Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/cCjvNuaeeoVC4j7NlrfzN66YbhU.roa
File: cCjvNuaeeoVC4j7NlrfzN66YbhU.roa (raw, json)
Hash identifier: UOYViClJtU67wZgaGcjn1nocoPrIiCScHoHl0HPnWds=
Subject key identifier: 70:28:EF:36:E6:9E:7A:85:42:E2:3E:CD:96:B7:F3:37:AE:98:6E:15
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 018CC8DF9671123374A9580BF49800E6824F
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/cCjvNuaeeoVC4j7NlrfzN66YbhU.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62340
IP address blocks: 185.39.112.0/23 maxlen: 23
185.39.114.0/23 maxlen: 23
92.43.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:96:71:12:33:74:a9:58:0b:f4:98:00:e6:82:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7028ef36e69e7a8542e23ecd96b7f337ae986e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:4d:9c:8a:36:ca:cd:b6:5f:d5:6d:19:24:
6c:34:a6:42:2b:6d:f6:e3:66:2e:2c:f2:e4:01:aa:
d2:ba:96:6b:46:ad:22:74:d3:ac:6c:34:6f:8e:52:
2e:90:72:24:3d:e1:67:48:07:67:e1:f8:9a:f9:f5:
9e:01:5b:4e:31:15:af:e3:aa:70:eb:29:a4:d4:72:
32:ff:93:9e:ba:dd:60:40:28:cb:d5:80:b4:be:3e:
c3:b7:c9:94:a7:61:4c:1b:59:72:a2:73:f1:ac:90:
2b:4f:97:22:15:64:77:68:4d:7c:99:76:6b:66:04:
3f:04:49:e4:6e:f4:d6:bf:03:30:81:cb:09:fe:b6:
7e:5e:2e:4a:47:00:cb:ad:f1:85:cc:d4:ec:f0:28:
7d:23:90:34:31:ec:65:a5:80:f6:08:81:5a:c3:7b:
73:69:f7:3f:22:32:d6:3e:ac:71:62:24:30:44:00:
a9:35:49:ab:dd:57:05:b2:ae:1a:8d:43:03:78:a9:
ce:a2:99:87:48:7a:5e:1d:75:9e:d7:24:80:06:31:
48:f8:79:05:50:b7:ad:f7:f5:55:e4:3b:8f:a3:05:
5b:60:a6:2a:83:d5:ae:a2:c6:32:13:1d:c4:7e:94:
a5:2f:02:4b:b1:5a:88:50:8e:8c:94:15:89:0d:1e:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:EF:36:E6:9E:7A:85:42:E2:3E:CD:96:B7:F3:37:AE:98:6E:15
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/cCjvNuaeeoVC4j7NlrfzN66YbhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.166.0/23
185.39.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:dc:a2:75:c5:68:4f:0b:80:cb:16:aa:ba:8c:9e:12:cd:cb:
50:be:15:5c:90:c8:ba:07:14:b2:e9:c1:e4:bf:2e:53:22:d0:
c9:2c:2e:c8:19:18:d6:51:1c:d1:5e:95:46:b5:9d:77:a4:88:
41:e0:fd:92:e9:ea:4e:81:6b:54:38:a2:8e:b0:d6:46:aa:48:
5a:ca:7d:6f:52:0c:1c:be:eb:21:0c:c2:06:a6:1b:d6:40:0e:
7f:11:e7:3e:a4:5e:05:27:03:f1:b6:63:7b:2f:4c:8b:63:93:
9a:c2:0c:1f:fc:f7:49:ab:92:82:9f:87:8e:4d:94:8d:2a:28:
7f:3e:a7:b3:cb:d2:50:e1:61:5b:da:35:84:d5:07:dc:75:b1:
a3:98:c0:cd:24:2b:97:95:d5:63:64:f7:ca:a4:f1:fc:20:dd:
ec:26:f6:a1:1f:c8:e5:4d:b4:dc:b2:09:02:d1:7f:46:37:75:
f5:83:16:ba:6e:69:c1:00:1d:64:a0:9b:1f:e9:ec:28:17:7f:
9c:1e:b7:ae:d1:b8:2d:7f:99:6c:52:4e:a0:89:c6:1f:83:fd:
35:da:0b:d9:25:00:ca:30:80:43:61:bb:03:d9:0a:85:6b:d3:
8c:ec:94:a8:49:28:96:39:e5:e2:c8:72:15:7c:a9:68:87:e0:
98:24:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net