Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/nfdoCRs0szG5En7j1vk3wje0JF0.roa
File: nfdoCRs0szG5En7j1vk3wje0JF0.roa (raw, json)
Hash identifier: dFdeV52OFZyeKl0V7vQ16bPxF+PFG+gSu2XBJPI2C0g=
Subject key identifier: 9D:F7:68:09:1B:34:B3:31:B9:12:7E:E3:D6:F9:37:C2:37:B4:24:5D
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019348EDE2EC5ACDA9937A89470966124790
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/nfdoCRs0szG5En7j1vk3wje0JF0.roa
Signing time: Wed 20 Nov 2024 09:36:09 +0000
ROA not before: Wed 20 Nov 2024 09:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202744
IP address blocks: 94.177.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:ed:e2:ec:5a:cd:a9:93:7a:89:47:09:66:12:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Nov 20 09:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df768091b34b331b9127ee3d6f937c237b4245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:e9:72:f3:b8:e3:45:bc:d4:a8:77:cf:2c:
86:d1:1d:b0:95:c6:cd:c7:e3:60:e3:50:dc:85:9e:
c0:9a:97:4f:d3:79:cd:8e:03:9b:f6:7b:2c:19:db:
62:37:3e:fa:5d:d1:17:99:46:96:43:d0:3f:80:6e:
e0:07:a7:ec:b3:c1:47:d6:48:12:a2:2f:be:93:94:
5b:c5:d5:e6:af:ae:bb:cd:bd:c4:80:c4:dc:c5:94:
5f:8d:5b:dc:2c:86:e7:4b:73:7f:20:05:1a:37:b5:
74:4a:01:b0:39:2a:b9:5f:b6:17:d4:f9:d0:05:97:
df:1b:45:e8:4c:f3:48:65:8f:ff:7a:32:6c:be:81:
62:28:11:e3:59:7e:71:4e:97:db:a4:a4:01:81:9b:
8a:2f:8b:f4:18:9f:27:09:3d:ff:70:d9:05:19:89:
52:db:f4:db:e4:bb:f8:b3:b2:fd:d4:e5:16:25:1e:
7a:3e:3f:4c:75:d1:39:34:c0:34:cf:f6:0d:73:b0:
f3:02:bb:21:2d:a8:19:4b:3d:7c:3a:5a:b3:c3:78:
77:56:e8:3d:58:28:ff:34:9e:f2:d3:5c:43:f2:0e:
af:4e:4a:94:b5:95:84:72:9d:c7:fd:de:12:25:07:
28:e4:c4:a0:d0:8c:48:24:c8:81:d6:ae:96:49:51:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:68:09:1B:34:B3:31:B9:12:7E:E3:D6:F9:37:C2:37:B4:24:5D
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/nfdoCRs0szG5En7j1vk3wje0JF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.129.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cb:dd:05:70:67:6c:72:79:85:05:0d:db:bd:73:83:e2:fc:
e8:28:4f:d9:5d:58:ff:2e:f1:e6:2b:43:0f:e7:ae:f4:23:e8:
aa:1d:4e:7e:0a:e8:43:96:8c:e9:d1:79:cf:e9:cb:4b:7a:a5:
1f:05:2b:da:8c:62:6e:4b:47:83:64:7d:f4:b3:7c:1c:b1:f1:
06:61:93:d0:db:b8:80:0f:2c:87:25:0b:a1:84:42:3c:b2:5d:
ad:aa:a2:34:d2:f5:37:20:52:a4:81:85:59:65:35:e4:19:5d:
43:b5:97:00:b9:a5:3f:1b:76:d0:34:79:e8:0e:73:d4:37:18:
82:25:31:83:fb:16:27:b0:b8:2e:e1:e8:90:d5:a1:1d:35:b5:
88:e7:d6:87:7b:58:2d:57:e0:2a:6e:ad:07:59:1b:2c:7b:dd:
c3:3c:59:e2:de:3e:39:7e:f9:fe:91:22:34:64:bb:f0:aa:dc:
73:6f:56:88:c1:92:ba:91:71:0d:e7:ec:33:88:59:74:18:b2:
e4:c0:18:18:8b:ea:e3:f4:bd:aa:3f:f0:a8:0b:1e:1a:a7:24:
bf:a6:60:a3:92:de:32:f7:5a:58:06:3f:5d:12:d8:fc:07:a9:
94:c6:f6:da:c9:ed:04:97:24:b7:66:3f:7a:99:f5:44:fd:f4:
14:20:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:18 2024 by rpki-client on console.sobornost.net