Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/CUHZCuVwZfjqljWTVNJN4-k7yUM.roa
File: CUHZCuVwZfjqljWTVNJN4-k7yUM.roa (raw, json)
Hash identifier: v0uqaCVflPJ7QbzAR1HkAyHOOOVpWvT9TW7yaJDH2Gk=
Subject key identifier: 09:41:D9:0A:E5:70:65:F8:EA:96:35:93:54:D2:4D:E3:E9:3B:C9:43
Certificate issuer: /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial: 01936DAA3027577F7362A261590CA72EBD68
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/CUHZCuVwZfjqljWTVNJN4-k7yUM.roa
Signing time: Wed 27 Nov 2024 12:48:10 +0000
ROA not before: Wed 27 Nov 2024 12:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60735
IP address blocks: 194.124.236.0/24 maxlen: 24
2a0f:3cc3::/36 maxlen: 36
2a0f:3cc3:1000::/36 maxlen: 36
2a0f:3cc3:2000::/36 maxlen: 36
2a0f:3cc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:aa:30:27:57:7f:73:62:a2:61:59:0c:a7:2e:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Validity
Not Before: Nov 27 12:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0941d90ae57065f8ea96359354d24de3e93bc943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:b5:ab:27:ec:fc:47:c9:52:82:3e:be:32:
69:6a:7c:69:0e:58:be:60:ab:1e:b5:79:02:08:a7:
2f:e4:9f:d6:64:81:e5:4e:1e:2b:f4:5d:49:5f:bc:
37:7c:74:c3:08:9f:1c:c4:37:96:ec:fe:b9:14:dc:
e5:13:e4:df:d2:db:53:04:d7:97:00:93:60:ef:be:
44:ff:12:15:f5:ba:08:20:2c:ca:ae:13:04:24:7c:
87:ba:cf:3d:e5:c0:75:29:6c:f9:29:68:4a:6c:ce:
34:8c:a2:df:d8:c5:20:db:19:e1:9b:a8:77:3f:5d:
7e:25:dc:49:e0:34:40:19:53:9c:06:f5:09:8b:82:
fe:5d:48:ec:6d:56:29:cb:a8:f1:1b:b7:71:ab:07:
0c:62:b8:5f:cb:fb:4d:bc:d6:2a:4e:79:15:c4:e8:
ae:ab:da:57:7e:de:12:72:a0:3f:3b:4c:00:b2:b6:
3c:cc:3d:6a:7b:c2:99:ac:5f:7b:eb:d9:97:c6:e7:
f9:8a:f8:79:8c:97:e7:58:79:1f:c5:73:ff:68:da:
5c:5d:31:93:f8:2f:d7:5b:25:0c:ae:6e:ff:74:3c:
32:cc:63:31:1a:ee:be:f4:66:91:7f:ef:78:ef:4f:
93:72:44:bb:43:39:8c:92:e9:54:bf:79:86:93:ff:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:D9:0A:E5:70:65:F8:EA:96:35:93:54:D2:4D:E3:E9:3B:C9:43
X509v3 Authority Key Identifier:
keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/CUHZCuVwZfjqljWTVNJN4-k7yUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.236.0/24
IPv6:
2a0f:3cc3::-2a0f:3cc3:2fff:ffff:ffff:ffff:ffff:ffff
2a0f:3cc6::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1b:e0:68:76:35:9f:fc:7f:e7:0b:9d:c9:01:1e:2b:2f:6e:
39:2e:5c:18:1e:4f:bb:6b:34:ab:b4:95:80:cc:c0:31:d0:50:
f3:0e:72:bd:4a:60:79:04:28:a2:14:2b:12:5d:af:a8:97:de:
79:ab:02:e4:a3:b0:1d:27:2b:a4:4c:52:35:33:12:4f:59:29:
ef:81:04:7c:85:5f:52:0f:a3:74:08:a3:c5:ab:ed:0b:40:36:
c0:f7:3d:97:ee:7f:da:e9:2a:a5:79:f3:cd:e0:94:cd:54:c2:
99:63:09:48:62:fd:c0:b1:a0:23:0f:43:5d:17:e6:d3:9a:03:
67:62:72:e0:92:37:b9:73:db:a8:a2:fc:1a:6d:b5:0b:53:c3:
bd:b3:0c:a0:b8:2e:09:e9:52:f2:fc:54:93:b7:d1:b4:d0:83:
b3:c3:b2:13:e4:da:4d:d5:34:cd:4a:b1:3b:a6:45:51:58:ca:
7f:0f:04:42:1d:a8:8b:f7:6b:cc:7b:ec:74:06:aa:35:3b:2c:
99:f0:ec:a5:78:b9:aa:7e:42:db:97:5d:23:44:d2:69:9d:d2:
34:9f:4d:8a:a9:97:41:d9:30:11:31:3b:a8:3f:c7:43:95:2d:
8a:b1:3b:3a:40:cf:f8:bf:79:36:32:80:f5:16:c6:00:2a:b0:
7a:85:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net