Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/04jgh2LRlQzI-4ixm0HOWAS4ZRM.roa
File: 04jgh2LRlQzI-4ixm0HOWAS4ZRM.roa (raw, json)
Hash identifier: jWbbDpytanzkK3MQlgSeN+UqZ6AcAhktr1XIL0jJo+w=
Subject key identifier: D3:88:E0:87:62:D1:95:0C:C8:FB:88:B1:9B:41:CE:58:04:B8:65:13
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0192B3ED775433CD4FBD676538F073C00F5B
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/04jgh2LRlQzI-4ixm0HOWAS4ZRM.roa
Signing time: Tue 22 Oct 2024 11:12:17 +0000
ROA not before: Tue 22 Oct 2024 11:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49680
IP address blocks: 95.142.224.0/24 maxlen: 24
95.142.225.0/24 maxlen: 24
95.142.226.0/24 maxlen: 24
95.142.227.0/24 maxlen: 24
95.142.228.0/24 maxlen: 24
95.142.229.0/24 maxlen: 24
95.142.230.0/24 maxlen: 24
95.142.233.0/24 maxlen: 24
95.142.234.0/24 maxlen: 24
95.142.235.0/24 maxlen: 24
95.142.236.0/24 maxlen: 24
95.142.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:ed:77:54:33:cd:4f:bd:67:65:38:f0:73:c0:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Oct 22 11:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d388e08762d1950cc8fb88b19b41ce5804b86513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:c1:47:bb:88:a4:d4:6c:7f:9a:87:3c:12:
7d:0b:a1:49:77:ca:3e:48:15:d1:5f:cc:3b:3d:c8:
e5:2b:5b:a9:0e:1e:7d:b5:a5:de:72:22:30:eb:e4:
6c:3b:ab:b2:3d:5f:da:0b:9a:ba:ad:c0:25:13:c7:
ed:86:7e:c5:8a:ac:ad:0d:0d:40:eb:07:3e:3a:62:
50:6c:6c:e5:e7:d9:4a:3d:82:01:1f:ee:df:4d:fe:
1c:b0:9e:80:55:aa:1f:3b:85:ea:27:d8:79:5f:d3:
25:59:e8:93:af:2a:f1:cc:66:30:c4:6f:c5:63:2f:
62:2f:9f:92:d2:e7:c1:ad:50:e7:01:81:02:a6:0e:
80:01:eb:c4:6e:50:ae:88:15:d3:63:53:24:13:bc:
d7:d8:5c:34:a4:48:9a:18:cb:f8:57:2b:24:40:e6:
b6:07:a6:7b:d1:15:c5:d0:e0:e0:e6:a5:1b:5f:5a:
12:2c:36:75:1f:46:c2:c4:53:2b:ce:6b:32:0a:fd:
cc:af:2d:d5:af:94:02:0b:24:92:35:3a:ad:9d:02:
a9:98:6e:dc:03:63:3c:33:6a:02:84:f4:72:c3:35:
2e:b0:62:73:04:54:03:d7:35:83:81:f6:86:03:39:
9e:45:fd:2b:26:3f:54:2a:dd:b4:50:4a:fa:b7:34:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:E0:87:62:D1:95:0C:C8:FB:88:B1:9B:41:CE:58:04:B8:65:13
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/04jgh2LRlQzI-4ixm0HOWAS4ZRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.224.0-95.142.230.255
95.142.233.0-95.142.237.255
Signature Algorithm: sha256WithRSAEncryption
2c:77:1c:de:29:20:d9:cb:80:99:4d:86:b2:1f:99:f2:75:f7:
30:98:6b:18:09:9f:c4:f2:67:f4:e3:a3:00:88:57:19:25:3f:
4f:74:13:66:cb:79:72:3e:89:4f:0e:40:0d:dd:ec:ce:74:11:
c4:f4:ed:b1:8a:91:81:d2:36:17:58:fe:3b:94:c6:d1:f8:26:
18:83:4b:55:40:4d:b7:39:77:bf:06:4d:90:64:7e:8e:50:5f:
0f:45:1d:08:62:1c:fb:9c:bf:23:c3:31:c4:ba:a4:55:28:58:
b3:bb:86:00:25:35:6d:8e:70:b2:5a:a2:97:97:61:bd:d2:4e:
5a:e9:bf:20:92:34:be:87:c6:01:64:55:01:e8:b2:fc:d8:af:
a5:ce:ad:10:e4:e6:35:0b:63:62:db:3c:38:1f:f2:59:45:74:
bc:d4:3a:53:46:9a:2e:e5:33:15:04:69:d8:13:f3:97:63:52:
6e:22:51:f2:ca:3a:1f:09:ac:3d:a5:d0:72:78:9f:22:d4:38:
e7:af:d9:72:3b:31:b4:46:83:8d:ad:9d:ee:25:07:8b:92:85:
5b:b5:fd:3e:ef:81:0e:2b:ab:5b:48:05:0c:72:8f:4f:e5:ae:
d8:b1:5f:9c:14:38:45:12:81:7c:37:13:5d:c4:bc:54:97:4f:
8d:0a:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net