Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X_-HdQSMuAmnFwq_eACjflR0mb0.roa
File: X_-HdQSMuAmnFwq_eACjflR0mb0.roa (raw, json)
Hash identifier: 7j/u+qct0do6DiPfW0KwYOwljaPZiDWaCOFuFoLDhRQ=
Subject key identifier: 5F:FF:87:75:04:8C:B8:09:A7:17:0A:BF:78:00:A3:7E:54:74:99:BD
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01935385AF1676A2D38A79A9E34CED4A7D68
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X_-HdQSMuAmnFwq_eACjflR0mb0.roa
Signing time: Fri 22 Nov 2024 10:58:10 +0000
ROA not before: Fri 22 Nov 2024 10:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 195.114.193.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:85:af:16:76:a2:d3:8a:79:a9:e3:4c:ed:4a:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 22 10:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fff8775048cb809a7170abf7800a37e547499bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:27:c3:fc:b2:1c:ac:11:51:57:4c:e7:b4:
f4:6a:d7:56:fa:16:d9:df:b4:1d:46:0b:02:fe:d5:
2d:88:6d:5b:27:70:e0:d9:21:e6:e5:95:70:bb:bd:
f5:d9:d5:70:8e:86:88:0c:6b:3d:70:0e:d8:8c:49:
ab:06:79:38:46:4c:c3:fd:84:85:a3:1c:8e:76:ab:
79:02:14:e9:22:a7:0d:06:13:9e:e1:2b:8a:74:ac:
b0:12:0f:53:39:7f:cf:63:eb:7d:fe:05:53:31:ff:
5f:19:15:b8:dc:56:f3:38:09:09:5b:7c:85:05:59:
10:61:a2:ba:9d:07:f7:23:c3:92:72:c7:4b:4e:4d:
27:9d:fe:83:95:31:7e:cf:d4:8b:eb:fb:0d:28:e4:
5d:c5:41:7b:a3:bb:14:2f:2d:30:32:11:de:0a:56:
b3:85:90:59:48:0a:8e:47:bc:9b:fe:1f:04:9f:d6:
6b:8f:59:50:8b:e1:57:d4:e4:95:e7:f4:32:39:78:
14:a4:62:5b:e6:d5:88:b3:0e:b5:98:d7:b3:3b:80:
6d:1c:1b:34:c9:8d:57:56:a0:5a:62:2b:c5:10:53:
24:5a:8a:37:f1:08:49:e7:28:db:02:03:08:85:15:
cd:89:a0:83:4e:36:c2:c1:b4:8c:2f:91:f9:8a:bc:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:87:75:04:8C:B8:09:A7:17:0A:BF:78:00:A3:7E:54:74:99:BD
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X_-HdQSMuAmnFwq_eACjflR0mb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.193.0/24
195.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
54:4b:6c:5d:be:4b:3f:54:0c:a2:fe:3b:39:c2:3f:70:5b:94:
b2:43:14:19:77:18:5a:1c:3d:23:92:6c:a1:22:bb:e2:b8:22:
f5:bd:7b:14:02:76:6e:f7:b1:69:8c:29:22:85:79:ad:00:1b:
0a:a1:ff:96:29:82:3d:28:7e:fb:cf:fc:17:26:6f:f9:f1:c7:
f1:6d:8e:52:5a:71:e5:5d:e6:7f:46:cd:fd:82:b5:63:07:ba:
71:e1:d5:a6:a9:01:3a:1b:35:35:1c:15:e6:e2:71:1e:10:12:
0c:c3:6d:c9:9a:7e:0a:a7:72:a3:83:9d:c0:19:87:43:49:9f:
6c:29:e7:27:31:b2:0e:f2:d3:3f:be:42:59:37:59:3d:35:2e:
34:35:68:33:17:f3:61:11:47:99:70:39:a7:d7:5d:ac:8b:06:
83:24:2f:38:a9:6f:b4:88:0b:d4:0a:a3:29:2d:c5:ea:9f:43:
dc:a6:6e:4a:ea:e3:60:db:5b:f2:55:40:8b:60:22:72:c8:a9:
03:c0:23:4d:dd:93:28:75:c5:e6:2e:1d:28:de:d2:30:b1:b2:
85:92:c6:b1:54:fd:95:6e:b2:5a:85:f7:96:17:ae:e0:4a:bd:
74:13:69:2d:51:f3:90:29:90:b5:9f:01:15:4f:92:e2:4f:e5:
84:36:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:21 2024 by rpki-client on console.sobornost.net