Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/MMxtTQQCra6S8rAmF0M1CO-1ins.roa
File: MMxtTQQCra6S8rAmF0M1CO-1ins.roa (raw, json)
Hash identifier: YNI31lbpYzK0KX+5nTiJLbSBR8qBXe9NjjsZpZAC34o=
Subject key identifier: 30:CC:6D:4D:04:02:AD:AE:92:F2:B0:26:17:43:35:08:EF:B5:8A:7B
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 018CC86F63A9886606CC3C103BB963D92190
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/MMxtTQQCra6S8rAmF0M1CO-1ins.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205493
IP address blocks: 185.215.192.0/22 maxlen: 22
2a0b:ad40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:a9:88:66:06:cc:3c:10:3b:b9:63:d9:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30cc6d4d0402adae92f2b02617433508efb58a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:3e:c3:57:7a:a0:de:4c:ee:c6:1e:71:3b:
dd:63:a7:23:15:6c:dc:af:ad:28:d6:d4:b9:0e:0d:
5c:7b:60:2f:62:a3:d7:d0:58:5a:15:55:ab:b4:a2:
f8:65:84:42:1a:11:fd:6e:ee:2f:01:7d:86:43:8f:
80:16:2b:11:0b:44:d9:40:4b:26:38:07:0a:4a:1d:
8b:9a:a7:e0:25:6c:ec:71:2c:e6:4e:0c:18:2b:cc:
3a:c8:c4:1e:f4:9b:99:69:99:df:6f:8e:b3:e4:39:
84:8e:b6:26:ca:fc:21:50:0c:c3:a6:de:bd:5d:7b:
5a:86:35:99:5b:60:eb:07:3d:85:a9:58:06:44:b6:
52:74:e6:0b:df:1e:52:e8:cd:78:24:cd:91:d9:89:
a5:20:21:e7:fa:55:b5:44:25:d2:2d:0c:aa:d2:e5:
14:f8:85:42:59:54:79:7d:b4:36:12:6f:b5:6e:64:
19:14:89:01:97:a4:43:f6:26:87:7c:84:c4:92:eb:
13:47:45:c1:cc:42:47:bb:56:94:2c:77:d6:ec:f7:
2a:0f:c7:3d:ca:83:62:f5:72:32:35:3f:74:bc:b1:
64:13:46:9e:3b:37:5a:46:51:e5:86:04:f5:df:d1:
6a:94:b7:4e:34:35:68:a2:d0:1f:38:c5:37:7f:b7:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:6D:4D:04:02:AD:AE:92:F2:B0:26:17:43:35:08:EF:B5:8A:7B
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/MMxtTQQCra6S8rAmF0M1CO-1ins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.192.0/22
IPv6:
2a0b:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
8c:5d:6b:0d:ed:38:ca:c9:d4:9b:2f:47:9f:f9:ff:ae:66:f5:
df:f6:cd:9a:46:72:f8:f9:51:7f:dc:03:47:af:ba:b6:0a:bd:
c8:0d:51:d3:89:83:c3:bc:71:24:bb:13:ed:a2:cd:b9:89:39:
2a:9b:13:4b:c1:be:b6:03:35:8f:b0:eb:d8:1a:0b:0c:71:e4:
84:33:31:d6:0c:6f:37:b3:32:b6:ce:ad:42:61:b4:2b:24:32:
a9:fd:03:e5:45:9e:71:e6:a4:ce:89:3c:ca:2e:b1:e5:81:08:
97:27:2c:9d:fb:c3:0f:4d:c4:a6:d5:70:f8:1b:c6:3f:0b:88:
65:a6:61:46:07:04:98:ab:26:88:06:fe:a3:23:9f:10:f0:3f:
c6:9b:52:d5:fa:65:9d:12:7b:e0:3e:20:13:4f:8c:b4:db:55:
16:9b:ac:c2:ae:bc:de:09:24:f7:e3:9c:b4:ea:f7:15:89:3c:
3f:0f:6d:4d:42:c3:ec:e9:a9:3a:11:3d:85:af:5c:3e:16:45:
8b:96:17:33:e5:96:c0:fe:6b:a6:92:a7:cb:1f:67:f5:b2:fe:
3e:02:89:02:5b:33:c2:ea:3e:a1:cf:c6:cc:bc:06:71:a7:47:
76:46:fb:d5:cf:20:aa:0b:d1:be:98:fe:bd:10:0e:45:63:88:
e7:71:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net