Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/zGavu9maCHYs3dWs-uAPXQDFvCc.roa
File: zGavu9maCHYs3dWs-uAPXQDFvCc.roa (raw, json)
Hash identifier: hRJ2BWfhBEn+swt72G+AKZc5SX8MjtXTFju+5bkBoVo=
Subject key identifier: CC:66:AF:BB:D9:9A:08:76:2C:DD:D5:AC:FA:E0:0F:5D:00:C5:BC:27
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0193BA45E44090CBDA2942AC6932DDEAC1E3
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/zGavu9maCHYs3dWs-uAPXQDFvCc.roa
Signing time: Thu 12 Dec 2024 09:49:22 +0000
ROA not before: Thu 12 Dec 2024 09:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210895
IP address blocks: 45.66.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:45:e4:40:90:cb:da:29:42:ac:69:32:dd:ea:c1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Dec 12 09:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc66afbbd99a08762cddd5acfae00f5d00c5bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:c6:c3:e1:24:4f:f7:24:95:28:64:9e:95:
5d:ae:ac:5a:93:04:f2:28:19:05:8c:ba:b5:16:7e:
c4:e8:b9:6e:0c:32:11:b7:bc:7c:6c:76:9d:f7:4c:
d5:c3:4d:ac:75:24:96:20:ab:a1:7d:a0:27:a3:e8:
7f:06:f1:b4:27:2d:20:27:7a:84:f7:21:03:4f:17:
76:5b:88:50:39:00:3c:69:d3:4b:8b:cc:58:36:ff:
1f:cd:30:b5:3d:14:04:47:cd:44:38:19:4b:57:cd:
9e:53:33:ae:96:cc:2a:e1:6e:6a:c4:d4:f7:03:a7:
57:d4:dc:cf:6b:db:d0:e4:a0:6a:4e:50:ae:77:53:
59:c2:db:56:c0:2f:0d:1a:1f:8f:a6:94:e0:14:b8:
72:31:b9:ff:45:36:0e:ed:36:69:4b:8a:fc:5a:f2:
8c:a2:17:73:76:32:1c:fa:4d:7a:3f:d7:28:e2:42:
cf:74:fa:67:5e:f8:ac:3a:b7:db:a7:a4:b7:a8:c1:
06:9e:21:c0:e6:6b:c9:39:d2:08:c3:2b:ca:f7:02:
01:b9:92:2d:79:33:86:fb:e8:da:5d:62:d8:60:02:
01:87:d4:43:03:fb:7e:da:86:39:ec:27:45:f7:82:
3b:22:5f:be:ff:cc:e1:e9:86:f6:71:60:62:08:55:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:AF:BB:D9:9A:08:76:2C:DD:D5:AC:FA:E0:0F:5D:00:C5:BC:27
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/zGavu9maCHYs3dWs-uAPXQDFvCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.11.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a3:76:e4:3e:59:17:3a:b2:a2:8f:42:07:52:34:1a:37:5f:
e5:97:55:f9:1b:77:ee:5f:08:6a:1a:73:7c:9f:f6:47:6a:69:
ca:a2:9b:25:d7:54:5e:e6:8b:77:5a:6f:7a:68:ea:11:3e:c8:
09:02:61:69:f3:2b:91:50:b1:5e:f1:79:54:1c:ce:4a:9d:9b:
ed:0c:8e:7b:f6:27:cb:3b:77:c4:74:b1:fb:d1:53:87:39:6f:
9d:be:f6:29:f0:78:48:91:fe:0c:0a:55:b8:a1:5f:c2:60:93:
fb:6c:31:11:10:25:0b:b7:12:32:05:59:8c:fe:a3:93:6b:43:
2c:f8:c0:95:20:cb:02:94:de:c1:95:eb:53:0f:96:17:a7:6b:
71:62:41:57:c3:8c:93:40:78:a0:22:ce:69:eb:41:4c:79:b8:
4d:ff:52:a3:e9:65:4e:08:b7:b3:1a:50:3e:a7:5b:ba:34:f2:
51:74:f0:97:40:13:ee:cd:23:02:ac:f3:44:91:0e:a2:c6:2f:
83:eb:65:22:c8:5f:04:58:e8:73:8b:07:61:dc:37:9b:b8:c8:
3e:49:0b:1e:13:7c:bd:14:9a:be:df:9e:2f:75:3f:1e:7a:b2:
fa:95:58:99:c6:9f:07:64:ea:f3:7a:c5:d4:81:e9:88:c5:46:
52:d6:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:38 2024 by rpki-client on console.sobornost.net