Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/39fpM_C-RzvGxeIWtFY7jylI9Uw.roa
File: 39fpM_C-RzvGxeIWtFY7jylI9Uw.roa (raw, json)
Hash identifier: gQfSuQfxcZa14GTS4ZpCPzmBsJ+Lb3I6A1yybYYg4tc=
Subject key identifier: DF:D7:E9:33:F0:BE:47:3B:C6:C5:E2:16:B4:56:3B:8F:29:48:F5:4C
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 018CC86F7D734BF468132AAC19B27C6F6373
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/39fpM_C-RzvGxeIWtFY7jylI9Uw.roa
Signing time: Tue 02 Jan 2024 04:29:58 +0000
ROA not before: Tue 02 Jan 2024 04:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60132
IP address blocks: 195.191.128.0/23 maxlen: 24
195.191.90.0/23 maxlen: 24
2a13:2080::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:7d:73:4b:f4:68:13:2a:ac:19:b2:7c:6f:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Jan 2 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfd7e933f0be473bc6c5e216b4563b8f2948f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:97:0d:3d:d8:b7:2e:b6:6c:09:d2:36:2e:
bd:c1:9c:e0:4d:73:61:bd:0e:55:07:47:42:a3:46:
f9:a0:48:cd:f9:3e:bc:c2:78:8a:cf:65:4a:5d:81:
fa:95:fd:a3:d5:7b:84:a3:ce:63:7c:f3:d3:1d:b0:
98:55:bc:ac:9b:ee:af:89:58:7e:42:d6:ea:e9:43:
d4:aa:e6:58:b5:a8:e3:5a:09:bf:3c:11:cb:26:3f:
d6:e4:b9:d0:0c:d4:ac:03:13:b1:8b:01:ed:c5:fa:
ce:9b:ff:79:87:74:f9:0b:50:7e:73:76:d5:0f:10:
3a:19:29:40:39:8a:3a:8f:ff:4e:f4:db:27:53:a4:
66:3d:da:fe:cb:f0:8a:fc:cc:7d:0b:18:fa:e4:62:
dd:b7:82:36:94:fa:4e:9e:fe:72:c4:73:f4:2b:a5:
f2:02:ea:56:6f:b2:2c:56:05:c2:8c:65:cd:85:3f:
61:ae:69:9b:8e:bd:bf:09:d4:64:48:7d:a2:c6:a7:
81:a2:1f:5e:ef:cb:04:9f:01:c1:be:12:52:71:17:
95:d2:e3:f7:49:ae:e2:ea:9b:c8:9e:1f:98:a9:b4:
f8:8f:ef:e7:ac:e2:73:c9:b2:ce:2d:cc:39:74:21:
b5:44:b9:bf:34:ce:bd:1b:c7:d4:e0:38:81:57:45:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:E9:33:F0:BE:47:3B:C6:C5:E2:16:B4:56:3B:8F:29:48:F5:4C
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/39fpM_C-RzvGxeIWtFY7jylI9Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.90.0/23
195.191.128.0/23
IPv6:
2a13:2080::/29
Signature Algorithm: sha256WithRSAEncryption
55:0a:69:7f:1f:7d:da:3f:81:1b:c8:dc:29:4a:92:81:4b:7e:
96:a0:87:3e:18:08:e2:df:51:53:7e:59:bb:bb:8c:f7:3c:e0:
b1:6f:b3:dd:50:83:76:3e:97:0e:7b:73:46:b7:a6:45:c9:31:
63:b9:c1:74:2d:77:cb:e2:32:7b:be:07:c4:a9:4d:11:57:49:
2c:e5:22:67:65:b4:5c:7b:dc:fe:4a:5b:b2:81:6c:65:1d:79:
d2:20:59:5f:4a:a3:72:7b:e6:97:92:41:c3:a0:28:d2:ba:d5:
00:b2:45:cd:b1:b5:f5:d0:aa:44:d3:8d:4f:09:38:ce:ca:4b:
98:61:15:0a:ce:ff:3f:b7:b1:19:6a:46:16:e7:a1:1b:15:eb:
b7:15:13:ef:6e:d7:4a:f1:62:82:84:40:5c:49:de:f3:9d:43:
44:1d:d1:eb:0d:54:fc:c8:b0:e8:32:5b:72:86:31:6f:c9:b9:
12:de:cc:a5:eb:f0:d4:12:7f:88:d6:d5:7f:57:10:e5:b0:df:
75:2c:09:21:13:9f:fc:ba:bf:b1:13:2e:af:59:df:8d:df:37:
74:bf:da:4a:d3:f8:06:d9:86:4b:a3:64:14:ca:eb:2c:90:ce:
fa:a3:ec:77:cb:92:a0:c9:3a:87:58:d5:0b:ee:d8:92:f1:fb:
57:13:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:24 2024 by rpki-client on console.sobornost.net