Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/zowhgNT0jUWxi5V_wFUp4Q5XRqc.roa
File: zowhgNT0jUWxi5V_wFUp4Q5XRqc.roa (raw, json)
Hash identifier: 4Y/15FdOvY0sm/SzZG+1c5f/c2olEbCNrFi53+JdO5M=
Subject key identifier: CE:8C:21:80:D4:F4:8D:45:B1:8B:95:7F:C0:55:29:E1:0E:57:46:A7
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 01917E370C8A9B62DA4135C15AD143CDE475
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/zowhgNT0jUWxi5V_wFUp4Q5XRqc.roa
Signing time: Fri 23 Aug 2024 07:50:22 +0000
ROA not before: Fri 23 Aug 2024 07:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199370
IP address blocks: 31.193.104.0/22 maxlen: 24
185.16.164.0/22 maxlen: 24
185.16.164.0/23 maxlen: 23
185.16.164.0/24 maxlen: 24
185.16.165.0/24 maxlen: 24
185.16.166.0/23 maxlen: 23
185.16.166.0/24 maxlen: 24
185.16.167.0/24 maxlen: 24
2a03:d6c0::/32 maxlen: 32
2a03:d6c0::/34 maxlen: 34
2a03:d6c0:4000::/34 maxlen: 34
2a03:d6c0:8000::/34 maxlen: 34
2a03:d6c0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:37:0c:8a:9b:62:da:41:35:c1:5a:d1:43:cd:e4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Aug 23 07:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8c2180d4f48d45b18b957fc05529e10e5746a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:c7:7d:24:c1:7c:a4:e4:2f:7b:a4:6d:6d:
37:59:c2:d9:86:f6:9c:df:bc:80:a6:12:2f:fe:ee:
35:f0:cb:db:4f:72:6e:32:4f:36:dc:c7:0f:c4:fa:
19:c9:90:1c:aa:a8:61:72:d8:93:f3:26:7d:e6:d6:
be:a3:e8:99:96:01:a7:ee:56:31:9b:dd:a5:7e:85:
4c:61:13:83:a2:5e:76:f7:38:3e:53:bc:2b:8f:ca:
fa:cb:a4:97:93:7e:f9:d9:7e:e5:53:87:b7:b1:f4:
aa:be:08:a5:7b:25:bb:9a:a1:a4:b4:47:c9:a2:c7:
7a:95:82:2b:7f:08:a4:87:94:97:dd:83:b8:93:13:
90:d1:88:4c:5a:57:45:89:f6:8a:9f:24:47:cb:06:
94:22:ad:1a:63:3f:3c:1d:7c:63:13:fa:45:2d:74:
5d:fd:e4:1a:b3:db:e8:36:60:9f:ee:63:14:2a:1c:
7b:fc:c0:7a:d2:fb:b6:27:ce:56:b6:e9:bb:0b:ee:
6c:4c:ca:e8:9c:16:1f:8d:a2:12:c2:ab:04:42:11:
50:8e:e1:56:86:7c:2d:a5:d6:58:01:01:0e:b9:c7:
1c:42:39:36:ce:0f:0a:1a:fc:67:e9:d7:bf:1b:d8:
69:8f:a8:91:e7:f2:fa:51:91:fa:d1:c1:ad:99:64:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:21:80:D4:F4:8D:45:B1:8B:95:7F:C0:55:29:E1:0E:57:46:A7
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/zowhgNT0jUWxi5V_wFUp4Q5XRqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.104.0/22
185.16.164.0/22
IPv6:
2a03:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
52:a3:50:90:ff:be:6d:2c:57:e8:83:0f:85:93:c9:32:46:6a:
67:6a:11:4d:6f:90:bc:e2:61:fe:8d:64:4c:a4:1d:89:f3:23:
18:6f:15:ce:03:71:4b:72:fe:7e:7b:07:25:13:29:ce:f1:84:
cb:96:77:e2:a4:72:b5:e2:d6:90:c8:da:ac:bc:93:f1:14:f0:
f8:43:17:25:60:40:44:14:b9:d1:df:0a:a8:48:28:82:e6:64:
e7:ef:39:74:d3:35:c9:09:43:a6:4c:db:06:1a:09:e4:d0:12:
f3:0e:e8:06:e5:b3:c8:ea:97:8d:16:ab:eb:88:4e:50:b7:f9:
2c:7d:85:4e:ed:f6:65:45:e7:08:78:2f:c2:e9:11:95:c6:5c:
95:1e:bd:58:cd:b4:af:8b:42:e1:a6:aa:3f:5f:33:98:9b:8a:
da:48:dd:c1:7e:53:a0:16:20:88:52:1d:12:1f:83:97:a1:86:
b4:04:d8:b1:05:1f:be:0a:66:59:81:01:b7:88:c4:98:95:2a:
f4:24:3c:d2:0b:ea:4c:15:cb:6d:5d:a8:c8:d3:c3:c3:0f:be:
75:50:70:d5:06:ec:6c:2f:d2:df:b8:85:48:26:76:44:d5:bd:
9a:a4:16:a0:c1:72:0c:6f:cf:6d:39:dc:77:ce:cf:07:3d:05:
3b:fe:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:12 2024 by rpki-client on console.sobornost.net