Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Vw0gxgrVjseEsYjxkJmafOCVMYc.roa
File: Vw0gxgrVjseEsYjxkJmafOCVMYc.roa (raw, json)
Hash identifier: qHUjkRcpUNGtxjSW9aGFDK6QrJix5PdYvYk+USpXq5Y=
Subject key identifier: 57:0D:20:C6:0A:D5:8E:C7:84:B1:88:F1:90:99:9A:7C:E0:95:31:87
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 018CC56E0752F8DD9D8A71D6FDA58B42A2AD
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Vw0gxgrVjseEsYjxkJmafOCVMYc.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207628
IP address blocks: 176.119.207.0/24 maxlen: 24
2a05:ed40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:52:f8:dd:9d:8a:71:d6:fd:a5:8b:42:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=570d20c60ad58ec784b188f190999a7ce0953187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:85:18:6b:0f:6b:db:63:0e:da:39:df:46:
75:4e:da:c8:57:f7:9e:3e:25:26:be:91:cb:9e:62:
4c:74:91:ca:78:fd:55:31:64:fd:74:b0:b5:87:c3:
10:e4:9f:4d:48:ba:ab:32:35:9b:c6:84:ee:00:f5:
a9:c6:27:54:54:63:8e:6e:bd:e1:18:bc:8e:d7:ed:
bd:cd:44:f8:2a:07:d2:08:cc:2e:ac:05:0b:59:c3:
8c:d3:aa:cd:25:d7:e6:6a:5d:21:97:de:7d:2f:30:
8a:1f:9f:d7:0e:65:a5:50:fd:39:7b:50:8c:13:e7:
1b:bb:a2:26:a0:69:f0:da:79:2e:1e:e0:08:e9:df:
70:fd:93:e8:84:9d:d3:0b:0a:fc:7a:92:9f:1b:09:
cc:07:59:a9:cc:a1:e8:d9:c5:31:4f:d2:45:7a:3c:
29:90:3e:45:76:02:6f:fc:5a:26:35:12:69:50:86:
69:22:81:ff:f4:f0:ab:4f:c4:03:81:d2:58:1c:a7:
6a:c2:5d:a3:99:bf:79:94:93:ab:aa:48:5d:1a:20:
3d:5b:c7:08:f2:d9:36:ae:50:5c:c9:89:82:0c:a5:
3e:01:fa:fa:0c:39:18:86:e5:af:55:04:54:44:01:
36:40:49:36:1b:0c:4a:bd:64:3e:fd:a3:ce:98:76:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:20:C6:0A:D5:8E:C7:84:B1:88:F1:90:99:9A:7C:E0:95:31:87
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/Vw0gxgrVjseEsYjxkJmafOCVMYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.207.0/24
IPv6:
2a05:ed40::/29
Signature Algorithm: sha256WithRSAEncryption
9d:df:c7:99:5d:8a:75:09:25:96:06:a9:18:ca:56:d7:53:8a:
a2:f6:c6:65:b1:4b:4b:27:12:e4:7e:54:1c:df:94:e2:89:bd:
d8:a1:2f:b2:f3:f6:62:8e:1b:b8:1e:54:77:55:a7:51:0b:9a:
f6:a5:57:48:dc:02:31:e2:96:26:e4:9c:21:29:8d:38:d1:dc:
fc:84:a2:d0:ab:a0:f6:7d:f5:f7:fb:0c:91:88:02:8c:66:fb:
48:b1:bd:39:12:73:10:8b:45:af:6b:6b:f4:bb:d1:18:fe:0a:
b5:2e:42:a7:fa:c7:88:4c:d5:9c:84:76:2e:1f:a0:7d:ba:e9:
4b:62:ad:ff:55:82:a8:35:4b:76:36:26:02:40:c7:e2:43:42:
e8:1b:b3:a5:29:6d:46:a4:ef:43:4f:a4:9a:26:aa:d0:9e:9b:
cc:b2:0f:0a:3f:29:f7:5f:b2:3f:1b:1e:0e:66:12:08:b3:43:
0a:75:6e:d4:e2:a6:ae:fd:a0:5d:a8:8b:be:26:4f:10:91:54:
34:ed:16:e8:b5:e3:b5:d3:8d:a0:c1:57:4b:80:4c:27:cd:fb:
32:7b:11:bc:2f:d4:2c:e5:32:6e:e5:dd:3a:66:ac:0e:76:36:
7f:2c:c6:8c:d2:5f:d0:5d:fd:0a:37:1d:e0:b6:4c:5a:17:9f:
96:ea:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:17 2024 by rpki-client on console.sobornost.net