Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/96ktKe2Z4rezCE1D_xMWiupvRTo.roa
File: 96ktKe2Z4rezCE1D_xMWiupvRTo.roa (raw, json)
Hash identifier: Zh+1fcXp029oWPiobmN3olu/9amSeQVSoAtrwQjP7LI=
Subject key identifier: F7:A9:2D:29:ED:99:E2:B7:B3:08:4D:43:FF:13:16:8A:EA:6F:45:3A
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 01935A6D906A4CB45DF075657CBFCC572E84
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/96ktKe2Z4rezCE1D_xMWiupvRTo.roa
Signing time: Sat 23 Nov 2024 19:09:09 +0000
ROA not before: Sat 23 Nov 2024 19:09:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209828
IP address blocks: 178.255.218.0/24 maxlen: 24
185.203.67.0/24 maxlen: 24
193.163.88.0/24 maxlen: 24
194.69.162.0/24 maxlen: 24
2a0c:ae80::/29 maxlen: 29
2a10:7cc0::/29 maxlen: 29
2a11:940::/29 maxlen: 29
2a11:1ec0::/29 maxlen: 29
2a12:e440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:6d:90:6a:4c:b4:5d:f0:75:65:7c:bf:cc:57:2e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Nov 23 19:09:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7a92d29ed99e2b7b3084d43ff13168aea6f453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:96:7d:17:b0:62:5a:7c:28:53:c1:a3:3c:
ec:9d:8a:af:c0:c7:6e:8d:94:08:64:92:eb:81:d4:
f7:e0:f4:f7:0b:a3:6d:64:63:df:15:b2:25:ee:ba:
a1:6a:6a:89:c0:b1:94:5c:31:92:53:1b:dc:94:d1:
36:a0:b6:44:35:88:42:fa:6d:1a:b4:07:f4:79:ee:
44:4e:eb:a1:2d:ff:20:09:9e:a0:f5:ff:69:e2:c3:
1b:4d:1c:aa:08:4e:17:80:22:69:da:42:29:fe:b7:
78:12:e9:ae:c7:68:bf:cf:24:13:53:3d:1b:81:fd:
3e:a4:e0:53:d3:c4:69:3f:69:35:02:2a:88:86:98:
73:a6:49:31:dc:88:d9:3d:5e:50:5d:0d:40:7d:10:
94:d7:2d:90:ec:96:47:f4:4b:f5:c9:7d:ad:26:c0:
f4:60:cb:2f:d1:07:80:85:82:c1:61:33:82:45:59:
39:85:a0:e3:0f:d0:5d:7d:2f:d5:8f:a8:b2:5f:4e:
c3:17:f2:b9:22:e2:49:59:9a:62:bc:67:a4:fd:a9:
24:2e:3c:8f:c8:b0:b4:21:94:8d:96:92:ef:c9:60:
b1:e2:d4:dd:61:f4:2a:a3:37:4d:b1:70:5b:2f:9c:
52:5b:da:c5:e7:c3:8b:5b:dd:11:6d:09:32:70:91:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:2D:29:ED:99:E2:B7:B3:08:4D:43:FF:13:16:8A:EA:6F:45:3A
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/96ktKe2Z4rezCE1D_xMWiupvRTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.218.0/24
185.203.67.0/24
193.163.88.0/24
194.69.162.0/24
IPv6:
2a0c:ae80::/29
2a10:7cc0::/29
2a11:940::/29
2a11:1ec0::/29
2a12:e440::/29
Signature Algorithm: sha256WithRSAEncryption
4b:51:45:6e:99:18:44:21:5e:9c:2d:8b:20:77:44:fe:f3:ad:
77:75:6d:be:7e:d0:01:7a:11:68:92:ed:56:96:3f:a8:1c:cc:
7c:84:85:7d:29:66:01:1d:1d:46:02:de:18:27:a3:b2:58:9c:
c5:a3:8d:aa:df:ca:84:7c:6d:e9:85:78:20:84:4b:56:8c:4e:
28:e7:61:b3:d4:71:3e:c0:33:bd:93:f0:f7:d4:8a:02:2d:ca:
72:e4:76:20:cd:6f:a2:a0:f4:16:2a:b3:83:4d:89:b7:b4:ed:
0d:1e:cd:4a:74:3b:81:f6:1d:a8:16:d0:a1:53:b7:2a:cc:6c:
0d:12:ae:9c:92:60:1a:d1:9e:d0:41:28:29:4d:86:af:8b:97:
7b:7f:71:67:74:f0:77:eb:31:93:37:25:d3:bd:e6:fd:3f:11:
37:52:f1:a3:b8:be:4c:23:b4:8c:85:af:d8:11:8a:0e:64:15:
91:6d:a6:31:e2:4f:72:38:6d:80:5c:4d:6e:d9:72:b4:db:6e:
5c:db:84:57:9f:73:e7:ce:65:9e:c8:28:4c:c5:d4:85:28:49:
b1:35:64:0b:08:d0:67:42:02:0a:bd:e9:2a:cd:d6:26:b4:21:
76:eb:b5:c8:51:2a:79:9a:4c:17:42:93:3a:e3:a3:e3:aa:f5:
dc:f7:11:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net