Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/CW96gHf9TbgkPYbW0liwcdsfWP0.roa
File: CW96gHf9TbgkPYbW0liwcdsfWP0.roa (raw, json)
Hash identifier: R4t7+XGeqSN8oTqJPmend4k0PWA2mb5EFD8tlbDobSo=
Subject key identifier: 09:6F:7A:80:77:FD:4D:B8:24:3D:86:D6:D2:58:B0:71:DB:1F:58:FD
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 018CC500105A0804A53DAFED0F283C31136D
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/CW96gHf9TbgkPYbW0liwcdsfWP0.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8838
IP address blocks: 212.42.0.0/19 maxlen: 19
194.50.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:10:5a:08:04:a5:3d:af:ed:0f:28:3c:31:13:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=096f7a8077fd4db8243d86d6d258b071db1f58fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:48:2b:ea:41:1f:b0:c5:6a:83:ce:22:34:
dc:cf:58:c5:01:e8:b5:64:e5:01:5d:5f:be:f8:79:
ab:10:ff:4f:9c:97:45:4a:59:24:b5:c7:b4:e5:c6:
69:7f:02:d5:09:67:03:65:c4:83:e4:36:72:2b:b7:
1a:56:17:26:06:32:7e:08:3c:e4:84:f4:74:11:97:
f7:60:dc:db:51:b4:76:c4:59:d0:a0:97:0d:57:b7:
ce:fa:50:99:84:75:7a:54:90:a0:60:9a:0e:88:7a:
e8:70:62:6a:7b:18:f9:7c:1a:df:8d:72:67:f9:bb:
7b:2e:c7:b0:0d:a9:41:5d:19:1f:1b:e9:76:e6:b0:
09:ea:a5:01:67:92:6e:81:07:9c:11:93:a6:94:f4:
d2:e4:6a:9b:61:58:16:47:c1:cc:c8:3b:00:be:8e:
b1:59:11:2e:3d:15:aa:a0:d0:76:50:0a:67:8d:fc:
61:33:47:98:66:88:97:79:4a:da:ba:c8:72:b9:98:
7e:8a:f4:65:e9:08:7b:bf:97:c4:3a:ae:85:e1:f6:
b9:14:d9:04:22:ac:d9:5f:5b:66:63:c5:48:a2:37:
71:2c:ec:b7:07:24:2f:91:d1:80:97:93:33:bd:36:
83:25:9d:e5:52:b1:48:ad:a5:a1:68:ec:99:0f:9c:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:7A:80:77:FD:4D:B8:24:3D:86:D6:D2:58:B0:71:DB:1F:58:FD
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/CW96gHf9TbgkPYbW0liwcdsfWP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.108.0/24
212.42.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:1f:e6:9c:0b:8f:a4:44:2e:e2:af:f9:77:83:75:9c:98:71:
e2:fb:42:40:49:01:d8:a2:a6:47:e5:9b:52:fe:48:14:5a:7a:
22:ba:5d:8a:9b:45:f7:65:e8:bc:4e:d0:1b:69:46:29:c7:3f:
4b:50:0f:99:66:8e:e3:27:99:63:64:ae:3e:1f:83:92:c5:4f:
8c:b7:75:41:b7:d6:ee:d3:6a:34:2b:04:e3:a7:65:38:b7:b9:
74:f1:f0:26:a9:ff:4f:2f:ec:42:31:08:7e:20:6a:d3:67:ac:
52:59:37:37:a9:37:fd:72:80:04:1e:9c:68:c9:1a:46:b8:67:
df:e4:d2:bd:88:09:8c:25:3f:96:0e:22:f8:f2:98:75:6f:a5:
b6:7b:65:3d:b9:00:2f:ce:5b:e7:4f:01:c6:8b:0b:6c:39:a6:
7a:20:43:65:16:9c:a0:34:62:ef:45:d5:59:38:00:35:01:7e:
e3:d6:ce:12:9a:ad:15:07:f8:fe:8d:43:6e:d2:f1:b9:62:e6:
b5:92:b3:25:b5:49:7e:73:77:43:6a:95:ed:82:a5:24:08:8e:
3d:06:8c:8a:7e:9e:81:41:44:bd:c8:2a:32:b2:63:e1:3c:94:
4b:a9:f7:21:f0:a2:49:f2:1d:55:64:8d:22:0e:22:f0:66:76:
94:0d:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:40 2024 by rpki-client on console.sobornost.net