Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/nEM21DX70wZCPy_bOtMBg-6EZYA.roa
File: nEM21DX70wZCPy_bOtMBg-6EZYA.roa (raw, json)
Hash identifier: 1WtkAo2mxvCZB6i7FGsNuB7LGhwVfu6p51nYD8CFotM=
Subject key identifier: 9C:43:36:D4:35:FB:D3:06:42:3F:2F:DB:3A:D3:01:83:EE:84:65:80
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 018E433670E8A53158520C40117190FF7EE9
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/nEM21DX70wZCPy_bOtMBg-6EZYA.roa
Signing time: Fri 15 Mar 2024 17:43:45 +0000
ROA not before: Fri 15 Mar 2024 17:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49680
IP address blocks: 95.142.224.0/24 maxlen: 24
95.142.225.0/24 maxlen: 24
95.142.226.0/24 maxlen: 24
95.142.227.0/24 maxlen: 24
95.142.228.0/24 maxlen: 24
95.142.229.0/24 maxlen: 24
95.142.230.0/24 maxlen: 24
95.142.232.0/24 maxlen: 24
95.142.233.0/24 maxlen: 24
95.142.234.0/24 maxlen: 24
95.142.235.0/24 maxlen: 24
95.142.236.0/24 maxlen: 24
95.142.237.0/24 maxlen: 24
95.142.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:36:70:e8:a5:31:58:52:0c:40:11:71:90:ff:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Mar 15 17:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c4336d435fbd306423f2fdb3ad30183ee846580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:53:34:95:cd:a5:58:55:8b:7e:79:4d:a0:
52:ab:9a:2d:b8:a0:dd:d4:f9:bd:fc:1a:a3:74:0d:
3f:b3:d0:3b:b2:f4:0a:7a:8b:fe:38:39:5d:b9:33:
20:52:55:1e:5a:b0:66:5c:51:b8:8a:84:0d:83:ad:
48:ea:9a:fa:33:d3:94:64:93:e6:ca:23:a4:e0:e4:
8f:f7:e9:8c:e9:dd:86:f8:f5:19:e1:ad:05:fb:89:
57:ee:39:01:20:cc:6b:58:d0:9e:60:be:ad:02:a5:
a1:4d:bc:2e:4c:88:a7:1e:f2:bd:97:b4:27:a0:fe:
1c:d3:0f:fe:10:c5:00:e3:ce:90:7e:59:e4:2c:04:
c5:00:10:14:6c:65:3a:90:cc:3c:ed:02:bb:6d:38:
1f:59:2e:63:a9:45:4f:e6:db:2f:e6:bf:84:c5:b3:
8b:10:6d:6f:73:0c:55:88:80:52:3a:65:2f:58:e5:
98:12:03:5f:0d:bd:33:66:7d:5d:f2:16:cd:b5:31:
3a:89:e9:fd:d7:54:81:9f:93:d3:8d:d9:84:8e:e6:
e2:f8:09:bd:50:53:fc:47:ed:30:27:bb:98:d8:c2:
d3:bc:7c:7c:00:96:95:1d:02:86:e5:a8:c6:3e:41:
49:62:cd:b9:68:bf:ac:2e:ca:97:99:fe:7a:a3:53:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:36:D4:35:FB:D3:06:42:3F:2F:DB:3A:D3:01:83:EE:84:65:80
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/nEM21DX70wZCPy_bOtMBg-6EZYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.224.0-95.142.230.255
95.142.232.0-95.142.238.255
Signature Algorithm: sha256WithRSAEncryption
e3:b5:a9:d1:9f:bc:cf:a4:93:36:bb:b1:82:c3:96:ba:b7:80:
8e:c1:25:90:39:cc:80:90:a8:d2:98:7f:06:ab:e9:09:f7:ac:
75:24:01:74:89:d3:d3:7e:b7:40:bd:ef:83:41:da:de:e9:c1:
a7:18:94:46:37:01:47:5b:44:e7:1e:40:f0:04:27:d5:66:17:
2a:05:da:53:9f:a2:b5:9f:63:95:01:83:c8:80:9a:3d:90:40:
00:4c:1b:78:2d:9d:01:84:7b:4a:a2:88:d1:36:2e:36:cd:31:
8b:8c:71:16:c6:0c:f6:5e:30:57:46:19:58:e3:05:60:7e:dd:
f9:d5:bf:7a:1e:b6:ce:dc:da:ca:b8:fd:1a:83:eb:b9:07:3c:
b0:ea:7c:e4:e5:a9:7f:89:f1:49:c5:f1:84:5f:05:2f:32:f5:
1a:95:cd:b9:ac:7e:01:96:2c:bc:d5:24:0b:f9:26:6a:f0:8d:
eb:52:77:9b:3f:69:93:0f:95:b4:64:19:2b:86:c8:f9:95:42:
f6:5d:91:02:be:18:9c:d1:90:c1:62:18:8f:68:7f:5c:f4:f4:
1e:09:93:84:5e:52:fd:6f:e8:ab:ac:cf:f4:ec:3f:78:d1:33:
dd:05:74:15:41:b0:69:f0:e8:9a:55:77:7c:a6:5a:73:78:09:
0b:01:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:33 2024 by rpki-client on console.sobornost.net