Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/UjR3NmpI7kOz8M-uemEyK2rhcag.roa
File: UjR3NmpI7kOz8M-uemEyK2rhcag.roa (raw, json)
Hash identifier: MC7thivHKNWwp6gQwwvEbz/2uW6boNI1f68JR34yAWI=
Subject key identifier: 52:34:77:36:6A:48:EE:43:B3:F0:CF:AE:7A:61:32:2B:6A:E1:71:A8
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01939CB75B040161F2E846EDAE96EEB503F9
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/UjR3NmpI7kOz8M-uemEyK2rhcag.roa
Signing time: Fri 06 Dec 2024 16:04:42 +0000
ROA not before: Fri 06 Dec 2024 16:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 145.69.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:b7:5b:04:01:61:f2:e8:46:ed:ae:96:ee:b5:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Dec 6 16:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=523477366a48ee43b3f0cfae7a61322b6ae171a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:bc:72:62:09:97:85:55:38:5c:da:f1:c3:
00:57:41:4d:11:0d:a8:bf:70:19:f3:e9:90:d4:99:
d0:7c:3b:fb:21:0a:28:a7:f6:64:6d:c0:e8:ab:88:
92:9b:74:4c:8b:08:e1:de:23:2b:9e:be:b3:6b:8c:
9c:89:aa:32:bb:2c:ed:4a:71:a4:50:27:07:e8:f4:
54:49:5b:c7:79:8a:41:2d:33:53:51:bd:fb:d6:3f:
95:af:44:d1:57:a6:0e:7a:bc:59:d8:35:a4:68:10:
4b:9d:ca:91:2d:19:fb:8e:cb:68:7a:09:08:b9:7e:
81:96:9d:43:59:3d:a5:62:24:4a:c5:80:8e:d4:51:
b5:46:7a:d3:ea:26:48:92:6e:b9:a8:09:b3:9e:43:
58:59:3b:fb:e4:fa:6e:3b:f9:b7:31:61:d3:fc:c5:
01:e0:3b:25:ad:16:c7:fe:0c:a5:89:3c:f4:9b:d0:
9f:35:db:15:71:03:18:c2:4b:5c:23:77:19:0b:54:
77:9c:e9:b9:ed:37:17:b0:20:e0:bd:c3:ea:b4:4c:
dd:2f:c1:88:c2:1f:c1:df:1c:d9:70:14:10:b3:11:
1c:43:4c:1b:7d:f2:1f:1c:10:e8:5c:c0:2e:26:d7:
5e:34:e5:75:ca:89:9a:74:b4:99:22:62:8b:d5:d8:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:77:36:6A:48:EE:43:B3:F0:CF:AE:7A:61:32:2B:6A:E1:71:A8
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/UjR3NmpI7kOz8M-uemEyK2rhcag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.69.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:8c:cc:41:8e:00:b5:16:e0:3f:ab:6f:86:b7:27:25:84:27:
5a:e6:39:cb:6e:6d:45:6b:49:f4:93:fc:36:e1:f6:de:20:85:
94:e7:f5:23:0f:7a:57:f2:20:b7:13:84:3d:70:68:f8:b5:78:
24:ab:f2:31:9f:8e:3f:32:05:7c:f8:59:47:1d:10:03:aa:f4:
26:5f:21:d3:d6:5a:68:42:43:1d:74:f1:27:29:65:e6:75:f0:
8b:b8:d7:78:a9:58:d6:ac:29:84:e2:fd:8a:00:6b:a0:cf:28:
82:2d:1a:bc:19:d5:00:c3:69:df:20:7a:be:e1:5c:26:f7:cc:
5d:70:6e:80:21:61:79:54:2b:bb:a0:21:d2:48:d2:f8:2b:1a:
d5:18:8e:44:0b:4d:f6:ee:e5:04:d4:ff:5d:a2:f9:40:ce:6c:
da:aa:ba:c6:83:8d:12:19:97:03:a5:31:30:e8:c3:1d:60:dc:
b4:db:25:f3:46:c0:d3:51:05:89:e8:c1:55:9b:c3:c3:09:b4:
c0:a2:da:5b:93:c2:4d:1c:f3:29:31:14:21:73:87:88:fb:84:
b6:c8:36:45:fa:09:4a:99:d4:58:b5:9c:37:93:0d:d5:e9:c8:
04:4e:f5:36:71:63:8f:c7:6c:25:f3:76:be:c9:a8:85:86:c6:
e0:8d:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:36 2024 by rpki-client on console.sobornost.net