Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Oro8IQuYNNecg1hBo2ivUkzp_x0.roa
File: Oro8IQuYNNecg1hBo2ivUkzp_x0.roa (raw, json)
Hash identifier: RwEqiED5VD7shNNtKmE5oA5MFJK2vDKvPE2Sw0p+U+c=
Subject key identifier: 3A:BA:3C:21:0B:98:34:D7:9C:83:58:41:A3:68:AF:52:4C:E9:FF:1D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0193DE65587A0DD979CEF0A3C257DA495B5B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Oro8IQuYNNecg1hBo2ivUkzp_x0.roa
Signing time: Thu 19 Dec 2024 10:10:03 +0000
ROA not before: Thu 19 Dec 2024 10:10:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198919
IP address blocks: 188.72.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:65:58:7a:0d:d9:79:ce:f0:a3:c2:57:da:49:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Dec 19 10:10:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aba3c210b9834d79c835841a368af524ce9ff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:57:cd:50:81:4d:c5:73:bd:4a:02:fc:d2:
63:1e:ad:d9:4d:fe:a4:72:30:6a:6b:6c:81:d8:98:
4d:18:ca:d4:37:65:df:3d:ab:70:4b:81:2d:8c:a2:
e4:73:ad:88:7b:6b:c2:67:b0:2d:ca:0d:fd:da:b2:
d9:7d:d0:a8:4f:ed:26:dd:6e:1b:09:98:d4:0f:b7:
4b:8f:b4:93:e4:8c:88:ce:da:fb:f1:7a:29:98:09:
02:bd:17:89:52:d8:7b:bc:cf:07:2f:db:d5:40:98:
64:47:f4:cb:e9:49:16:af:89:9a:c0:17:7a:99:7b:
5a:82:f3:c0:d2:a0:0d:96:83:8d:58:7e:f5:6a:98:
61:34:2e:5f:79:ed:26:f9:24:43:88:14:73:ec:ff:
c7:09:30:dc:9e:79:dc:de:cb:44:cf:07:75:a8:8e:
e9:59:fd:aa:4b:f1:6a:f5:a2:1a:0c:af:19:3f:cc:
0b:a6:79:94:60:1e:15:39:a9:7c:23:26:53:05:a6:
f3:19:3a:63:d3:b7:c3:35:90:c2:64:15:a4:e1:c5:
b4:a9:90:11:d2:60:2f:6c:85:3e:f0:10:ac:9f:5c:
f7:3a:50:02:4f:e3:3a:5a:dd:7b:03:2c:65:56:36:
92:2e:55:9a:28:dd:46:94:24:29:3a:20:2e:4c:35:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:3C:21:0B:98:34:D7:9C:83:58:41:A3:68:AF:52:4C:E9:FF:1D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Oro8IQuYNNecg1hBo2ivUkzp_x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e9:00:ed:ba:7d:34:40:39:58:34:34:7a:c1:d6:cb:2a:a0:
1c:9c:3f:47:14:86:27:c6:1d:bd:0d:69:b7:d0:23:ea:1b:f3:
93:8e:d7:a1:9b:c8:84:17:16:c2:1c:8d:3f:08:a8:fc:78:2f:
f1:55:cf:1e:0c:a6:1b:d4:69:be:ba:2d:cd:11:f7:52:ed:15:
3e:a5:a1:5f:c1:05:40:69:ec:70:23:8c:cc:a9:7f:74:15:43:
48:7f:1a:18:3b:d7:df:69:41:4e:79:1c:3c:2a:1c:c2:b8:cb:
d9:51:11:1e:76:58:36:53:f7:3c:88:bd:72:be:c9:61:bd:51:
3b:80:e2:96:cf:26:c5:4f:b3:c1:50:b7:2b:df:f6:6f:e5:18:
ce:b9:94:c7:4a:1a:f8:fe:29:fb:02:98:48:29:31:ff:c1:34:
4a:90:1f:05:de:a7:30:46:d1:37:f5:a2:e9:35:e7:80:37:70:
93:6d:e3:04:72:2e:c4:7b:c9:3c:b7:81:0b:c6:87:bd:2d:c8:
76:7f:77:49:33:64:c8:f7:65:44:ed:e5:9b:8c:96:a5:12:25:
88:09:83:01:63:5a:cf:59:15:27:76:bf:9b:3a:d6:94:f9:6b:
2b:3b:06:c2:f8:12:1f:3d:97:08:d6:02:2f:e9:aa:aa:6d:ea:
34:4a:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net