Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/JOZokNamdNswMBjE5nSFpPXPDz4.roa
File: JOZokNamdNswMBjE5nSFpPXPDz4.roa (raw, json)
Hash identifier: geUwNVGxSq4RoK2+2XN3osVH9al6i8IxrHyfNTNAD8M=
Subject key identifier: 24:E6:68:90:D6:A6:74:DB:30:30:18:C4:E6:74:85:A4:F5:CF:0F:3E
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 018CCA2BBC89E5E46987DF32466103C6E7C6
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/JOZokNamdNswMBjE5nSFpPXPDz4.roa
Signing time: Tue 02 Jan 2024 12:35:13 +0000
ROA not before: Tue 02 Jan 2024 12:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61207
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
2a04:8080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bc:89:e5:e4:69:87:df:32:46:61:03:c6:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e66890d6a674db303018c4e67485a4f5cf0f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:a4:0a:63:b2:db:90:97:20:e1:ef:ce:38:
0d:82:fc:ea:5d:d1:e6:be:7f:04:6e:db:ca:b4:21:
7f:ef:65:1b:61:79:64:40:90:5b:98:82:65:d3:06:
0a:01:69:de:cd:2a:85:1a:e8:73:1f:99:d5:4c:5a:
e4:5d:45:90:fd:90:4f:84:08:79:8f:46:bb:67:4e:
c8:62:e6:44:01:4d:60:36:e6:62:f1:5d:7d:fa:b8:
2b:ef:22:3d:8d:ac:5b:4b:20:7e:f2:ef:49:92:0c:
96:72:ed:84:bf:b2:67:04:26:d7:03:a5:54:ee:6f:
8a:bb:51:f2:7d:58:ef:e2:bf:3e:b1:03:71:a4:72:
3f:99:00:a8:86:99:4b:0d:7e:57:f7:30:75:56:60:
85:e7:7f:95:00:52:48:e0:ec:57:a0:74:38:55:6e:
cd:15:bc:db:0f:2a:52:7e:3f:3c:62:54:8c:f0:1f:
d5:e0:54:9f:51:a1:5b:b4:d8:9b:fe:1b:75:9d:48:
0a:06:f0:97:f3:e9:82:14:c7:e1:f8:8f:3c:aa:da:
74:5d:23:c0:de:68:de:55:09:50:21:6b:77:a1:ec:
6d:a4:c7:1f:3e:8c:40:c9:c7:25:d8:88:2d:0f:8c:
66:0d:90:83:e7:b1:24:af:16:84:11:ad:b9:9e:6b:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:68:90:D6:A6:74:DB:30:30:18:C4:E6:74:85:A4:F5:CF:0F:3E
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/JOZokNamdNswMBjE5nSFpPXPDz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
IPv6:
2a04:8080::/29
Signature Algorithm: sha256WithRSAEncryption
73:86:b9:95:e7:dd:17:04:4d:c7:6b:20:41:2a:3c:c6:5a:ba:
40:f6:4c:b1:22:11:fa:16:ec:36:f9:08:07:ad:69:f0:2b:59:
38:37:e4:ac:65:2a:11:6a:6d:16:a4:db:99:29:75:fc:e8:c4:
d4:ae:a2:52:0a:25:3c:7f:5e:85:11:81:a4:0a:5c:ef:68:1f:
21:23:78:17:e4:7f:3d:25:71:b6:6e:d8:b6:b1:c3:d6:2d:dc:
1d:9e:f3:4a:f8:82:15:5c:e8:1a:3b:e7:26:bf:b9:ff:08:31:
d5:7d:81:c3:92:d4:b9:8b:f0:fc:5d:cd:75:5e:ef:86:d2:4e:
16:e7:29:4c:b6:f9:d8:e2:c6:ec:44:65:80:6a:09:49:75:1c:
01:55:6c:19:94:32:ed:c8:e3:28:32:d4:0f:e2:89:74:68:67:
b9:9f:84:58:58:20:31:8a:d4:eb:28:1d:ec:38:87:45:c4:8f:
3a:12:1f:7d:ba:63:8f:bc:0d:5b:50:74:91:ed:52:c7:67:fe:
20:47:a2:8f:eb:e7:5e:bc:3b:1a:af:60:86:48:b8:be:06:e0:
4b:cf:3c:a4:25:34:a5:07:a7:a3:18:34:6a:19:82:88:90:c3:
90:f9:2c:16:c7:7e:15:85:c8:17:3f:94:51:b8:c0:e4:cb:0b:
99:ee:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net