Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ce9nw_7b3PrplUVHuq4DkAkrRFw.roa
File: ce9nw_7b3PrplUVHuq4DkAkrRFw.roa (raw, json)
Hash identifier: Bvr2JGgyVErN3ToZLTQDWZFBQjuDAPTy19m55QTDtu4=
Subject key identifier: 71:EF:67:C3:FE:DB:DC:FA:E9:95:45:47:BA:AE:03:90:09:2B:44:5C
Certificate issuer: /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial: 018E653AF02B8145B4CF9A9BE4E1B989755C
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ce9nw_7b3PrplUVHuq4DkAkrRFw.roa
Signing time: Fri 22 Mar 2024 08:15:45 +0000
ROA not before: Fri 22 Mar 2024 08:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200844
IP address blocks: 185.94.52.0/22 maxlen: 22
185.94.55.0/24 maxlen: 24
2a04:4ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:3a:f0:2b:81:45:b4:cf:9a:9b:e4:e1:b9:89:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Validity
Not Before: Mar 22 08:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71ef67c3fedbdcfae9954547baae0390092b445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:f7:50:13:85:93:47:73:8c:06:65:84:bb:
9a:e9:6d:9b:80:97:9c:06:91:b8:12:2b:e8:8d:b1:
e1:65:af:46:a9:cf:04:b1:af:59:2c:b6:4e:9a:cb:
d3:84:85:48:7b:67:d6:35:fd:00:d9:3e:ee:a9:b9:
f0:69:11:a0:f4:4e:8d:dd:7c:4a:93:fc:b2:85:7a:
c9:a9:99:ad:b3:81:d4:60:60:21:c3:c9:db:dc:ec:
91:5b:b8:b4:31:b2:ef:eb:9c:48:4f:ad:e8:34:60:
22:fe:33:59:a1:cd:fa:a9:2d:09:a3:76:ec:91:8b:
3d:15:5a:bb:24:7e:e5:36:f9:88:5d:85:71:a2:2d:
c9:42:af:70:f1:0c:9a:c2:53:3a:b9:55:d5:5c:4a:
b9:8b:7a:3d:ff:3e:7e:57:a7:55:16:0d:72:cb:ad:
36:46:0b:37:68:c3:70:47:83:ac:2e:91:5e:57:2d:
4c:00:3a:ff:89:ed:18:70:56:40:a7:0d:59:cd:f2:
cb:8e:97:42:58:71:be:86:f2:49:cb:6b:a0:16:af:
c7:b7:97:f9:00:48:ce:65:ac:fc:bd:fe:15:b4:be:
84:6b:c6:a7:78:ce:fc:fb:06:7a:42:4b:c6:7b:42:
e4:b1:e2:c8:e8:61:f6:b7:a6:72:3d:d2:c4:d8:38:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:67:C3:FE:DB:DC:FA:E9:95:45:47:BA:AE:03:90:09:2B:44:5C
X509v3 Authority Key Identifier:
keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ce9nw_7b3PrplUVHuq4DkAkrRFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.52.0/22
IPv6:
2a04:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
18:14:df:ee:54:9b:41:94:d4:c4:2b:3a:fa:e7:f9:de:ef:5c:
ab:ce:cf:fc:df:c4:0b:07:df:16:5f:89:0f:f5:02:f8:fc:40:
98:2f:ad:9a:06:92:26:9e:59:c9:fd:6e:a7:70:bd:16:f8:38:
cf:2e:8c:29:75:f4:a2:0d:c3:38:ce:66:4b:25:cc:27:7f:ae:
1a:c8:98:89:7b:41:69:2c:d0:d1:b0:1a:d4:63:ac:1e:2f:0f:
42:60:56:26:93:47:49:03:2b:a5:5a:02:95:ad:9c:bc:00:ee:
e9:52:14:f0:d7:94:13:9f:f5:68:20:bd:89:f1:36:05:f2:22:
5e:27:72:a0:7e:76:73:74:07:78:c9:f6:79:5d:94:33:8b:7a:
b4:79:8e:cf:43:e2:74:fd:a9:9c:dc:d1:0c:35:fa:93:cd:55:
0e:38:fa:97:f6:12:18:34:4f:cb:39:3a:f6:24:71:24:7b:f0:
38:32:b8:68:fb:04:6b:11:e6:05:0f:59:da:2e:6e:67:a3:31:
d9:87:22:77:05:a1:2a:9d:f9:0a:dd:42:78:a5:d8:b8:66:45:
91:12:81:d7:a3:4d:fc:dc:60:ed:b5:3b:65:6a:ca:a8:56:c9:
ee:b5:03:c9:bb:2f:f9:bf:1f:2a:1e:a8:6e:37:a1:52:40:a1:
f1:31:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:15 2024 by rpki-client on console.sobornost.net