Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/y-9FvnUP5nYLYpaYwK-uwT6Jed4.roa
File: y-9FvnUP5nYLYpaYwK-uwT6Jed4.roa (raw, json)
Hash identifier: 6jGwII5utOV2ujn5dgGZ1sxlnyPEYG+/hb86DhZA1i8=
Subject key identifier: CB:EF:45:BE:75:0F:E6:76:0B:62:96:98:C0:AF:AE:C1:3E:89:79:DE
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0192F680D6C3D050C1CE93C7F254A13CCB9A
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/y-9FvnUP5nYLYpaYwK-uwT6Jed4.roa
Signing time: Mon 04 Nov 2024 09:28:11 +0000
ROA not before: Mon 04 Nov 2024 09:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 86.128.0.0/10 maxlen: 10
86.128.0.0/11 maxlen: 11
86.128.0.0/12 maxlen: 12
194.79.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:80:d6:c3:d0:50:c1:ce:93:c7:f2:54:a1:3c:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Nov 4 09:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbef45be750fe6760b629698c0afaec13e8979de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:b0:60:80:d3:b6:c0:94:8d:94:8c:e7:9e:
75:7d:07:b5:c0:70:20:8d:de:bd:de:63:dc:cc:93:
09:b8:a9:8b:5d:76:68:7a:ed:3f:ee:b2:8d:36:0d:
4b:c9:91:00:09:a6:b0:cd:2b:08:60:03:d8:58:4e:
b6:1e:42:99:45:77:49:f8:f1:02:66:da:b9:5d:82:
34:34:0d:e8:38:e0:a1:77:98:ee:ec:4e:45:a3:30:
b5:6c:dc:52:5d:86:ee:45:8b:9a:76:51:96:c9:54:
e1:2b:8a:c5:b6:84:44:4f:65:aa:a4:2d:ed:fc:4c:
e3:ec:cc:f9:ee:8c:34:f7:66:e3:88:44:b7:02:84:
e6:aa:e8:2b:05:c3:4f:cb:f4:d2:e2:41:5e:59:77:
d3:02:1e:38:15:0c:13:d5:6b:37:f5:f2:4a:15:12:
ac:26:83:a0:dc:38:61:34:3a:d5:a0:55:01:71:d6:
f5:37:98:0c:fc:a7:f5:f3:e5:c4:01:01:ef:61:04:
55:24:5b:57:40:60:12:21:1b:56:04:d4:a0:16:de:
b3:83:fb:ae:66:82:8e:1e:0f:7f:a4:6d:88:81:04:
df:bf:f7:3e:1c:a5:89:9f:5b:b1:3b:87:6c:6a:f0:
47:9e:32:e7:eb:f2:61:63:25:81:bb:c1:2f:5a:5b:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:45:BE:75:0F:E6:76:0B:62:96:98:C0:AF:AE:C1:3E:89:79:DE
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/y-9FvnUP5nYLYpaYwK-uwT6Jed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.128.0.0/10
194.79.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:03:9e:79:80:d9:5e:33:c7:0b:34:35:29:05:37:40:20:91:
64:d1:d3:df:d2:55:26:b1:6e:1e:1e:61:77:27:af:33:1a:fa:
04:ba:79:a7:b1:13:82:82:d5:d3:40:5a:c4:e8:56:1d:00:bb:
f9:60:46:75:de:2d:8c:52:54:ac:a7:b6:71:a5:1c:1f:96:84:
68:6d:97:03:62:95:7e:60:0a:68:1f:8f:c6:e3:22:52:44:12:
e9:cb:9b:97:71:d4:f1:74:7a:6a:21:b6:17:e2:32:d7:e5:22:
63:d7:03:84:63:a7:d9:9b:98:28:d4:fa:2f:dd:5f:f7:d1:bb:
97:4b:6d:5f:3a:84:9b:30:c9:49:e4:fd:19:34:9c:61:69:1b:
0d:02:38:72:f1:58:09:08:b2:ed:7c:05:70:d7:98:bd:88:92:
30:d0:81:e4:e7:37:ae:8e:59:97:94:18:d8:be:38:9d:c6:40:
d1:f3:79:5b:72:78:f8:cd:d7:93:dc:5f:6f:4a:b1:fb:1d:e9:
8b:6a:f9:75:8b:9e:54:c6:19:ae:c9:be:00:30:8d:f1:1a:15:
30:02:f7:4c:40:fe:42:8a:76:f0:5a:fc:11:cb:7c:a0:1c:53:
88:dc:09:c6:53:59:30:de:97:7e:12:03:ae:e6:2b:c8:e6:5e:
39:8b:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:15:58 2024 by rpki-client on console.sobornost.net