Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/JQ6n0dnfOPofj3DyfAE42CNqDec.roa
File: JQ6n0dnfOPofj3DyfAE42CNqDec.roa (raw, json)
Hash identifier: xX3cuV89ReuaKfLqQeQVFRiUtZokwKWGsSxDGqmB8yI=
Subject key identifier: 25:0E:A7:D1:D9:DF:38:FA:1F:8F:70:F2:7C:01:38:D8:23:6A:0D:E7
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 018CC64A7F4B94427CDE8C8673D3B71978EE
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/JQ6n0dnfOPofj3DyfAE42CNqDec.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213178
IP address blocks: 185.163.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7f:4b:94:42:7c:de:8c:86:73:d3:b7:19:78:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250ea7d1d9df38fa1f8f70f27c0138d8236a0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:c1:ed:28:26:87:a3:3b:93:75:85:63:1f:
e9:3e:2e:a2:bc:4d:f8:04:26:3a:9e:76:b4:d8:2f:
2f:77:00:56:6a:e1:75:94:da:1d:d0:01:23:ec:3f:
87:4a:3b:4c:ee:97:c4:45:9a:2b:10:de:f6:88:9c:
27:1a:bf:26:9a:b9:3c:1c:03:ea:24:d9:da:96:64:
a4:b5:fe:f0:e1:14:6e:67:48:e0:81:00:9f:31:36:
9a:17:27:0e:5e:da:c1:43:b8:5a:bb:bf:e5:9e:78:
89:bc:15:49:f5:2c:1d:3e:c7:0b:e3:62:41:e6:1b:
c4:54:af:ae:3e:79:96:78:8e:50:63:95:7e:ee:44:
ab:37:e2:53:a5:17:aa:66:b1:ae:d0:c6:6e:1d:8c:
b3:57:34:29:2d:da:76:71:29:dd:c8:eb:ff:ea:13:
d0:55:71:a3:06:d4:d1:f0:b1:54:54:23:c5:6f:38:
26:a6:59:21:e9:63:e6:5b:dc:74:99:69:24:91:74:
26:da:82:92:b9:b6:9d:41:74:84:92:17:f7:b0:f9:
ed:7b:bf:66:c9:8f:28:5b:05:13:4d:50:87:46:ae:
cf:a3:26:c8:69:99:b0:d2:ce:8d:f4:5f:e0:e7:db:
b6:52:7e:0b:ab:9a:32:29:74:16:27:d3:a4:28:a7:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:A7:D1:D9:DF:38:FA:1F:8F:70:F2:7C:01:38:D8:23:6A:0D:E7
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/JQ6n0dnfOPofj3DyfAE42CNqDec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.48.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7f:d5:51:f7:77:d4:f9:e5:0e:bc:17:4e:14:a1:e1:8b:d7:
cb:a7:e7:50:4f:af:ec:28:1e:06:38:3d:b1:3c:82:96:1f:a4:
20:d5:ad:69:e2:c4:15:23:10:4b:25:da:5e:72:50:27:8d:27:
92:ab:89:bd:a9:65:a3:59:57:e8:e3:96:fd:db:bb:e5:dd:32:
cd:5d:d7:73:79:d9:b5:f7:1b:4b:b8:85:6d:8a:2d:33:62:44:
a8:07:bd:4d:58:d7:76:ce:fe:1e:03:d1:4d:bf:4d:94:5f:5d:
d2:87:be:ee:75:0f:60:ff:86:f0:78:9b:7b:ec:d4:b6:e0:9f:
1a:03:b5:f5:c9:0b:8b:56:d4:87:66:45:73:fa:ed:2d:92:6a:
e0:6a:ee:e1:8c:59:a5:1c:a2:77:fc:f1:be:25:10:34:27:6d:
4d:f1:b5:d9:47:6c:7d:a5:c6:95:51:a2:73:4e:7c:26:61:17:
86:fd:bb:f8:14:07:0c:2b:22:af:41:36:88:f4:e5:42:41:a3:
0e:fc:ff:02:e3:20:19:db:86:29:a6:d0:b0:eb:29:e6:28:cf:
98:87:a3:e0:0f:8d:cc:d7:3b:0b:c0:77:65:82:ef:9c:42:0c:
5b:88:1e:3d:65:d5:fb:f3:8e:3a:50:8b:72:f1:34:2c:cd:bf:
28:ce:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:38 2024 by rpki-client on console.sobornost.net