Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/nzmCuWZ8PlAcwp4HLp--orJ3OoE.roa
File: nzmCuWZ8PlAcwp4HLp--orJ3OoE.roa (raw, json)
Hash identifier: IUixgUEvDr5vFENqSl/l6OrvwAnub7HG0DUG28NSnjU=
Subject key identifier: 9F:39:82:B9:66:7C:3E:50:1C:C2:9E:07:2E:9F:BE:A2:B2:77:3A:81
Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial: 019373094FF26AD308F0627085FBCC82F357
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/nzmCuWZ8PlAcwp4HLp--orJ3OoE.roa
Signing time: Thu 28 Nov 2024 13:50:10 +0000
ROA not before: Thu 28 Nov 2024 13:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216293
IP address blocks: 212.46.60.0/24 maxlen: 24
2a13:d9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:09:4f:f2:6a:d3:08:f0:62:70:85:fb:cc:82:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Validity
Not Before: Nov 28 13:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f3982b9667c3e501cc29e072e9fbea2b2773a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:0c:61:44:7d:59:d7:2c:60:da:3b:ef:ce:
a6:bd:8a:b8:02:f6:9e:63:6e:25:1a:0f:5d:30:f6:
94:2d:d1:fe:a2:e7:80:d4:0b:ea:d0:8a:2a:36:81:
48:ab:97:89:5e:d6:64:e2:83:8b:4d:ef:fb:17:18:
42:22:00:b7:3f:77:d6:7c:12:a8:d3:61:99:2d:77:
83:9f:2e:c5:87:fe:51:4c:4b:fb:e8:89:1f:5c:06:
1a:96:03:aa:1b:61:4e:fe:08:fb:05:8c:56:74:30:
7e:ac:d2:14:9f:19:36:70:fd:24:01:0f:7d:3a:ea:
a3:12:a2:57:cc:98:e4:cd:9a:f4:ef:78:96:3f:d8:
cb:cc:5c:15:70:cc:db:7d:64:db:2c:54:93:d1:a0:
08:64:db:7b:0d:c0:2d:18:2e:3d:d3:18:32:6a:e0:
ae:1e:10:a3:76:30:90:a3:7c:f6:f4:f7:54:76:e1:
7f:4f:7b:4a:b5:0e:16:4a:c9:1d:6c:b9:cb:19:b3:
3e:12:6f:98:a3:d3:24:8f:f3:85:7d:27:47:d8:23:
ca:32:3e:68:76:7f:9b:69:89:1e:b0:ed:b3:b1:f8:
a7:5e:6d:c1:71:49:1d:b5:e1:cc:ca:95:90:19:8a:
f0:dc:3b:84:c7:01:66:14:f8:33:27:09:d6:15:a8:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:82:B9:66:7C:3E:50:1C:C2:9E:07:2E:9F:BE:A2:B2:77:3A:81
X509v3 Authority Key Identifier:
keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/nzmCuWZ8PlAcwp4HLp--orJ3OoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.60.0/24
IPv6:
2a13:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:bc:0a:85:d1:3b:58:06:03:d5:6f:1f:ed:3b:24:f9:7f:bf:
21:06:52:bb:50:64:02:65:ce:98:02:b7:dc:13:4c:70:70:91:
9e:a4:15:21:49:e0:46:67:4f:d0:ff:28:8b:43:7f:e7:71:a5:
6e:e8:31:3c:4f:79:7c:9e:0c:4a:72:58:7f:7a:25:d4:ee:a1:
d4:97:aa:1b:46:ce:1d:1b:e9:9d:fe:d3:37:6d:6b:25:23:42:
df:10:6d:9d:e1:13:9c:e2:8f:7f:e6:bc:47:79:8f:9f:09:cd:
78:7e:af:89:b9:f2:92:9d:07:23:63:0c:92:4b:69:f6:64:92:
a1:69:d9:d1:54:2b:cd:8d:0d:54:bc:78:6b:6f:fe:d5:5a:6f:
ce:e3:7c:75:80:f4:40:0b:a4:e7:1a:95:2c:32:db:3e:27:b4:
8e:f9:a0:89:29:b9:f9:c6:38:cd:1f:f1:30:27:ef:2d:86:12:
d0:39:8d:6b:23:84:62:bd:d4:ae:ce:48:a8:bb:ed:f1:d9:8a:
0e:a2:bc:64:6e:35:77:51:80:f9:f2:7a:09:50:e6:fe:38:bb:
0b:df:4c:d9:06:49:b2:26:ed:2a:2e:7c:c0:d0:c1:ae:cf:c2:
93:78:e4:88:4d:a1:18:0d:a4:17:a5:01:a4:c3:7c:c0:2b:8c:
96:74:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net