Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/vDYsNQmywLoy2_8uAQEuF0Nfpzo.roa
File: vDYsNQmywLoy2_8uAQEuF0Nfpzo.roa (raw, json)
Hash identifier: mIEgCucEcMqfor1yKPF3qRXb7BNhuDzeUrv/wBUONDs=
Subject key identifier: BC:36:2C:35:09:B2:C0:BA:32:DB:FF:2E:01:01:2E:17:43:5F:A7:3A
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 018CC50145D9F6B64248523DFF4893B2C2C9
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/vDYsNQmywLoy2_8uAQEuF0Nfpzo.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207878
IP address blocks: 160.20.229.0/24 maxlen: 24
95.215.172.0/24 maxlen: 24
176.110.101.0/24 maxlen: 24
160.238.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:d9:f6:b6:42:48:52:3d:ff:48:93:b2:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc362c3509b2c0ba32dbff2e01012e17435fa73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:de:08:d8:48:cf:06:a6:68:2f:d6:0f:f6:
9f:ee:d7:13:96:95:be:e7:47:ff:cc:89:86:35:ea:
cf:0a:2a:37:7e:2c:9b:b0:59:4c:5f:36:7d:34:05:
b3:5c:dc:b5:9d:02:ae:fc:7d:65:b8:db:93:28:bb:
f9:cd:b2:8c:6d:4b:a3:fd:08:0c:72:8d:ee:25:3d:
e4:6c:42:c5:96:64:0e:21:2c:4f:01:49:33:03:f7:
f4:51:40:30:1a:62:10:ed:db:40:22:37:1a:ab:a0:
ff:7a:14:a2:44:d2:fb:e9:81:65:09:9b:1c:64:10:
81:39:d1:80:2d:5b:7b:96:b7:97:4f:ef:a8:fb:fd:
c6:5f:6a:e0:6f:45:2e:d7:57:b2:3d:28:f7:ec:ed:
ce:16:5d:bd:f2:21:e9:69:7b:7e:7b:05:74:bc:bb:
1a:d3:5d:c3:c0:c9:4d:b2:64:7f:bb:b8:65:8a:f8:
19:03:40:25:03:57:85:94:67:ba:42:04:0a:78:ea:
e7:ef:71:2e:88:3a:1e:7a:3d:08:6c:6d:81:2a:6d:
b5:dc:da:25:76:cc:51:fc:91:15:62:f7:08:83:58:
c4:34:8d:94:50:aa:ea:7a:18:98:8e:68:41:32:67:
69:e1:14:7f:68:84:7b:b9:3d:1a:7e:f3:3c:39:0f:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:2C:35:09:B2:C0:BA:32:DB:FF:2E:01:01:2E:17:43:5F:A7:3A
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/vDYsNQmywLoy2_8uAQEuF0Nfpzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.172.0/24
160.20.229.0/24
160.238.21.0/24
176.110.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1f:c9:40:b0:7a:8c:9b:f7:95:f9:04:c6:72:65:26:06:2c:
6d:05:b6:61:59:38:38:96:0a:10:2a:24:2c:b0:97:ec:c1:bd:
95:87:9f:64:14:88:01:82:6c:d0:41:7d:09:73:77:a6:8b:01:
62:2b:29:5b:00:e0:96:9f:e6:ab:55:59:12:ad:71:86:48:e7:
d5:35:79:15:64:5d:3a:af:6a:6d:cf:1f:84:b5:34:2b:aa:51:
70:e5:7d:f9:15:6f:78:a3:c4:d3:40:44:70:15:08:be:e8:e2:
89:07:86:1a:a9:3b:1e:b1:91:f3:08:3e:b9:a1:2d:d9:12:b5:
65:cf:77:7e:68:0a:38:33:70:02:9b:cf:89:46:b0:ae:a2:50:
50:42:e2:64:81:31:46:0f:10:1a:2c:2a:15:c6:d9:fe:b5:cd:
5c:53:18:d5:24:cc:0d:12:27:f6:79:77:78:4b:69:4b:74:f3:
cf:3e:63:94:f3:17:8f:86:cc:57:ee:23:62:b5:61:fd:0c:af:
2e:82:63:d1:a0:9c:ec:f4:04:35:80:2e:2d:62:21:a5:64:89:
55:af:61:7a:2c:d6:bc:25:5c:b2:99:cc:0a:bb:cc:9d:75:50:
62:7e:06:23:b3:6b:e5:7d:ce:4d:af:48:8a:9d:22:b9:a9:51:
f1:5a:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net