Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jWWukEaYzFzEiDVBjmIVBwfG7rA.roa
File: jWWukEaYzFzEiDVBjmIVBwfG7rA.roa (raw, json)
Hash identifier: 20l1L7ud+5XlT2O9H2rrmJ/CujtOgfCg2mex4t3cnj8=
Subject key identifier: 8D:65:AE:90:46:98:CC:5C:C4:88:35:41:8E:62:15:07:07:C6:EE:B0
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0193ABEFBE24BCBF7D388C80255D126FD34C
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jWWukEaYzFzEiDVBjmIVBwfG7rA.roa
Signing time: Mon 09 Dec 2024 15:00:35 +0000
ROA not before: Mon 09 Dec 2024 15:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:964::/48 maxlen: 48
2001:678:a00::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c0:200::/48 maxlen: 48
2a12:79c0:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:ef:be:24:bc:bf:7d:38:8c:80:25:5d:12:6f:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Dec 9 15:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d65ae904698cc5cc48835418e62150707c6eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:d8:81:9a:35:df:c3:ea:3d:8b:07:57:57:
e6:c2:c2:94:f0:66:e6:35:cf:cf:4d:79:b8:40:c2:
ca:cd:7e:46:ff:19:3b:55:64:c5:4d:05:b9:ee:94:
e5:ad:56:fc:10:c2:4c:37:77:dd:10:54:6d:b5:b4:
e9:41:1a:8c:91:8c:2b:e7:16:71:37:ae:de:53:68:
d7:cf:50:d2:96:64:ef:e2:fe:c8:3c:01:3d:32:6a:
5e:1f:ee:1a:ff:8b:e3:fb:f9:6b:a8:49:ff:f4:7e:
87:46:04:09:77:eb:ef:19:c8:e2:22:7d:58:01:76:
5a:01:2c:24:09:7f:64:54:a5:f1:b6:13:61:c5:9e:
bb:94:6c:fa:6c:88:1a:a0:81:73:13:be:53:53:43:
2e:1d:61:bb:78:58:ca:3c:49:3b:50:42:fa:01:42:
e2:08:b1:9e:86:47:0e:cb:f4:1a:b0:2e:8d:e6:f9:
96:f8:80:ac:82:9f:35:b8:35:24:60:e8:ac:fe:27:
e4:cb:ee:39:05:0e:20:24:ff:90:67:98:e0:f4:6d:
0c:3e:aa:69:ab:38:ac:a5:99:2c:92:97:13:fe:42:
37:f0:e6:54:43:31:7a:a2:14:b3:16:02:62:45:09:
83:e8:e7:0c:f9:02:66:88:0f:61:21:11:d1:4e:d4:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:AE:90:46:98:CC:5C:C4:88:35:41:8E:62:15:07:07:C6:EE:B0
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jWWukEaYzFzEiDVBjmIVBwfG7rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:964::/48
2001:678:a00::/48
2a12:79c0:100::/48
2a12:79c0:200::/48
2a12:79c0:300::/48
Signature Algorithm: sha256WithRSAEncryption
2e:11:07:90:d9:18:59:e5:d8:a0:e8:7b:f8:15:51:06:ee:35:
aa:d4:b2:57:17:94:cb:a4:97:e7:fe:4f:b4:bc:b0:16:91:bc:
a1:40:38:04:ce:b1:e9:55:f3:fc:bc:e3:9d:69:57:08:9a:be:
49:13:cc:6b:18:0a:22:74:3b:b0:2f:c4:76:7c:d8:17:8d:8c:
bc:9e:54:1c:8a:56:b9:a4:4b:88:00:6b:26:61:06:21:b8:0c:
61:f7:dc:35:04:33:97:ba:12:31:d2:98:51:db:03:37:d6:e3:
19:20:f7:fa:9e:a7:99:27:4b:a9:79:89:bc:8e:41:60:89:72:
a9:49:08:6a:dc:ff:7e:8d:54:f1:52:16:30:8a:8a:de:a5:9a:
5c:0d:49:f4:03:3a:05:fe:58:ef:27:97:80:d3:aa:6a:98:f1:
9a:5c:78:3f:09:5d:3c:f5:87:33:9a:e4:23:9d:f1:f4:a8:52:
31:cc:81:24:11:1a:77:ad:4b:6d:a2:0b:aa:10:ba:96:82:93:
63:11:5e:30:6d:7c:45:31:1d:7f:6b:9d:82:62:11:70:d6:7b:
53:ce:24:d7:fe:ac:a8:cf:05:2f:fe:6a:02:27:af:d2:90:1e:
a1:62:77:c1:83:e7:1c:1f:cd:d7:12:51:a7:1a:26:39:92:f1:
2f:79:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:41 2024 by rpki-client on console.sobornost.net