Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/zpyHKkXgpOTKBuvAuXIFK_-UWsc.roa
File: zpyHKkXgpOTKBuvAuXIFK_-UWsc.roa (raw, json)
Hash identifier: NyWpZXtSleSskRBj6wiOvrjk5IulVQZx4KmgXTTdOrY=
Subject key identifier: CE:9C:87:2A:45:E0:A4:E4:CA:06:EB:C0:B9:72:05:2B:FF:94:5A:C7
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 0193DE39659F7EE377AACD334168F8A8BC15
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/zpyHKkXgpOTKBuvAuXIFK_-UWsc.roa
Signing time: Thu 19 Dec 2024 09:22:03 +0000
ROA not before: Thu 19 Dec 2024 09:22:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43231
IP address blocks: 89.44.108.0/24 maxlen: 24
185.188.36.0/24 maxlen: 24
185.188.37.0/24 maxlen: 24
185.188.38.0/24 maxlen: 24
185.188.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:39:65:9f:7e:e3:77:aa:cd:33:41:68:f8:a8:bc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Dec 19 09:22:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9c872a45e0a4e4ca06ebc0b972052bff945ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:38:25:db:8e:5a:63:75:88:34:fe:60:79:
49:cd:6d:25:a9:a0:c6:9b:d9:4f:90:3d:57:24:f8:
fe:7e:44:27:ea:4e:dd:b7:e3:76:06:58:df:9a:0f:
d7:6f:c5:ba:a7:9f:ba:23:8b:61:ee:ea:00:fc:7c:
ef:09:84:fd:6c:c3:12:3d:0f:24:b6:a5:78:20:31:
26:81:52:a7:84:c3:4e:15:f2:b6:06:f0:0d:c3:73:
f7:f1:90:a3:88:a4:15:39:f7:27:5f:da:a4:12:8e:
55:82:e0:f6:fb:70:76:99:cf:61:28:67:61:eb:59:
df:13:74:e9:7c:62:90:07:b2:9c:60:bc:e2:34:72:
19:7b:04:b1:04:98:cd:af:d1:7f:ff:27:ab:eb:e5:
65:a1:44:d3:73:42:1a:64:40:f3:d0:26:d8:2f:a0:
d5:ca:99:5d:b6:f9:78:ea:fa:c2:97:94:a1:5f:de:
e6:63:d1:db:ee:43:ee:e0:9b:7d:34:1d:c5:90:77:
f2:28:4c:61:ec:a5:00:77:4c:17:00:80:3b:f9:01:
50:4a:6e:c4:eb:c8:ea:6d:f7:8d:ae:10:29:55:c7:
ba:39:53:5e:b1:97:a4:88:0e:5e:2e:c2:bd:9c:2a:
48:0c:92:b8:d8:02:a1:2a:7a:fa:86:27:71:5d:d5:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:87:2A:45:E0:A4:E4:CA:06:EB:C0:B9:72:05:2B:FF:94:5A:C7
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/zpyHKkXgpOTKBuvAuXIFK_-UWsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.108.0/24
185.188.36.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e2:7d:3d:44:b0:66:24:94:84:72:87:b7:6f:ea:99:51:16:
fa:41:f8:38:f0:08:8c:29:66:cf:22:de:1d:61:b3:98:e9:2f:
94:59:4d:fd:85:27:80:fa:da:73:06:dd:14:54:49:ad:5c:a8:
5b:ba:6b:2d:f4:9d:79:4f:e6:1a:23:09:a0:88:65:30:e3:bf:
90:55:66:f2:e1:01:3c:7d:a2:67:ab:31:70:a4:b5:d2:42:4a:
87:44:ec:b1:36:ef:25:56:7d:4d:8c:d0:b6:b9:20:27:6d:04:
d7:69:1f:53:07:a1:08:98:bd:1b:dc:7a:4f:a9:d3:91:37:c2:
f9:22:73:90:87:dd:65:4c:44:26:a2:d7:b3:43:27:bf:25:0f:
33:e9:d7:31:3b:82:ac:b6:ee:70:ca:c2:b8:5b:c6:b6:39:ac:
73:14:46:85:30:34:ad:b6:4b:3f:3e:e4:0b:74:ed:fc:a9:6f:
d1:c9:47:55:d7:6b:1d:a1:c1:a6:1a:d6:35:4e:e0:62:ec:a8:
5b:80:fd:84:c4:8f:6b:49:41:08:80:36:63:2c:c7:91:31:66:
36:dc:1d:a3:5a:69:ec:72:af:8b:53:47:54:a3:82:53:13:cf:
02:63:cd:d3:57:1d:b1:5b:bd:35:af:87:2e:2f:5a:13:04:00:
30:ac:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:39 2024 by rpki-client on console.sobornost.net