Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/rE5_8EdO74FR1D2N56dPIMpl6ho.roa
File: rE5_8EdO74FR1D2N56dPIMpl6ho.roa (raw, json)
Hash identifier: f/ZOO5FjgIKKZ2B8F6OQHtrmJ9w0vlABvvG71ccUDCg=
Subject key identifier: AC:4E:7F:F0:47:4E:EF:81:51:D4:3D:8D:E7:A7:4F:20:CA:65:EA:1A
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019377B152AE81B601F107FBE5EFA7655B80
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/rE5_8EdO74FR1D2N56dPIMpl6ho.roa
Signing time: Fri 29 Nov 2024 11:32:09 +0000
ROA not before: Fri 29 Nov 2024 11:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25267
IP address blocks: 79.170.64.0/24 maxlen: 24
79.170.66.0/24 maxlen: 24
79.170.68.0/24 maxlen: 24
79.170.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:b1:52:ae:81:b6:01:f1:07:fb:e5:ef:a7:65:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Nov 29 11:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac4e7ff0474eef8151d43d8de7a74f20ca65ea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:d5:96:15:ce:e1:78:8d:14:42:10:61:96:
a5:f3:f6:cf:25:bf:2c:8f:e2:2d:7b:b7:02:39:6d:
9b:ce:70:22:da:8b:1a:0c:b5:72:e7:73:33:22:0a:
3e:6b:26:c1:1b:17:1d:b9:17:fb:cd:ec:cf:67:8d:
32:fd:91:3a:e3:97:90:0f:c4:67:c4:b2:18:ac:60:
6a:a0:da:df:e0:3a:d0:04:8b:bf:da:d5:7f:14:24:
79:0e:71:17:9c:7a:4e:8c:5a:dc:ab:a9:18:f6:8e:
f7:10:c5:c3:ed:29:2b:7a:4c:14:36:fb:06:38:1a:
da:d1:d1:a5:7e:34:1e:2b:61:dd:a4:52:76:4d:42:
31:92:c4:ea:dc:63:0c:5d:44:7a:81:50:d3:12:bd:
da:59:32:0c:3d:54:7f:1e:d3:3f:05:98:ae:ee:cc:
b8:6a:c8:0d:0d:54:e4:41:b6:e0:07:4c:e4:1b:9a:
40:37:91:e0:1d:e8:03:c1:e9:a7:a2:88:2b:1c:97:
29:95:45:c1:29:61:d7:c1:6e:13:45:a1:3d:66:ce:
e0:8b:75:0e:1c:c0:50:1c:86:a1:7f:10:76:50:cb:
01:68:6d:7f:b5:65:4c:ff:b0:1f:8e:8b:aa:2a:3e:
38:96:cb:f7:aa:1a:19:e5:55:12:78:1c:28:69:24:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:7F:F0:47:4E:EF:81:51:D4:3D:8D:E7:A7:4F:20:CA:65:EA:1A
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/rE5_8EdO74FR1D2N56dPIMpl6ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.64.0/24
79.170.66.0/24
79.170.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:b9:ad:2b:32:8d:7f:30:08:84:1f:35:2d:01:ae:48:d5:6b:
e1:37:e3:bd:8d:e3:19:0c:71:3b:e5:75:5b:06:5b:6c:65:1b:
77:6c:cb:a7:ca:5f:cc:83:9e:c4:51:06:d3:72:94:b3:0d:56:
09:b1:69:24:05:7b:c5:00:06:64:e5:05:e2:b3:8d:39:7d:e9:
89:02:8d:6a:ff:04:c8:75:2e:94:36:92:b2:02:1a:96:6e:61:
23:35:4c:a2:01:06:2c:1c:86:a5:69:68:ca:3b:3e:53:f6:19:
e7:eb:04:76:0c:94:90:c5:7c:58:ee:48:57:0e:35:fe:62:48:
4b:09:2a:83:15:e7:2c:11:7f:5a:45:62:47:5c:6b:1c:5e:8f:
c5:52:7f:9c:a5:7c:3c:d7:c1:ec:44:c2:18:ef:f0:76:77:24:
cb:59:06:e9:1c:8d:55:f9:f8:45:a1:8d:4a:6a:a5:fd:37:82:
11:9c:02:5f:3c:55:3c:b8:5d:24:d2:f3:da:3f:c7:f6:f1:96:
dc:57:02:73:96:75:a0:89:4c:db:d6:88:47:a7:e1:7c:e4:b0:
0e:4d:25:fd:15:c6:35:b1:27:70:04:7c:b0:25:94:5f:89:5c:
54:63:25:dc:f5:bc:93:26:31:84:e5:80:e6:83:80:7a:28:38:
bd:59:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:18 2025 by rpki-client