d3:c3:c6:e1:bf:91:a5:71:3d:7b:70:fd:d1:f5:a2:
8f:07:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:19 2024 by rpki-client on console.sobornost.net