Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/kVI4qowU6vt95QeVTCav5OtDUtw.roa
File: kVI4qowU6vt95QeVTCav5OtDUtw.roa (raw, json)
Hash identifier: m1p2JYNttA/WJjqEDCNrYLqaQljONcTheMLzQOUvwik=
Subject key identifier: 91:52:38:AA:8C:14:EA:FB:7D:E5:07:95:4C:26:AF:E4:EB:43:52:DC
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 0193BB20587E5524060E58BC55156527C9CB
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/kVI4qowU6vt95QeVTCav5OtDUtw.roa
Signing time: Thu 12 Dec 2024 13:47:59 +0000
ROA not before: Thu 12 Dec 2024 13:47:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44335
IP address blocks: 109.234.217.0/24 maxlen: 24
109.234.218.0/24 maxlen: 24
195.93.200.0/23 maxlen: 23
2a00:1c08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:20:58:7e:55:24:06:0e:58:bc:55:15:65:27:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Dec 12 13:47:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=915238aa8c14eafb7de507954c26afe4eb4352dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:3d:00:ff:02:93:1f:12:1c:ca:4b:f6:00:
49:12:e0:f1:7f:92:a2:86:5f:cf:64:1b:74:5e:ab:
4a:39:f9:9b:f6:1b:e5:3f:00:6f:93:57:1e:06:7b:
c8:49:00:77:1b:d3:1f:d6:94:56:16:36:a6:97:3f:
90:eb:00:8f:33:ca:cd:28:e0:3b:aa:39:84:95:ad:
84:37:5c:83:5a:a5:2f:4d:90:18:d0:d3:58:77:39:
a5:a9:1e:7a:27:0a:43:4a:83:b9:4a:d6:1b:d6:66:
bf:a8:3e:db:0f:31:b7:55:16:a7:e1:c5:58:a7:5d:
96:d3:2f:64:ec:37:85:a4:9a:bb:4a:e0:51:7a:3f:
d3:a1:f7:84:98:27:40:e0:94:07:e1:b4:31:ad:ed:
fe:43:35:48:cf:e1:78:b5:e5:c8:63:dd:59:40:d5:
67:35:70:5a:88:8d:2b:b0:87:0a:2f:a5:73:58:69:
6c:57:89:dd:20:72:4c:c1:6f:47:8b:61:54:2b:11:
04:f3:54:2f:cc:8c:96:9c:15:15:c6:0f:d6:6e:0a:
b3:66:f9:ad:83:d2:87:1a:e8:26:6f:e0:41:5d:7d:
65:20:25:36:a7:f6:90:70:04:34:0f:44:40:69:0d:
c9:80:ab:7a:04:7f:db:ab:66:80:3f:05:4d:3e:5e:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:38:AA:8C:14:EA:FB:7D:E5:07:95:4C:26:AF:E4:EB:43:52:DC
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/kVI4qowU6vt95QeVTCav5OtDUtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.217.0-109.234.218.255
195.93.200.0/23
IPv6:
2a00:1c08::/32
Signature Algorithm: sha256WithRSAEncryption
d0:86:3f:2b:96:fc:7e:6e:de:f1:85:4b:1e:07:01:dc:d2:3a:
c0:1d:98:d5:89:b9:cf:45:dd:a4:bc:6c:b0:46:22:34:4d:37:
0f:fa:d6:1d:f6:c9:7a:2a:f8:bd:04:34:6c:1e:6c:3b:d2:96:
9b:67:65:37:e7:60:ac:4a:f1:e5:6b:a2:f1:23:66:ca:47:21:
23:20:c2:d1:a0:41:20:1b:39:39:a5:54:ed:36:ea:c8:ed:b5:
55:f4:30:6e:4a:fe:2f:08:71:2f:29:61:6e:7a:c1:8d:d0:df:
60:27:1b:db:d5:00:80:48:57:e2:f2:3b:8f:74:06:a5:75:9b:
9c:bf:b3:53:ed:4b:a9:90:89:b7:63:a6:4b:9e:d1:2b:47:19:
37:e6:f7:99:26:8e:de:5a:83:50:57:e2:f2:9d:98:71:09:87:
48:50:eb:dc:50:02:44:f8:3c:94:44:b3:50:86:95:d0:c5:1a:
6c:03:7b:d2:7f:9e:f5:56:9a:f1:57:f3:27:80:1b:b7:6c:cb:
11:c4:08:3d:11:45:95:4a:48:b6:70:73:31:9c:94:bc:5c:e1:
b2:03:56:a8:57:77:e1:68:28:b8:83:73:ab:5e:fe:63:9c:49:
92:4e:f8:52:e2:4a:98:b9:95:d1:7c:9b:48:b3:6f:22:29:c1:
dd:0a:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:30 2024 by rpki-client on console.sobornost.net