Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VbPK8DNYHFpswy4gFVWt4iECpO8.roa
File: VbPK8DNYHFpswy4gFVWt4iECpO8.roa (raw, json)
Hash identifier: wugJs231BdSeZrhstp+dcfNqSz3p/SJduwHIkkDvsPQ=
Subject key identifier: 55:B3:CA:F0:33:58:1C:5A:6C:C3:2E:20:15:55:AD:E2:21:02:A4:EF
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 01926CAD55D6A33295FBE95452565BD700DB
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VbPK8DNYHFpswy4gFVWt4iECpO8.roa
Signing time: Tue 08 Oct 2024 15:09:11 +0000
ROA not before: Tue 08 Oct 2024 15:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 188.211.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:ad:55:d6:a3:32:95:fb:e9:54:52:56:5b:d7:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Oct 8 15:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b3caf033581c5a6cc32e201555ade22102a4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:e5:c6:18:37:6a:8b:fc:3f:ad:f7:cc:0b:
ae:6e:03:00:01:29:f1:3b:cf:7c:30:50:4d:ab:bc:
b3:ff:4c:41:bf:4c:b5:20:76:d2:36:1a:09:f5:d9:
c6:d7:c1:6f:bd:4c:0e:ce:35:a8:80:df:a0:4e:bd:
8c:f0:58:63:70:35:e8:76:c6:d8:27:02:37:da:0a:
db:b7:9d:da:ae:fa:3a:5b:20:bc:36:d8:6c:2e:45:
ed:75:2e:56:2f:82:1c:5a:aa:7c:de:4f:ee:a1:9a:
f8:e7:78:be:7e:4f:5f:35:47:f3:46:bb:01:9b:9c:
b6:5c:6d:2c:ed:33:7b:ac:6d:19:2e:ca:4a:94:10:
e5:6e:22:60:34:7d:fd:8d:7d:5b:17:af:f7:7d:9c:
86:8d:00:61:2d:48:07:2c:16:69:74:9a:6e:d6:96:
86:b6:95:2a:48:ed:3e:cb:10:15:2b:60:8d:bc:22:
ab:8c:b8:4f:91:6e:e3:30:16:b9:b5:93:44:b7:b3:
0f:93:40:ca:ef:90:b0:18:9f:e1:0b:96:35:85:89:
81:97:2a:63:4f:27:a8:d4:4f:45:cb:e3:d9:48:2f:
a5:e3:88:72:53:1e:f5:92:39:56:a0:0c:cc:1f:90:
ef:e6:7d:37:e3:3c:54:aa:f9:51:7b:89:6b:fa:17:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:CA:F0:33:58:1C:5A:6C:C3:2E:20:15:55:AD:E2:21:02:A4:EF
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VbPK8DNYHFpswy4gFVWt4iECpO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.166.0/24
Signature Algorithm: sha256WithRSAEncryption
12:31:bc:50:c8:8c:95:70:86:3a:56:98:c1:46:26:d9:a3:d5:
46:f1:9c:2c:62:e8:2a:e0:dd:d5:1b:0a:53:b4:fc:7b:4b:7b:
6f:f7:fb:9f:a3:a4:e6:61:84:2a:82:a6:21:ba:c0:5b:de:ef:
c8:15:d1:f5:a1:d0:4b:5d:f8:f5:33:6b:d9:3f:84:0d:f9:c6:
1e:ae:f8:7c:13:e0:ba:08:d8:1d:b3:8c:f5:47:57:3c:11:22:
13:8f:0e:f3:0e:52:0b:8d:c3:26:eb:ba:16:a7:63:e3:fa:26:
ca:09:bf:0f:1a:20:02:87:96:cd:4e:9d:ad:6c:11:e1:e2:f7:
6a:64:3a:34:62:c9:72:28:e0:11:70:61:f9:42:53:4b:82:a6:
82:5a:5a:2a:fd:5f:a8:1b:e4:22:1b:c9:75:76:97:36:0a:57:
65:a2:5f:86:94:21:b9:74:ac:bf:12:9e:c0:7e:58:34:b9:09:
32:f3:6c:bf:3b:a8:fd:b2:24:11:ca:18:77:f2:69:58:1e:d7:
8c:c8:8d:f6:1e:d3:0f:da:0c:b4:64:4b:0f:ff:e2:dd:3c:7a:
88:10:e2:8a:00:33:e0:04:f5:4f:0e:ca:86:77:f8:5f:0d:e6:
42:20:a0:36:88:72:13:71:ea:98:9a:bc:bb:25:04:85:7f:0a:
46:56:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net