Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/_s-E4kfSxtC5WR1yLYd72cKtW5Y.roa
File: _s-E4kfSxtC5WR1yLYd72cKtW5Y.roa (raw, json)
Hash identifier: TWjdxvZp8e86B9oTaPSzUbKziku9RY00mwORr/c5lLs=
Subject key identifier: FE:CF:84:E2:47:D2:C6:D0:B9:59:1D:72:2D:87:7B:D9:C2:AD:5B:96
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 0193DE0BC90DD6A602FA6C3CDD1A320114A3
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/_s-E4kfSxtC5WR1yLYd72cKtW5Y.roa
Signing time: Thu 19 Dec 2024 08:32:14 +0000
ROA not before: Thu 19 Dec 2024 08:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/21 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:0b:c9:0d:d6:a6:02:fa:6c:3c:dd:1a:32:01:14:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Dec 19 08:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fecf84e247d2c6d0b9591d722d877bd9c2ad5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:52:fa:69:e5:ae:70:22:64:d1:29:34:ff:
14:73:c2:b7:d6:50:c9:5c:c5:dc:a3:42:f6:aa:3c:
55:9b:98:0a:d7:03:ce:8d:1a:db:da:15:a0:a2:96:
db:6a:bd:3c:a8:d6:3b:1d:9a:8d:01:3a:e8:14:6c:
f3:41:f0:ff:23:b1:94:bf:f6:3f:0d:97:f4:7d:aa:
6f:fb:46:4e:86:38:72:42:a6:b8:e6:dc:f4:2f:db:
ba:2a:4e:6a:a4:40:02:a1:b3:bb:c2:dc:c9:46:94:
46:a2:72:35:ae:2f:16:b6:c9:a7:39:7f:2b:5b:21:
be:73:78:7b:1f:3f:33:c1:6d:ad:ed:2f:35:1b:b2:
ec:03:12:13:c5:f9:10:04:68:bd:d2:96:e9:a5:ef:
7b:58:50:b8:6c:e8:e9:f7:51:db:2d:78:2e:3d:ec:
c5:88:df:b8:bf:c1:e3:66:09:85:0c:da:f6:d2:97:
b7:78:59:c5:18:69:d6:a9:27:27:8a:4c:6d:6e:87:
73:67:ff:32:32:ea:0a:d4:07:ed:a6:31:6e:f7:a7:
fe:1c:21:83:2e:58:4b:1d:0e:46:dc:ad:9f:6d:c6:
4e:e6:24:3c:61:2c:8c:ff:b6:0a:20:17:62:b7:1d:
9f:8b:c1:36:a1:f5:12:66:c2:a3:4d:e4:e4:57:f0:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:84:E2:47:D2:C6:D0:B9:59:1D:72:2D:87:7B:D9:C2:AD:5B:96
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/_s-E4kfSxtC5WR1yLYd72cKtW5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
8c:b1:a9:e2:f1:70:d0:76:9f:1e:dd:4a:7a:23:40:81:df:f8:
5d:3b:f9:56:77:9e:39:a7:6f:c4:cb:31:fe:97:72:90:12:0e:
ca:94:0d:16:2c:fb:23:a7:b6:90:67:bc:9a:58:fc:7d:48:37:
79:f4:93:09:2f:c4:ab:b8:16:85:bc:6c:81:f3:58:ef:ac:3b:
76:15:86:c3:26:07:27:59:6b:7b:43:5b:83:f8:0d:01:dc:28:
77:14:cb:07:77:f2:c3:73:1c:cb:b4:3b:39:dc:99:31:c2:59:
46:7a:1b:9c:33:e6:08:81:7f:3a:dc:3c:03:87:d2:ec:fc:cf:
08:1f:16:e6:ec:c3:cf:13:7b:24:ec:27:60:26:13:33:b7:76:
49:41:d3:19:0a:ee:ca:ea:bc:01:9f:35:70:a1:1f:b4:41:c7:
12:aa:a4:6c:f0:b0:41:d4:35:25:ee:26:47:fb:dd:da:82:76:
96:ee:df:46:69:83:02:4b:39:44:04:f5:f8:7e:03:2c:45:e6:
d4:61:07:6d:4f:59:b2:83:8a:32:37:40:bd:c5:ce:0c:24:09:
7c:c2:12:61:c0:a8:be:2a:09:31:21:b7:4c:67:44:b3:7f:c0:
38:ee:01:0d:89:e8:04:b5:bf:8b:44:47:c7:eb:2b:4f:5a:2b:
4c:9a:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:19 2024 by rpki-client on console.sobornost.net