Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/JCCWaOqv2WOsEE5FI1d2R_E21ME.roa
File: JCCWaOqv2WOsEE5FI1d2R_E21ME.roa (raw, json)
Hash identifier: s9hgQYeLLFFsISicwlIMk9aQoHJGXe6gQd3uaDfcgEs=
Subject key identifier: 24:20:96:68:EA:AF:D9:63:AC:10:4E:45:23:57:76:47:F1:36:D4:C1
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 018CC2DB45CD8E355847B6DB63B6D84C84A6
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/JCCWaOqv2WOsEE5FI1d2R_E21ME.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210983
IP address blocks: 213.232.205.0/24 maxlen: 24
2a11:1d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:45:cd:8e:35:58:47:b6:db:63:b6:d8:4c:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24209668eaafd963ac104e4523577647f136d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:8d:ee:c2:c4:61:c1:df:dd:03:aa:fd:18:
2c:d7:86:f4:38:66:16:6c:ee:e1:78:75:d0:66:5a:
25:2e:8e:f8:7e:ea:05:56:d4:d5:8b:bc:8d:6a:22:
8b:87:84:b0:4c:30:7d:54:95:89:f5:be:d2:32:d0:
c9:0a:00:a5:19:9c:b2:7d:3b:60:23:68:8b:27:d7:
0d:0f:66:a1:7b:92:da:a9:58:dd:78:f3:4c:84:0a:
13:d2:56:5e:3b:0c:e0:ff:68:b9:3a:09:22:59:7b:
b1:9c:47:ba:a8:81:a5:18:f1:80:a3:d1:6e:1c:06:
fd:82:74:a1:af:0d:4f:30:17:0c:55:e1:0e:d6:f1:
d9:84:45:72:26:01:1a:e7:96:0c:f2:48:e9:a2:2f:
96:c8:20:69:cf:6e:c6:a0:e7:04:21:82:92:af:a4:
8d:54:69:f0:ba:17:64:ad:fb:f3:f7:49:a0:dd:48:
cb:7f:92:49:2e:64:cb:f3:67:ac:03:07:e3:6b:c7:
32:eb:63:32:ae:1a:63:b2:6a:4a:66:49:02:00:3c:
15:28:86:89:17:35:e9:ce:46:6c:a5:95:63:64:a0:
a5:01:ca:7c:61:03:e5:4e:76:15:29:da:65:50:03:
e3:3f:ef:73:c5:c4:86:75:a4:64:d9:ca:eb:61:a6:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:20:96:68:EA:AF:D9:63:AC:10:4E:45:23:57:76:47:F1:36:D4:C1
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/JCCWaOqv2WOsEE5FI1d2R_E21ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.205.0/24
IPv6:
2a11:1d00::/29
Signature Algorithm: sha256WithRSAEncryption
23:1f:e5:aa:92:be:1f:6d:85:85:45:b4:06:97:f7:39:ea:db:
2d:a5:a5:fc:6b:0c:77:87:5a:28:76:43:1b:fe:2d:47:92:ef:
8f:40:11:f7:3d:20:7f:0f:1c:fd:09:03:b2:99:86:27:cc:73:
8d:62:82:dc:f1:f8:79:0f:ec:56:97:8a:9c:b0:13:52:49:7c:
6f:f3:ad:b9:5d:d6:f4:af:18:fe:0a:fd:86:3d:4d:a8:f1:49:
a2:9b:8e:b2:fc:7b:d9:ad:cb:ba:8e:83:0c:ae:dd:0b:6b:e9:
66:10:30:46:2b:ac:cd:2c:c6:92:3e:9b:aa:37:e4:24:96:d1:
b5:25:5e:22:06:89:d9:b4:a8:1e:d6:69:23:f4:dd:0d:01:ed:
ee:08:63:11:bc:11:15:25:a0:64:d2:b8:79:ac:cc:1d:b2:3d:
f4:17:82:c7:92:a9:a2:e1:38:ea:23:96:53:02:4c:d8:c5:f2:
e4:93:88:f3:15:a7:64:25:f9:44:d9:d5:ef:74:2d:73:c5:d5:
18:e2:38:c7:fb:ac:99:f7:6a:fc:e7:03:93:68:39:13:77:ea:
c3:eb:7f:e7:66:79:2e:ff:c0:66:70:dd:33:c8:f4:48:69:10:
ab:52:e2:66:55:89:ec:2b:31:da:03:db:e8:d2:a9:ce:85:1e:
63:76:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net