Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ndHVDwuVh-B8KtG-nS6b9Ie7n4g.roa
File: ndHVDwuVh-B8KtG-nS6b9Ie7n4g.roa (raw, json)
Hash identifier: ob7FMdIN5NCMByd1APHfX3f6W+St9jWEqPYtOnfNKTo=
Subject key identifier: 9D:D1:D5:0F:0B:95:87:E0:7C:2A:D1:BE:9D:2E:9B:F4:87:BB:9F:88
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018D8432C26E4151919141825A3BD8300F95
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ndHVDwuVh-B8KtG-nS6b9Ie7n4g.roa
Signing time: Wed 07 Feb 2024 15:32:15 +0000
ROA not before: Wed 07 Feb 2024 15:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.63.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:32:c2:6e:41:51:91:91:41:82:5a:3b:d8:30:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Feb 7 15:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dd1d50f0b9587e07c2ad1be9d2e9bf487bb9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:f4:3f:b0:4d:e4:e4:16:16:33:d3:c5:1a:
ed:04:29:6c:f9:43:31:93:1e:90:f4:0c:c5:5e:d3:
02:4b:21:3f:ac:a2:09:64:ec:e4:d9:b7:f2:81:fd:
4e:ff:d7:10:76:59:55:fa:57:87:72:e7:b6:27:7d:
51:44:a5:84:fb:56:c8:3c:b0:75:42:9b:ca:c7:2b:
29:aa:78:32:c2:2f:f4:14:42:8e:0b:0a:9a:61:32:
f9:ad:66:6b:c1:b9:1b:5d:d3:10:75:a0:f6:12:ce:
7f:7c:ec:5c:27:ff:d0:8c:05:00:04:28:0e:7b:2a:
1d:bb:14:5f:eb:d4:84:7f:db:03:81:25:d7:7b:28:
7c:0f:cb:63:74:c4:95:f5:51:fb:84:0c:e6:df:cf:
48:de:f3:f4:2f:d8:25:c7:6d:a1:ec:1a:55:ec:77:
21:6d:ab:c0:7c:91:52:e9:75:2f:87:47:3f:de:a1:
8d:08:ab:15:78:2e:c0:29:3a:94:c1:f9:26:ed:83:
b1:02:75:67:3b:38:4a:ad:fd:e8:35:37:57:2d:b9:
90:da:75:e0:56:22:e4:48:f3:c8:25:ba:d9:79:fc:
30:1e:e8:e3:9f:ca:d4:16:80:f9:a7:da:29:63:63:
0d:18:3c:53:00:76:59:97:be:8a:54:c8:11:8d:9a:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:D5:0F:0B:95:87:E0:7C:2A:D1:BE:9D:2E:9B:F4:87:BB:9F:88
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ndHVDwuVh-B8KtG-nS6b9Ie7n4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.63.0/24
93.157.109.0/24
109.107.141.0/24
109.205.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:eb:de:b2:ce:97:81:b9:6a:8b:5c:e3:c6:83:b0:c6:f2:58:
60:bb:e5:87:07:8a:4b:03:02:bf:a7:83:40:54:22:ea:db:a5:
2d:a2:c7:95:46:dd:24:8e:98:d4:9e:e3:b2:e0:19:a7:04:7e:
f2:9a:2a:81:8d:86:94:8f:b4:f6:99:2f:5f:00:db:34:6b:da:
22:ba:52:f3:3e:f0:1c:02:14:88:11:da:f8:f6:6c:77:24:e5:
d3:3d:d1:87:c2:9b:bf:a7:68:d3:22:01:a7:e1:91:9f:ef:bd:
ee:e5:c2:45:c7:87:26:bb:4c:c9:9a:43:78:d1:7f:62:38:ae:
0c:77:57:a5:90:e6:ea:e2:ea:f2:b4:d3:0e:76:bd:72:48:7d:
0f:31:8b:6e:06:aa:95:79:78:09:8f:86:ba:d5:b9:c1:b4:0f:
f1:df:a7:98:45:ed:b1:b3:c3:56:a3:de:a7:78:34:18:ee:d8:
fd:f9:54:48:32:b3:56:d1:93:7b:7e:02:91:c9:57:ae:d3:f8:
6f:8c:76:f9:89:ee:9c:80:b2:8b:9b:ff:1b:8c:93:23:45:ca:
bd:5f:31:c2:ce:1e:7c:68:3f:ea:bb:c3:82:e8:9b:b2:e5:dd:
80:e1:9a:8d:87:c6:c7:d6:96:4a:4b:7c:28:3e:a2:d1:7b:a2:
24:d0:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:04:01 2024 by rpki-client on console.sobornost.net