Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/KXttFSnAPqar09QHj3sCRC6Fmlc.roa
File: KXttFSnAPqar09QHj3sCRC6Fmlc.roa (raw, json)
Hash identifier: zd1iu1h+4nXMJd+a0lI497qTSf4mfQUeYYIpUQityu8=
Subject key identifier: 29:7B:6D:15:29:C0:3E:A6:AB:D3:D4:07:8F:7B:02:44:2E:85:9A:57
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 018CC348ED4BF2D1DC5A257CF4762A1568D6
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/KXttFSnAPqar09QHj3sCRC6Fmlc.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211028
IP address blocks: 194.39.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ed:4b:f2:d1:dc:5a:25:7c:f4:76:2a:15:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297b6d1529c03ea6abd3d4078f7b02442e859a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:d8:01:c9:3f:02:ae:e6:c7:0c:cb:85:8e:
ad:af:56:c8:39:b7:68:6a:27:df:2b:54:e6:ad:ab:
95:5a:8c:67:b2:d7:98:12:ee:03:1d:2e:43:ee:b7:
49:6a:0b:6d:d1:5b:54:62:ba:11:24:0b:49:53:98:
f7:76:cb:ed:97:40:f9:ac:7a:9a:52:af:2b:24:9e:
f8:05:28:58:e0:3c:f4:f8:56:4b:20:b7:51:8e:9f:
66:6f:21:c1:bb:e3:97:a0:04:a3:7f:9c:1a:fa:47:
f4:7f:d1:b3:f4:88:cf:f7:fa:35:30:ff:20:db:38:
c4:4a:7a:32:86:88:f9:68:fe:fe:a9:bb:2c:12:42:
bf:42:37:4c:45:16:a8:43:40:0f:0e:7e:07:72:20:
e2:9b:ce:2c:b9:4f:23:00:36:a6:3a:f0:7d:13:78:
8f:a0:00:d6:79:41:51:78:e0:b8:30:f6:51:ee:45:
78:2c:83:3e:6f:aa:b9:72:fb:71:79:26:7e:09:11:
cb:49:f8:9f:e5:45:86:cc:93:a7:f1:98:4c:f5:61:
b8:6c:81:32:0b:0d:cd:5d:b8:2c:85:f0:75:02:69:
b1:da:11:63:00:bd:96:2b:21:75:ff:16:ef:3f:17:
96:f5:31:2c:38:b1:86:15:56:50:25:f6:0f:98:23:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:6D:15:29:C0:3E:A6:AB:D3:D4:07:8F:7B:02:44:2E:85:9A:57
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/KXttFSnAPqar09QHj3sCRC6Fmlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:66:2d:62:f4:bd:0a:b8:53:cd:15:b5:5d:17:43:93:a5:
b6:fa:71:1b:82:29:eb:3d:70:86:e4:f6:93:aa:78:ef:4d:79:
6c:5b:47:f8:50:97:9a:7d:75:21:71:8d:74:ac:7b:16:3f:8c:
aa:d3:0c:62:eb:72:28:bb:de:e9:0d:04:3f:0d:11:e8:0e:be:
a3:4d:95:7b:8b:4a:7b:43:55:16:92:80:bd:8a:fd:04:1d:2c:
b9:ba:8c:7b:d4:f8:b0:0c:75:9f:24:ef:38:d9:53:ef:88:aa:
fa:86:43:a7:6d:0a:ae:e5:6b:9e:a5:e1:37:65:3f:fa:ac:1f:
ae:fd:bb:df:21:d3:aa:25:65:05:50:db:01:c8:bb:7d:27:66:
1d:bc:d3:eb:65:ed:54:50:13:b8:c5:97:65:68:87:e4:f6:14:
ba:e3:45:4f:92:38:ab:44:4a:bc:8e:c5:41:fe:a3:03:0c:84:
52:bd:69:3a:b4:1f:a7:3e:35:2c:3a:81:88:6f:d3:8b:70:55:
73:47:1b:73:57:ca:7e:5a:e2:05:f6:61:19:41:76:bc:03:7b:
1c:82:b3:f2:7e:3a:fb:99:98:c7:0d:b8:9b:90:a2:06:eb:25:
4e:ee:1c:51:ea:74:ff:0e:74:e3:34:6d:d1:55:00:7c:55:6b:
b0:7f:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net