Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/_-zl1zFPeCkCo_whgAeuBvJO9_Q.roa
File: _-zl1zFPeCkCo_whgAeuBvJO9_Q.roa (raw, json)
Hash identifier: csJIXSOx6zUx1fusuzlrx8S8wMTFStdjHHvxUb1hyCg=
Subject key identifier: FF:EC:E5:D7:31:4F:78:29:02:A3:FC:21:80:07:AE:06:F2:4E:F7:F4
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 01919C6444BD14CBAD0AB905BE0B1A0F5DFE
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/_-zl1zFPeCkCo_whgAeuBvJO9_Q.roa
Signing time: Thu 29 Aug 2024 04:28:22 +0000
ROA not before: Thu 29 Aug 2024 04:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49136
IP address blocks: 81.162.32.0/20 maxlen: 20
94.231.128.0/20 maxlen: 20
94.231.133.0/24 maxlen: 24
94.231.135.0/24 maxlen: 24
94.231.136.0/24 maxlen: 24
94.231.139.0/24 maxlen: 24
109.229.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:64:44:bd:14:cb:ad:0a:b9:05:be:0b:1a:0f:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Aug 29 04:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffece5d7314f782902a3fc218007ae06f24ef7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:30:dc:6b:14:a9:6c:7a:02:4d:3d:a7:a7:
a8:fe:2c:fa:c7:25:b2:a1:0e:48:50:ed:e0:d6:e4:
0f:f9:e4:ac:cc:7a:8f:56:02:55:26:13:3a:bc:b9:
bb:5b:07:61:aa:2b:62:de:3c:c0:4b:ff:e8:59:1a:
ed:dc:8f:c4:2b:f7:a5:2b:5d:05:1b:b0:4b:84:e9:
4e:8c:82:d2:ff:7a:de:1e:46:f5:19:57:51:1c:f0:
69:da:20:b9:80:e0:57:f7:79:44:4c:d3:4c:9f:55:
dc:04:48:3e:68:81:a9:7e:fb:64:62:b3:ea:f6:2d:
51:46:a0:4b:03:85:b9:91:ca:7a:cb:b2:17:d0:80:
85:a0:82:28:8e:aa:1a:e0:1e:0c:52:da:ea:e3:ab:
cc:41:1c:c9:97:b1:7d:3f:c6:fe:01:02:57:e1:8a:
37:9f:36:9f:8c:d5:41:7b:b3:6d:55:70:71:e3:7e:
e5:a6:93:5f:50:75:d2:93:92:2d:3e:06:3a:6a:e0:
78:bd:da:55:77:36:89:8d:fc:65:da:56:d6:a2:3b:
51:0a:24:55:34:de:1c:92:4d:81:cf:4f:c8:7f:7b:
6b:e1:9a:98:93:7e:d8:5a:6d:3f:4f:df:0d:6d:97:
e0:c1:03:eb:41:2a:f2:99:49:e8:e9:ec:3d:d5:82:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:E5:D7:31:4F:78:29:02:A3:FC:21:80:07:AE:06:F2:4E:F7:F4
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/_-zl1zFPeCkCo_whgAeuBvJO9_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.32.0/20
94.231.128.0/20
109.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:9e:d5:05:50:28:31:75:a3:29:6d:d8:14:b3:29:44:07:6a:
b3:c0:fb:4b:48:f6:f3:a5:49:7c:e3:e8:0b:40:57:02:fb:ab:
f0:ba:41:9c:eb:16:46:eb:b7:12:39:4b:0c:be:f9:e2:7a:e7:
c6:be:94:99:9d:0d:a9:40:f5:3c:d7:d6:75:ef:fe:cf:57:0f:
8f:96:3a:ad:3c:f2:c1:57:ab:72:3d:e7:99:b6:49:fe:8c:67:
f3:b6:11:f1:bf:75:73:40:f6:ae:fa:b8:71:a4:b6:9c:1b:67:
3a:e6:10:5e:cf:df:01:c5:f0:fc:29:ca:23:a5:b8:ed:2c:dd:
0c:89:58:4c:79:ce:fe:83:40:f0:8d:99:a2:d9:9c:d9:25:59:
ff:f2:6b:89:54:92:38:18:9c:dc:cc:f3:f7:85:5f:08:25:79:
29:67:10:a1:04:c7:22:1b:80:2e:14:2b:f5:2c:5f:5d:31:8b:
26:a6:ed:44:bf:e2:1a:be:78:c7:39:86:63:68:c7:16:fe:29:
f1:b0:fc:60:ae:85:a0:3f:d4:ac:8e:9f:55:69:18:49:4d:17:
d2:33:e3:90:df:a8:e9:76:41:db:36:cb:7e:9f:f7:03:d3:b8:
52:71:19:96:43:0c:78:5e:86:fe:60:08:8b:f2:42:08:80:dd:
bb:7e:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:46 2024 by rpki-client on console.sobornost.net