Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/6yPCoAIWOgcfv53bdL3D-O_DyNI.roa
File: 6yPCoAIWOgcfv53bdL3D-O_DyNI.roa (raw, json)
Hash identifier: C7rNjtP18+nOGP70C4LX/I1s/GC8munjzyBgkXjI7VQ=
Subject key identifier: EB:23:C2:A0:02:16:3A:07:1F:BF:9D:DB:74:BD:C3:F8:EF:C3:C8:D2
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 01932A9B22A88B46C9677847AEEB7C04058A
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/6yPCoAIWOgcfv53bdL3D-O_DyNI.roa
Signing time: Thu 14 Nov 2024 12:17:10 +0000
ROA not before: Thu 14 Nov 2024 12:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44542
IP address blocks: 93.92.136.0/21 maxlen: 24
93.92.136.0/22 maxlen: 22
93.92.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:9b:22:a8:8b:46:c9:67:78:47:ae:eb:7c:04:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Nov 14 12:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb23c2a002163a071fbf9ddb74bdc3f8efc3c8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:dd:85:97:1b:37:92:e4:69:27:92:df:4a:
be:6b:d0:69:17:e5:2f:fb:90:fc:82:38:87:dc:04:
e4:5a:c9:92:7e:0b:e8:ab:c8:61:11:d8:cb:71:52:
a4:05:f2:2a:5b:2b:7c:a0:cc:28:74:08:59:64:34:
1f:b9:a4:7b:75:ce:af:9c:75:cd:42:09:9e:a7:68:
3c:fa:00:50:db:4a:c2:92:dc:0d:48:bd:8d:03:a4:
ac:80:6b:90:0f:cc:01:7f:b8:c9:b2:a8:f0:a2:fc:
d5:4d:93:9f:16:22:04:ed:1d:5a:8a:65:30:bd:91:
30:f2:84:5f:0f:55:df:bd:c3:45:81:95:31:94:cb:
cb:14:0a:dc:ee:65:9b:d9:3c:9a:d3:13:58:2c:bc:
41:cd:19:01:4b:b9:0c:67:ce:60:ad:d8:f4:5d:37:
58:9e:73:61:73:b2:be:6e:33:81:6d:c7:0e:ae:5f:
4d:9c:8f:c0:a3:5c:29:04:ce:7a:b1:83:7e:df:f9:
65:fe:d8:a8:37:9e:8f:2f:e4:e0:31:7e:de:bc:cd:
fa:f1:ba:f3:e7:2c:d7:f4:eb:8b:b1:4b:06:ee:44:
83:14:d1:f9:61:41:26:2a:0a:03:af:75:ac:99:70:
dc:50:ef:50:e0:5d:73:2d:1a:ac:69:2f:a4:78:13:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:C2:A0:02:16:3A:07:1F:BF:9D:DB:74:BD:C3:F8:EF:C3:C8:D2
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/6yPCoAIWOgcfv53bdL3D-O_DyNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.136.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:f2:f0:6f:b1:71:8c:96:51:23:9e:ad:ab:23:a6:b9:70:8a:
45:f5:97:77:cf:cc:55:1a:e3:d8:98:27:eb:1f:26:a2:2e:e5:
c7:35:4f:d7:19:96:1b:29:14:59:c8:50:05:39:41:f8:9c:1e:
71:04:1c:a4:47:4c:92:94:18:9a:dc:24:af:3b:f2:3a:79:fc:
dc:f7:62:72:8d:43:ec:c2:f3:38:93:03:f9:9c:74:04:17:04:
05:2a:ce:cb:44:73:cc:54:24:69:6e:57:79:a7:cd:ea:67:75:
e1:a8:b6:8b:76:ef:b2:cd:02:c9:54:46:1a:3a:b1:fb:d4:6e:
7d:07:0d:9c:e9:75:32:df:9b:e2:13:3e:38:30:13:9d:14:31:
56:6d:a9:19:fd:10:53:29:a4:c4:e0:7f:fa:0c:ad:61:e5:e5:
02:3a:3d:eb:53:e5:af:d3:96:48:3f:10:0b:7d:09:09:49:ad:
76:dc:fb:52:de:c5:ee:09:e9:b6:5a:d2:a4:49:57:9b:71:22:
2e:a0:31:9b:cf:75:5d:c7:e0:e8:d9:cd:8f:77:67:e6:df:f9:
42:e0:c7:77:4d:e8:e7:f0:cd:18:90:4b:df:a8:80:a1:8f:6b:
df:2b:fc:51:2c:f7:98:4d:c0:62:32:99:0a:5b:3b:6e:4c:b3:
37:ae:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net