Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/E8ljD8ppiFXzkq4Ug9cTBmyRsdw.roa
File: E8ljD8ppiFXzkq4Ug9cTBmyRsdw.roa (raw, json)
Hash identifier: UhahGxs0oXriNNR22QoMumQ948AdXZEhukoUkJv+xzk=
Subject key identifier: 13:C9:63:0F:CA:69:88:55:F3:92:AE:14:83:D7:13:06:6C:91:B1:DC
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 0193DEB4145DBDC88E974D3C0484E6845698
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/E8ljD8ppiFXzkq4Ug9cTBmyRsdw.roa
Signing time: Thu 19 Dec 2024 11:36:03 +0000
ROA not before: Thu 19 Dec 2024 11:36:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206381
IP address blocks: 45.88.227.0/24 maxlen: 24
91.237.151.0/24 maxlen: 24
185.186.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:b4:14:5d:bd:c8:8e:97:4d:3c:04:84:e6:84:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Dec 19 11:36:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c9630fca698855f392ae1483d713066c91b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:2a:dc:26:ee:3a:96:0e:93:21:e8:01:2a:
73:c3:be:d5:04:2e:0a:b2:76:86:ba:88:cc:ec:c4:
de:5e:25:a8:55:68:2e:3e:c1:0c:8f:6e:ad:98:34:
38:01:66:2f:d5:12:e9:95:8d:49:25:4b:9d:f1:d1:
1f:d2:32:d8:02:7f:e7:d2:3b:36:ff:c1:c6:60:7a:
3d:da:82:95:3f:f7:f6:3b:e4:04:71:a4:7c:26:f6:
0d:f1:10:51:0c:a0:9d:a3:bd:e1:0b:65:99:9b:98:
71:21:0e:2c:3d:bf:bb:69:6b:8a:03:dd:67:de:6b:
b6:f8:45:40:00:57:57:b4:54:5a:f6:49:7a:d2:d2:
ab:58:94:bc:d1:a0:be:99:14:d2:96:5d:82:c9:13:
8a:7a:ba:7f:d7:fc:b2:53:03:04:c8:93:f9:f8:41:
7c:41:d5:36:2d:61:5d:c9:ae:89:b2:2f:df:0c:64:
29:26:56:59:30:b1:e3:bc:13:8c:f4:46:b6:b6:c0:
06:6d:89:a5:52:7d:6f:7a:d8:35:5e:eb:c7:8a:21:
96:bc:6e:0b:a0:cc:a0:a4:01:ec:45:82:44:b2:d8:
0a:76:20:3c:43:3a:47:51:0a:3f:41:c6:39:80:45:
a4:e8:41:b5:53:3e:0a:f9:01:3a:25:36:09:31:ce:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:63:0F:CA:69:88:55:F3:92:AE:14:83:D7:13:06:6C:91:B1:DC
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/E8ljD8ppiFXzkq4Ug9cTBmyRsdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.227.0/24
91.237.151.0/24
185.186.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:52:76:5b:47:44:66:40:0e:7e:a9:26:d7:b2:62:dd:5c:27:
e3:6e:a2:ef:24:7d:56:06:fd:b0:e2:94:79:42:3c:7d:c0:80:
56:ce:1b:30:4c:08:f8:bd:2f:d2:e9:43:26:ce:ff:9e:67:76:
3d:73:2b:65:3d:dd:a0:27:7e:31:ce:f4:1a:74:b5:9c:30:45:
db:cb:1d:4c:4a:6b:61:b9:9c:03:f3:f7:e3:75:e0:d8:78:7b:
38:b7:c0:18:d1:66:cc:f2:4c:13:f3:88:7e:99:38:77:c7:2b:
e5:93:49:b3:ba:c0:52:27:57:87:da:b9:fc:c5:56:e1:34:9c:
5a:36:3f:6d:b5:6e:58:9f:c7:e2:ac:8e:aa:52:ab:1c:37:a5:
c7:7d:ec:96:28:50:90:12:ad:c1:d1:f7:8e:95:66:b1:0c:80:
cf:52:2e:44:1e:e3:48:31:17:1c:b8:d2:f1:0d:5b:16:b0:68:
4f:cf:70:5f:6a:9e:81:f1:73:65:54:b6:0a:63:25:d9:92:fe:
ba:c2:e6:94:8c:7d:6e:dc:3f:37:ae:b6:e3:ff:b6:92:ca:f7:
a2:26:fa:79:5f:fe:30:a2:18:a0:bc:1b:47:06:f8:b2:08:84:
09:51:94:29:6c:2a:20:8b:de:ad:b8:71:10:bc:04:61:cd:06:
b7:40:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:33 2024 by rpki-client on console.sobornost.net