Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/2pOiE_IbqIeQgWngesFlyrBVDI0.roa
File: 2pOiE_IbqIeQgWngesFlyrBVDI0.roa (raw, json)
Hash identifier: rH6XQjafwGxCsFssp6C2iDGfhCr3WFEK5Gf/pJGW0f4=
Subject key identifier: DA:93:A2:13:F2:1B:A8:87:90:81:69:E0:7A:C1:65:CA:B0:55:0C:8D
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 018CC348A34AE83955F5A86E472B39A078C5
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/2pOiE_IbqIeQgWngesFlyrBVDI0.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211099
IP address blocks: 194.156.235.0/24 maxlen: 24
94.177.116.0/23 maxlen: 24
2a02:7c9::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a3:4a:e8:39:55:f5:a8:6e:47:2b:39:a0:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da93a213f21ba887908169e07ac165cab0550c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:0a:58:2d:ed:1d:7e:cb:9e:7e:ef:58:75:
cc:ca:2f:d6:87:66:52:48:3e:01:f2:75:2f:cf:b5:
7c:fc:88:a1:aa:cc:68:66:b1:41:80:ed:f0:97:33:
8c:47:c5:70:11:ee:ff:cf:79:d5:f9:4b:73:fa:f7:
03:66:f6:97:78:29:d6:2c:ef:c2:4c:5a:38:cc:27:
05:9a:dc:e4:2a:c7:09:c8:af:50:ef:ac:13:65:be:
a1:b4:6b:33:e9:6e:98:8f:95:19:cb:a3:a4:4f:cf:
03:fa:f2:09:a1:4a:36:c6:54:74:48:a5:8e:67:76:
9e:14:34:8b:8c:12:bd:13:78:c9:93:62:6d:cd:c2:
51:77:d2:61:0c:94:c0:f6:d0:62:4a:7b:44:c0:11:
9b:e6:ba:a7:95:b3:7b:8d:96:be:9c:02:b9:60:70:
1f:f5:07:06:13:74:7e:8f:dd:e6:dc:cd:d9:da:d7:
60:97:de:ca:3b:8f:78:37:ef:bd:c4:18:39:88:5e:
8f:e5:17:f8:37:c2:b3:07:36:1b:6e:ff:6c:23:e0:
12:11:5d:88:a2:89:1c:82:2d:48:95:a9:1a:98:eb:
bd:51:98:f3:c4:21:2a:75:44:20:c9:c8:2c:31:12:
cc:8f:1b:1b:ff:9f:c1:5f:b5:e4:bc:81:8a:bb:86:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:A2:13:F2:1B:A8:87:90:81:69:E0:7A:C1:65:CA:B0:55:0C:8D
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/2pOiE_IbqIeQgWngesFlyrBVDI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.116.0/23
194.156.235.0/24
IPv6:
2a02:7c9::/44
Signature Algorithm: sha256WithRSAEncryption
95:52:6d:ff:e9:68:20:07:3e:9f:1c:6c:8e:1e:e2:3f:51:55:
43:8d:ec:fc:bc:e8:ae:1c:0f:32:98:d8:c8:c7:ff:c4:15:e4:
89:ab:76:14:44:d2:f5:96:e9:35:50:99:0f:5e:16:cf:47:40:
fe:5f:1a:ea:76:d3:e5:2b:96:90:12:5c:59:d7:92:8b:15:24:
df:05:e6:4e:e8:b0:8f:93:1c:37:8d:bd:5b:16:9a:84:e6:0b:
ee:bc:a6:f1:9d:c1:ab:98:44:2a:dd:cc:e9:3c:0a:73:a2:00:
79:cb:e3:e8:91:61:48:31:37:58:ea:e2:d2:88:e4:2c:ec:90:
75:54:2c:3f:ef:c1:d1:ea:12:d6:d0:4c:05:73:13:9f:56:c2:
d1:0d:ee:45:15:f7:b1:64:0e:d2:f0:72:1e:36:7a:74:22:73:
68:81:62:bb:a2:09:ac:23:c7:4f:75:0e:5b:ce:9c:84:aa:a8:
b6:18:23:63:1e:27:8e:b6:16:6e:99:65:17:92:97:f5:4e:be:
aa:26:2b:67:0e:e5:6e:b6:c4:0e:1a:e3:98:39:9d:61:0f:99:
29:47:4d:c4:72:28:8c:09:42:f0:fe:4d:d6:42:45:47:b0:fb:
3f:e8:20:49:6e:f8:41:d2:08:21:3a:52:ed:01:1c:af:ad:a0:
5f:dc:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:18 2024 by rpki-client on console.sobornost.net