Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/ZvyAUTsn0wdx0S1x_wHzD_TmsK8.roa
File: ZvyAUTsn0wdx0S1x_wHzD_TmsK8.roa (raw, json)
Hash identifier: kN+xfAHRhEYqCRS4z0cQ5/oXRBM2gpNoLhwWAZxQUng=
Subject key identifier: 66:FC:80:51:3B:27:D3:07:71:D1:2D:71:FF:01:F3:0F:F4:E6:B0:AF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0193D72FED28E1DD0BDE8BCC08B9193BC336
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/ZvyAUTsn0wdx0S1x_wHzD_TmsK8.roa
Signing time: Wed 18 Dec 2024 00:34:22 +0000
ROA not before: Wed 18 Dec 2024 00:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15694
IP address blocks: 46.174.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:2f:ed:28:e1:dd:0b:de:8b:cc:08:b9:19:3b:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Dec 18 00:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fc80513b27d30771d12d71ff01f30ff4e6b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:b7:d6:83:48:7f:59:12:43:02:41:7d:15:
bc:ca:c2:af:a4:62:df:bb:19:66:a7:77:75:00:6c:
06:09:6d:48:c5:a8:dd:f2:2d:46:dd:12:ff:bd:e8:
42:83:a9:be:14:f1:d7:d4:d0:96:f0:64:49:c2:9e:
45:bf:38:bc:f1:aa:63:65:8f:83:75:00:34:53:0f:
34:8f:1a:61:42:e6:1a:43:b8:7f:34:88:b1:2e:ff:
27:a1:c2:24:2f:19:a1:6c:8b:1a:a7:bf:b1:ae:2b:
e9:83:26:e9:bf:bb:4e:7a:e3:99:dc:9b:16:6c:2e:
a7:e4:68:77:f7:89:5d:88:48:29:8f:a2:f6:82:11:
2f:2f:b6:d2:fd:24:8c:64:63:6f:f4:aa:15:98:eb:
a0:05:8e:59:de:80:7d:f8:91:d0:a0:8d:e5:f8:7b:
68:dd:62:8a:8e:8f:34:1f:91:9a:62:8b:b8:35:e8:
6d:9e:68:a7:1e:c7:ca:e5:4e:cb:30:57:21:e0:2c:
00:f2:b7:85:aa:cc:70:0b:d8:64:8b:c6:95:f5:64:
22:c0:46:17:6b:8e:1b:9b:e0:c4:85:45:f2:dc:75:
17:7d:ed:bb:b5:98:30:ce:bf:be:ec:ae:70:76:53:
e3:c4:31:23:bc:ee:83:b0:b7:e3:b1:d0:5c:d1:a3:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:80:51:3B:27:D3:07:71:D1:2D:71:FF:01:F3:0F:F4:E6:B0:AF
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/ZvyAUTsn0wdx0S1x_wHzD_TmsK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:16:69:ef:35:db:f4:30:70:d0:91:10:da:9d:dd:de:62:45:
f5:cb:13:36:29:fa:02:06:63:a6:9b:1c:d7:83:44:37:9f:b5:
c5:16:b4:60:9d:80:f1:9b:39:5c:fb:84:e6:e8:71:de:07:0a:
69:43:7e:fe:4a:9a:0c:c5:eb:ec:98:f9:60:5a:8c:f8:ac:18:
cf:ca:0e:c3:dd:cb:83:85:35:7f:d0:ce:b7:72:45:06:65:2f:
9c:aa:8b:ab:af:01:c8:a7:dd:5e:ea:e6:9d:35:85:9c:1d:63:
87:c4:da:ed:dc:0e:31:3d:83:ad:29:9a:b8:d7:01:ae:72:2d:
0a:c0:94:40:01:f3:c6:6e:93:66:5c:ab:c1:2c:fe:ed:0c:30:
ab:23:46:80:71:cc:d1:5a:6b:9f:b9:bf:b0:30:29:24:c4:47:
09:7f:c0:27:44:85:23:c4:01:84:eb:be:aa:72:67:03:22:f1:
3a:1a:7b:f6:1e:97:17:5b:22:57:16:5c:e3:f0:e0:59:6a:4f:
be:18:01:5e:f7:f8:2b:34:bf:95:e3:b2:8a:98:2c:de:3b:57:
f4:d7:b0:fe:f2:97:4f:82:72:38:16:e8:25:a2:66:f9:5c:aa:
61:9c:5a:36:fe:62:ab:c5:55:75:b6:72:e7:75:0c:2b:1e:ab:
f8:08:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net