Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/zBWjjpKPl9wPAPbvuYbuPj6poto.roa
File: zBWjjpKPl9wPAPbvuYbuPj6poto.roa (raw, json)
Hash identifier: TftNtFphEHI0+QsW/ufQ3D2ZLrWvX7qy2C+jxqOy3Og=
Subject key identifier: CC:15:A3:8E:92:8F:97:DC:0F:00:F6:EF:B9:86:EE:3E:3E:A9:A2:DA
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019371EE697FA0632C8B6A8730BC9E58599F
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/zBWjjpKPl9wPAPbvuYbuPj6poto.roa
Signing time: Thu 28 Nov 2024 08:41:10 +0000
ROA not before: Thu 28 Nov 2024 08:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 93.115.196.0/22 maxlen: 22
137.59.56.0/23 maxlen: 23
185.20.108.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
185.216.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:ee:69:7f:a0:63:2c:8b:6a:87:30:bc:9e:58:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Nov 28 08:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc15a38e928f97dc0f00f6efb986ee3e3ea9a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:8c:d5:be:34:99:25:eb:a5:72:08:98:0e:
5f:f9:20:53:fb:5e:a7:43:5b:77:5c:2c:cc:25:b9:
63:46:b9:5e:06:cc:45:e8:8d:2c:79:28:f5:35:de:
93:bf:69:7d:ae:7a:31:e2:9b:ab:93:3a:1a:0f:1b:
5d:03:f8:70:c3:5f:e9:74:57:4c:04:a0:70:6c:9f:
89:92:e5:16:bd:f7:50:7e:47:20:60:49:a2:9b:d7:
99:04:17:c3:ef:22:8c:93:d4:5d:fe:63:20:2b:75:
27:62:ed:19:be:a5:42:7a:4d:65:7b:bd:de:41:47:
3e:f5:72:41:30:f7:e1:cf:e1:32:72:cf:4d:9f:26:
fa:b5:26:05:a2:d1:8c:21:4f:b3:a4:ce:2d:5a:ec:
93:f0:4b:56:54:81:dd:59:48:d9:a5:7a:2a:8b:2b:
bb:df:88:aa:e0:c7:bb:d6:4a:bb:a1:8b:02:3b:bb:
4f:cd:56:68:67:f5:47:72:f2:c0:d8:99:d5:0d:27:
81:07:35:22:5f:5c:f1:09:77:bf:23:72:13:03:f3:
27:ea:db:c9:bb:d9:7b:ba:a9:40:18:ea:a9:81:56:
68:4e:b9:ad:02:6e:68:05:94:fd:0d:c6:c3:2a:16:
a1:64:d7:dc:fe:f0:42:84:00:29:d9:02:9f:5b:73:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:A3:8E:92:8F:97:DC:0F:00:F6:EF:B9:86:EE:3E:3E:A9:A2:DA
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/zBWjjpKPl9wPAPbvuYbuPj6poto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:79:be:b2:e6:17:23:b8:35:9c:46:d2:c6:ab:5a:23:f9:30:
1e:0d:9c:c1:33:93:f6:81:7c:bf:d1:0b:8e:e5:bb:9f:c6:a0:
f2:4a:fc:da:71:2d:02:dd:ff:02:95:15:df:fe:93:45:65:51:
a9:96:33:31:28:94:f4:ff:95:bc:30:3d:09:10:ef:99:53:b8:
24:a1:02:da:9d:c3:69:d9:f6:3a:28:bc:2e:74:d6:f6:05:c9:
d8:7f:c9:5e:a5:64:ac:6d:03:a9:ad:de:c8:12:d7:72:bd:06:
2f:6c:25:38:c7:18:58:48:45:4f:bd:2c:f2:ea:61:30:74:5c:
1c:4f:67:09:fe:77:2b:68:71:f2:1b:f0:61:6c:58:12:c0:4a:
af:d9:af:98:d8:98:8f:c2:b7:2f:e8:2f:5e:9b:8f:6d:f3:2e:
67:77:ff:f1:fb:4c:4a:ac:f1:16:8a:2c:b5:c5:3b:f0:fb:f4:
7e:16:67:12:06:8e:a9:c9:38:62:45:bc:e7:5a:37:25:e8:8a:
ab:8d:63:55:c3:60:eb:e9:32:f0:c1:86:01:33:e8:6d:cc:4e:
2e:b6:81:2b:c0:e7:f9:4b:87:53:af:55:e3:ce:1e:74:c2:ba:
4f:4f:ff:fa:1b:d8:ff:3d:45:04:0a:1b:1b:32:83:4c:d8:50:
14:ae:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net