Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/zVE86qzp_QBf08J5eokFMoLBsew.roa
File: zVE86qzp_QBf08J5eokFMoLBsew.roa (raw, json)
Hash identifier: lRuaKxfRMZNy021a+nRccyFI21rpEeCo2hvOBGGgI8M=
Subject key identifier: CD:51:3C:EA:AC:E9:FD:00:5F:D3:C2:79:7A:89:05:32:82:C1:B1:EC
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0193544B6EAB7D7869691F40A218EACD1884
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/zVE86qzp_QBf08J5eokFMoLBsew.roa
Signing time: Fri 22 Nov 2024 14:34:09 +0000
ROA not before: Fri 22 Nov 2024 14:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31019
IP address blocks: 5.42.207.0/24 maxlen: 24
194.213.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:4b:6e:ab:7d:78:69:69:1f:40:a2:18:ea:cd:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Nov 22 14:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd513ceaace9fd005fd3c2797a89053282c1b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:ed:10:d3:9b:b8:59:8c:80:5f:94:2b:f5:
f8:cb:d9:c1:50:9e:18:40:9c:41:cf:9f:83:eb:95:
31:67:56:51:c7:3d:1f:d0:de:fa:6a:8e:58:0d:24:
86:0e:c8:88:f5:5b:55:f1:d5:d5:0a:fa:66:e0:e0:
f7:15:dc:93:d8:ff:9b:29:fa:24:84:cc:78:e8:ac:
da:b3:11:53:af:02:47:ee:c6:58:9e:7d:5c:33:6a:
8d:d8:0f:60:72:f3:54:89:88:06:69:66:55:08:54:
74:b6:db:0a:a7:75:60:a9:53:e1:d0:97:8f:5d:9c:
ec:7c:20:71:c1:54:3a:64:7b:36:16:38:c8:a2:7e:
e2:f3:e9:32:bb:b5:ff:4f:ee:2c:95:33:02:7e:7d:
82:74:d2:0f:4e:8f:9f:68:b1:1d:61:72:20:16:c2:
20:19:47:31:6c:b4:a2:66:2c:38:a9:b5:c6:89:6f:
e0:bb:75:33:fb:b1:15:96:31:bf:c6:4a:6b:26:cc:
eb:13:fb:a0:28:75:da:ba:b1:45:c8:3d:b2:57:16:
12:9a:68:c0:fa:e8:3c:e3:ee:52:cb:09:f9:e1:39:
d7:56:1a:b3:bf:a7:66:b8:59:f2:b7:39:69:c4:56:
64:45:d2:0e:6a:45:17:40:39:34:a6:82:83:42:b5:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:3C:EA:AC:E9:FD:00:5F:D3:C2:79:7A:89:05:32:82:C1:B1:EC
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/zVE86qzp_QBf08J5eokFMoLBsew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.207.0/24
194.213.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f2:97:23:fb:e5:87:bc:5c:e2:90:fe:4b:aa:40:f7:22:ed:
27:51:ed:75:63:f4:6e:51:68:9e:07:a5:9b:73:26:19:d0:12:
06:f1:25:e2:78:b5:fd:ec:2c:16:c5:d4:d7:54:6e:32:2f:a3:
cf:11:07:f5:33:d4:51:5f:f9:a8:f3:c6:76:f8:00:69:e3:27:
ae:dc:0c:47:ed:f0:1f:2b:06:ac:cc:33:e7:91:48:bd:84:a2:
d1:e2:68:e1:55:3e:16:57:72:d4:39:b0:a1:47:28:23:65:39:
40:1b:ce:95:dd:54:cc:de:af:b2:34:b5:b6:a8:18:4d:c2:fc:
d3:dc:0d:b3:03:8c:a5:29:fa:19:df:e8:8e:fc:b4:02:7e:fa:
8f:51:07:01:2a:41:68:49:95:88:14:f5:b3:dd:61:3a:8e:d8:
50:bc:5e:f5:87:bd:17:8c:d6:2b:3c:d5:1b:05:82:98:84:88:
c7:a9:03:5f:c6:b2:86:10:19:06:56:91:39:81:36:3f:0e:0b:
79:30:af:06:53:03:c8:59:7c:37:e7:4b:99:1b:06:40:84:ae:
01:b2:cb:79:28:c4:4b:a2:7b:31:1b:cb:cc:06:bd:7b:56:b2:
cf:3e:7e:cd:8f:a2:e0:2a:75:3a:28:45:39:71:88:86:21:f4:
65:3a:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net