Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Opp85x6wrHc-ZIxaW5GUPz2XxjM.roa
File: Opp85x6wrHc-ZIxaW5GUPz2XxjM.roa (raw, json)
Hash identifier: r1BPsxLx+rDyKRz0MWjaPgFPXiydofMwn1e0ky3byNM=
Subject key identifier: 3A:9A:7C:E7:1E:B0:AC:77:3E:64:8C:5A:5B:91:94:3F:3D:97:C6:33
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 01929C30319C1820F927C4BBE59EFEF88E11
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Opp85x6wrHc-ZIxaW5GUPz2XxjM.roa
Signing time: Thu 17 Oct 2024 20:34:16 +0000
ROA not before: Thu 17 Oct 2024 20:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 5.1.104.0/21 maxlen: 21
212.15.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:30:31:9c:18:20:f9:27:c4:bb:e5:9e:fe:f8:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 17 20:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a9a7ce71eb0ac773e648c5a5b91943f3d97c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:00:ba:1e:3d:e6:8e:06:62:53:f3:bf:35:
d6:09:9a:08:60:5e:de:e1:da:08:d1:ac:0e:b2:ad:
4d:1d:f4:de:2b:8b:2a:be:96:b8:89:bf:84:be:ef:
25:e1:fe:66:9d:43:9c:ff:61:f3:03:7a:58:17:cf:
4a:23:e5:e8:f6:cf:d3:c5:c3:81:0a:0b:fd:36:61:
ef:95:c5:94:eb:7e:a7:6d:3f:1b:f1:9e:9f:87:83:
ad:d0:77:3c:9e:89:ba:61:fb:db:42:85:d2:f6:12:
13:9b:9a:2b:13:d2:87:6c:68:cc:3c:f4:ab:50:03:
92:12:6d:c2:5a:77:34:16:09:10:78:a2:b9:f3:8a:
e4:dc:e6:5e:3b:3b:c6:cb:f8:d0:f5:1b:5e:9a:88:
df:78:3d:54:24:49:78:9f:fa:fe:4d:b2:48:7e:60:
e6:1b:de:9d:24:07:cd:ad:d2:cc:e1:fa:05:b6:22:
48:2a:e7:fb:f5:e4:ca:7f:d6:e4:c6:63:17:25:7b:
53:41:23:73:f0:00:14:66:89:36:89:ec:0d:e1:10:
61:78:2d:72:d4:d2:bb:27:50:c5:4a:49:12:c6:6b:
8f:d0:6e:0a:84:21:a8:e7:06:37:6b:88:f1:e0:b0:
a3:e0:45:31:f6:5d:73:03:b6:d9:b9:4c:fd:1d:c0:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:7C:E7:1E:B0:AC:77:3E:64:8C:5A:5B:91:94:3F:3D:97:C6:33
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Opp85x6wrHc-ZIxaW5GUPz2XxjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
212.15.80.0/21
Signature Algorithm: sha256WithRSAEncryption
94:65:8c:85:49:6a:0d:d7:04:f1:81:24:7a:cb:bc:39:11:41:
e7:1d:bc:6b:1f:57:7a:f4:38:cf:82:ed:b6:15:66:a9:03:ef:
f7:01:50:2f:80:09:87:f2:5b:88:0b:96:0a:18:ae:f6:a3:33:
26:24:70:3d:7f:8f:86:18:d4:43:10:a6:5a:d8:61:6c:7f:27:
41:73:58:66:06:3d:74:a8:7e:92:6d:7b:49:ff:3d:11:b9:1a:
1a:75:54:d9:6f:28:a5:ba:4c:6e:d5:90:ce:5c:4a:30:0e:38:
ec:77:55:75:0a:e5:8a:26:06:77:7c:9f:be:3e:9f:0a:71:5e:
22:87:7a:8e:c7:a8:4f:ff:ea:bb:ab:c8:e8:68:83:af:dd:45:
a7:7c:5a:0b:40:28:62:ad:b1:97:4c:36:a3:3f:01:1c:cc:bc:
a1:bb:fe:d6:f7:90:12:1c:1e:4a:66:ac:54:59:8a:e5:19:a8:
d8:cf:2f:a4:88:dd:9c:43:3d:c1:fe:f3:ac:d5:6e:ca:9b:a6:
32:85:a1:ef:6e:40:cb:81:30:28:dd:81:96:d9:26:26:6d:87:
a5:28:eb:b4:ad:c7:df:b6:39:25:22:4d:61:8a:25:4c:66:15:
ea:5d:06:72:9f:e0:6a:a9:8a:7a:59:06:2c:70:fc:fe:2e:4e:
24:1c:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:19 2024 by rpki-client on console.sobornost.net