Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vR3aSD2PcM4D1TsSHbmV2YtGSgU.roa
File: vR3aSD2PcM4D1TsSHbmV2YtGSgU.roa (raw, json)
Hash identifier: CIDtSPkXEu3wwcyXdTOz8cH7j4BXGospaf8q/g0Fl0o=
Subject key identifier: BD:1D:DA:48:3D:8F:70:CE:03:D5:3B:12:1D:B9:95:D9:8B:46:4A:05
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0193DE5C57DE93C0F61FDE7D3D0FBB416DF4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vR3aSD2PcM4D1TsSHbmV2YtGSgU.roa
Signing time: Thu 19 Dec 2024 10:00:13 +0000
ROA not before: Thu 19 Dec 2024 10:00:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11426
IP address blocks: 94.103.48.0/22 maxlen: 24
94.103.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:5c:57:de:93:c0:f6:1f:de:7d:3d:0f:bb:41:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Dec 19 10:00:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1dda483d8f70ce03d53b121db995d98b464a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:ed:2c:d6:75:01:24:1f:2a:41:8e:f8:7c:
c6:0c:b4:d3:d2:3c:69:61:17:9f:a8:dc:55:05:a5:
36:b5:5a:2d:e9:0e:26:8a:d9:62:17:79:57:4f:cb:
05:49:3b:21:50:ff:c4:16:19:e3:cd:ce:f4:82:7f:
75:07:26:7f:51:55:a3:73:63:59:f7:96:ef:d1:1b:
98:0f:b2:3f:3f:5b:b3:3e:68:ed:5f:c5:7a:4c:aa:
97:24:b6:2a:bd:58:af:d8:43:55:c2:09:b1:31:62:
d9:32:ee:12:d3:03:f6:57:ef:e6:78:4d:1d:86:ab:
3d:e5:7c:43:ee:c7:29:57:f3:c2:4d:d3:8e:d7:64:
ee:8d:9f:28:a7:bb:13:70:0e:08:04:48:88:0c:d2:
4d:31:59:a1:1b:9c:59:ce:8c:2b:9d:db:f4:d8:8e:
7b:a6:ec:ea:44:c8:aa:8d:59:e1:e2:46:45:b0:c1:
aa:64:bc:34:99:43:1e:7a:8c:3e:35:8a:a6:57:6f:
48:f9:e2:a9:65:dc:d3:97:fb:80:53:b8:cc:31:a2:
ee:22:1a:77:98:cf:94:9c:c8:30:3a:1c:5b:5b:7d:
d8:37:12:51:f7:d0:cd:5d:53:c1:ea:f1:42:9d:5e:
49:81:46:46:f9:f9:f5:c8:af:85:cf:c9:d7:88:f6:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:DA:48:3D:8F:70:CE:03:D5:3B:12:1D:B9:95:D9:8B:46:4A:05
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/vR3aSD2PcM4D1TsSHbmV2YtGSgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:53:ad:53:aa:9c:4d:3d:35:8e:58:48:39:52:33:fa:7d:a2:
ed:38:17:9d:8b:74:42:6e:41:75:22:0c:7f:a7:e4:02:64:30:
3b:f2:6a:7d:ff:fa:8b:e2:d5:c1:ce:b7:5c:89:9a:de:20:42:
48:c8:cb:7f:54:fc:1b:4f:e9:e3:26:8f:a8:e6:7c:5d:36:a3:
b5:a9:07:05:cd:09:31:35:8d:c2:72:f8:e7:32:d0:2c:4f:99:
3c:46:05:3d:3c:ce:10:d5:24:95:54:0b:84:8e:70:2b:18:e2:
80:8c:c5:29:ad:20:63:12:2a:94:39:91:7f:c5:d0:77:1c:a2:
ee:97:ed:87:52:1c:32:39:68:bc:3a:bd:48:ca:78:2c:31:1e:
f0:5c:a8:0b:35:f7:59:b0:0e:1d:34:35:8d:bc:c6:d8:d0:a3:
31:33:76:25:f1:6b:a2:b5:5e:2c:d8:91:55:3d:82:11:21:83:
e9:f9:93:5f:7f:99:4e:91:54:69:4a:64:06:90:0b:55:2f:56:
8b:db:c6:ab:22:bb:e7:58:dc:51:2c:32:71:39:21:3f:c5:59:
5a:5a:b7:56:6f:33:ba:6d:5a:b0:ef:86:b7:ff:9d:e8:de:e4:
4b:3a:91:ae:07:3d:51:b1:17:7c:e9:77:b6:01:d3:b5:8d:c5:
b7:81:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net