Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/eZwPqQj2ZWCHCbR1BJbcFx8kz1c.roa
File: eZwPqQj2ZWCHCbR1BJbcFx8kz1c.roa (raw, json)
Hash identifier: FSUOHMWDpF3bxDRWrTw7XAjdBf6Fi0waysmWDgYfr00=
Subject key identifier: 79:9C:0F:A9:08:F6:65:60:87:09:B4:75:04:96:DC:17:1F:24:CF:57
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 0192293A23D8F2FE6D58E97ECDDC7B29F568
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/eZwPqQj2ZWCHCbR1BJbcFx8kz1c.roa
Signing time: Wed 25 Sep 2024 12:48:48 +0000
ROA not before: Wed 25 Sep 2024 12:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58007
IP address blocks: 95.141.249.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a13:4380::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:3a:23:d8:f2:fe:6d:58:e9:7e:cd:dc:7b:29:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Sep 25 12:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=799c0fa908f665608709b4750496dc171f24cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:8d:7b:d7:61:ef:55:c4:fa:4f:3b:71:fc:
e6:a2:c5:03:30:b2:5e:52:42:44:9a:e2:40:f2:02:
88:02:c5:64:a5:2f:53:65:de:fc:86:6f:e0:43:9a:
04:0d:52:97:f6:f6:49:32:07:99:51:cc:6b:1e:7b:
5a:3d:00:78:24:d5:8d:83:bc:3e:02:35:24:b1:cc:
b8:46:3a:15:06:4e:ea:df:da:13:f8:a7:1c:ee:18:
85:b3:96:4d:24:46:63:1d:96:6a:9f:9f:00:86:3f:
80:cc:6c:e2:42:c0:df:cb:dc:1d:45:67:12:92:be:
a9:d2:19:f8:d1:9d:be:b0:0c:a1:b2:30:e3:76:ce:
91:ab:cb:3e:4e:66:5a:b9:44:84:c7:b0:76:8b:da:
14:c1:80:1b:f1:a7:06:44:67:e6:04:32:c5:8c:0a:
d5:fe:57:66:56:4a:94:92:37:94:ae:e8:50:b2:70:
f4:13:9a:ba:14:84:6b:d2:e2:c2:f6:8e:00:85:54:
53:01:12:e2:26:a0:84:8e:6a:9f:1e:88:c6:97:87:
51:e1:20:5b:37:d6:4f:67:e8:52:5b:dc:cb:10:5b:
c9:36:ee:49:df:ad:be:0e:ef:a6:8a:ba:9c:72:0f:
78:3a:e7:92:5d:2d:04:35:85:bb:2d:69:fe:51:fb:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:0F:A9:08:F6:65:60:87:09:B4:75:04:96:DC:17:1F:24:CF:57
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/eZwPqQj2ZWCHCbR1BJbcFx8kz1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.249.0/24
194.8.28.0/24
IPv6:
2a13:4380::/33
Signature Algorithm: sha256WithRSAEncryption
3a:61:c5:ec:ed:2e:0b:aa:d9:f6:38:84:3e:e4:fd:48:9b:4a:
66:d9:ad:18:c4:75:d2:62:9a:cc:28:b5:c3:3c:61:f9:4b:16:
16:2d:0a:4e:42:2d:77:df:5f:21:20:48:45:c3:96:6f:af:6f:
fd:9a:5c:c3:b0:76:f6:9e:eb:c1:93:b3:24:90:d5:a7:a8:74:
82:ca:89:b1:0c:92:d6:9e:1c:68:5a:4c:8f:09:44:1c:5b:2c:
92:30:b1:1e:8d:eb:b1:a6:ea:4d:c9:67:9e:f0:e6:e2:c7:ca:
df:32:6d:bc:5d:e6:66:63:e2:7a:2e:c5:d6:22:96:f9:f5:76:
e4:35:63:6d:c0:53:0f:73:89:94:4c:ad:43:10:61:57:47:ac:
62:ee:15:6c:35:21:a3:3e:50:04:06:76:fd:e8:50:af:25:5c:
80:37:14:f1:74:e9:55:ae:41:51:bd:f7:61:ae:56:b7:77:64:
19:a1:42:cb:b8:09:0f:98:d3:b8:cc:45:91:df:f0:c7:53:ea:
19:d0:41:46:96:1b:28:11:a0:4f:23:ca:74:82:b0:0c:9c:7a:
dd:ab:e0:f3:ae:e3:92:f1:a4:18:94:c6:6d:80:9d:80:25:f6:
7e:ce:cd:8d:7c:89:5e:b3:21:14:a0:35:ca:94:17:1d:d3:13:
ec:db:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:31:07 2024 by rpki-client on console.sobornost.net