Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/DNSzCvWzjJ8OhiEEqPtJApod10U.roa
File: DNSzCvWzjJ8OhiEEqPtJApod10U.roa (raw, json)
Hash identifier: BRdJoPmB4srNe6dmscb26lH2iJSapmaheWWdQSJ6bFY=
Subject key identifier: 0C:D4:B3:0A:F5:B3:8C:9F:0E:86:21:04:A8:FB:49:02:9A:1D:D7:45
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 018CC493901F90F9C9235A8423348AC79287
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/DNSzCvWzjJ8OhiEEqPtJApod10U.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56800
IP address blocks: 185.110.144.0/22 maxlen: 23
176.10.40.0/21 maxlen: 21
176.10.40.0/22 maxlen: 22
176.10.44.0/22 maxlen: 22
2a0b:26c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:90:1f:90:f9:c9:23:5a:84:23:34:8a:c7:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd4b30af5b38c9f0e862104a8fb49029a1dd745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:53:cd:93:28:af:cb:8d:a9:a1:93:70:34:
0d:c1:51:19:8d:e0:c7:9f:bf:a4:12:59:c7:cd:e5:
4d:f9:c9:89:1d:36:c5:70:af:e8:0e:20:06:bf:eb:
65:4c:a3:6d:02:80:70:8a:02:05:ca:90:51:22:d6:
f8:97:1d:52:44:69:98:2d:1e:42:5f:d2:27:b2:8b:
1f:50:09:1a:e4:c5:b8:a9:23:65:a0:13:b3:93:8e:
eb:13:58:94:20:dd:6f:2c:7d:7d:68:42:ac:ca:64:
46:3c:3a:f7:1d:39:a0:0f:a3:66:76:4a:45:28:75:
d1:70:d1:b9:df:c7:1a:0f:0f:32:d1:4a:a0:90:84:
a9:ed:8c:04:b5:77:08:23:38:c0:48:12:c2:4b:ca:
a5:4f:5a:c9:4c:12:28:4a:c9:12:fe:88:2f:e4:44:
86:4b:5a:30:59:ea:82:d5:3a:ad:94:1a:1d:ee:17:
b6:25:ea:0b:df:bb:59:2e:fb:5e:8a:63:90:9c:ef:
79:8e:ed:20:80:c4:58:36:6b:73:6c:6d:3b:39:a5:
4f:49:71:cd:86:54:59:8f:04:61:84:b1:f1:9a:59:
e0:8a:a8:72:2a:97:a3:92:c1:a1:25:5c:49:72:b0:
15:97:67:43:b6:03:b8:4b:3e:43:82:d3:a9:36:d6:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:B3:0A:F5:B3:8C:9F:0E:86:21:04:A8:FB:49:02:9A:1D:D7:45
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/DNSzCvWzjJ8OhiEEqPtJApod10U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.40.0/21
185.110.144.0/22
IPv6:
2a0b:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:1a:44:6b:cd:da:13:81:42:54:a1:f5:ad:95:15:ac:31:0f:
23:47:d2:a5:fc:26:dc:14:29:21:0e:18:56:1b:58:ac:d9:9c:
e0:2e:cf:4b:45:52:07:97:b4:48:6e:20:82:5f:55:1b:25:a7:
2a:06:80:38:39:07:df:2e:a1:a0:c3:6d:2b:66:c0:83:53:16:
dd:d3:5e:79:f4:f8:8d:c1:90:fd:35:bb:e5:84:6b:5b:8e:56:
13:7e:84:d5:84:b2:37:3b:a3:79:b7:c5:21:a5:dd:73:cf:20:
3b:09:b2:5b:2f:16:9d:79:7c:93:6f:8e:16:35:c1:2b:57:8e:
84:2a:7c:7a:18:66:26:7b:3b:52:af:48:db:8f:84:46:0a:e0:
99:1a:53:34:99:2d:69:28:ea:28:dd:95:47:f5:79:8a:53:21:
4c:f9:9f:d6:de:da:2d:7a:dd:90:fd:32:f2:5d:91:34:fb:aa:
c3:1b:e7:ab:ee:6c:14:93:33:7f:26:c7:8d:d2:41:c9:34:0b:
7e:e1:f3:08:24:52:c4:a1:e4:32:b4:65:10:c5:12:1d:99:fa:
47:a7:4e:a1:e7:49:6d:aa:b0:c9:9b:01:2e:df:bd:64:b6:88:
a9:a3:83:bd:4d:1a:50:00:e0:f3:cf:cc:0c:f2:1c:ca:d8:9a:
84:bb:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net