Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Bv5tkbwG1NXyl2hhN1Gdd9YQb6Q.roa
File: Bv5tkbwG1NXyl2hhN1Gdd9YQb6Q.roa (raw, json)
Hash identifier: hcc+wNQdR+6HxJ0/s3xiOhFW4Q8jdn3KWKbklC9rBVk=
Subject key identifier: 06:FE:6D:91:BC:06:D4:D5:F2:97:68:61:37:51:9D:77:D6:10:6F:A4
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0193DA0692B11C8AF230D5929C088E1F4C13
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Bv5tkbwG1NXyl2hhN1Gdd9YQb6Q.roa
Signing time: Wed 18 Dec 2024 13:48:03 +0000
ROA not before: Wed 18 Dec 2024 13:48:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 94.103.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:06:92:b1:1c:8a:f2:30:d5:92:9c:08:8e:1f:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Dec 18 13:48:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06fe6d91bc06d4d5f297686137519d77d6106fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:cc:84:43:08:4b:e0:6b:3b:50:a3:cb:2f:
f0:15:12:27:0b:81:b9:2d:19:18:8f:98:c1:4f:23:
4d:db:5e:f1:7c:1f:7f:6a:39:ff:5c:bc:af:dc:c6:
d5:e9:39:03:bf:fa:23:e6:70:c1:89:84:82:97:fd:
70:74:54:23:e0:97:34:9c:a7:31:93:66:b2:9c:4d:
2b:34:fa:62:aa:d1:de:14:2e:75:65:9c:9c:ee:3d:
42:b2:6d:3a:80:c5:93:c7:20:5c:66:ca:af:c4:08:
07:56:c8:24:3d:4f:e9:ab:2e:e4:cf:c0:ec:94:33:
6d:a8:30:b1:62:c8:aa:67:c5:69:21:d1:f4:79:69:
21:fc:67:2c:ed:7b:64:c9:45:d4:46:b9:69:ea:0b:
35:97:d8:d7:99:fd:e7:0c:f9:b2:e8:2d:7d:ec:8a:
fd:15:3c:b6:62:d8:37:de:80:00:6f:2f:81:71:af:
5b:78:8e:6f:35:54:95:91:89:f4:52:9f:4f:d6:9c:
e2:f1:d2:22:c6:9e:40:8a:ce:f0:5e:fc:df:e6:4d:
eb:de:79:10:e2:63:af:1a:37:7a:6e:77:34:ac:5c:
2d:e1:e4:6e:94:78:45:9c:d7:28:e0:7d:91:e0:8b:
0e:f5:32:7d:ef:c6:a5:27:a4:46:9a:4f:70:73:22:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:6D:91:BC:06:D4:D5:F2:97:68:61:37:51:9D:77:D6:10:6F:A4
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Bv5tkbwG1NXyl2hhN1Gdd9YQb6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.56.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:08:d7:dd:4b:01:05:17:e2:3a:93:61:63:66:fa:37:e8:4e:
e6:73:27:e4:50:3b:08:64:71:35:c7:e4:12:bc:e6:e0:e6:f8:
94:79:a9:b9:e5:5c:df:02:28:10:4d:4b:e1:a2:51:4e:f4:71:
8c:be:82:a5:6d:15:8a:4f:85:06:e6:84:db:43:cc:cb:ac:99:
ba:94:9d:c1:37:14:61:09:10:d8:a5:bc:42:66:05:ae:3c:5d:
19:02:a9:a1:01:2c:89:32:3c:95:bd:72:a2:9a:9e:16:3f:7a:
f2:cb:7a:84:1f:67:37:ac:b3:ce:17:de:ff:82:1b:22:12:c9:
a6:7c:01:f4:f0:5e:67:2d:8b:38:05:41:78:17:18:a6:b4:d4:
9f:cd:26:08:38:89:7f:c9:e8:45:6c:fd:77:81:e1:d0:a0:32:
82:ee:55:b7:55:f0:f8:61:b5:0f:46:63:9f:ff:3b:21:7f:1f:
30:ff:3c:7c:9f:d4:04:c2:5c:99:65:f2:38:d2:90:e7:ee:3f:
ab:a6:ce:eb:a2:7e:dc:3b:a8:d8:69:c1:1d:4b:b0:72:92:eb:
6a:89:29:6f:5f:e8:d7:90:a2:d4:d7:4f:dd:69:6e:d9:4f:54:
fc:44:fd:fa:c9:76:73:4d:4b:e5:59:22:dc:f9:62:dd:34:03:
f1:ac:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net