Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/s3-zN7FY02Stcfx0g4dJqInGqCU.roa
File: s3-zN7FY02Stcfx0g4dJqInGqCU.roa (raw, json)
Hash identifier: Wj3t5iFophP1lbmvx4EKF431FZBGs6Rmzn64tDpwFSc=
Subject key identifier: B3:7F:B3:37:B1:58:D3:64:AD:71:FC:74:83:87:49:A8:89:C6:A8:25
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0193F39E8E8CDCEB4F9833E2839546D9C2D3
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/s3-zN7FY02Stcfx0g4dJqInGqCU.roa
Signing time: Mon 23 Dec 2024 13:04:34 +0000
ROA not before: Mon 23 Dec 2024 13:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35507
IP address blocks: 185.66.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:9e:8e:8c:dc:eb:4f:98:33:e2:83:95:46:d9:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Dec 23 13:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b37fb337b158d364ad71fc74838749a889c6a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:aa:a9:4e:73:b7:09:13:6a:ae:ba:5f:40:
9b:e5:b7:81:50:11:91:c1:35:ad:4d:4c:2b:b7:70:
27:5d:62:32:40:86:a9:24:55:ed:4c:dc:f3:5a:67:
11:bb:f3:71:52:d3:b9:06:18:1d:18:f9:a5:71:5e:
6e:16:b3:bd:b5:ce:50:d6:d1:5f:17:93:81:22:47:
2f:34:35:61:8c:92:a0:21:d7:55:1a:8a:ee:8f:24:
42:39:3e:19:2a:9b:3a:ce:be:a2:93:04:d1:af:d9:
7f:71:a8:ef:79:1f:9c:a0:1c:a5:f4:d0:27:9e:95:
cc:38:a5:7c:db:a5:e0:b0:b1:36:71:0a:53:84:9b:
d8:21:a8:6e:13:00:9b:ba:15:02:a7:ef:5c:c2:2f:
f2:d5:f1:8c:46:18:c7:40:44:c7:0b:aa:7f:48:a5:
78:2e:39:ee:f1:9a:48:6d:bd:c9:43:9f:82:88:ca:
63:d4:4a:18:ef:7d:ca:21:5b:e1:4a:3d:47:e8:e1:
ae:30:27:d7:db:73:74:64:a8:09:b4:79:92:98:2a:
6f:32:b5:dc:c3:4a:03:49:f8:ad:11:c0:b9:45:42:
0d:78:31:25:32:7c:0b:82:d7:e8:2e:8b:69:b4:91:
be:06:7c:27:cd:07:d1:39:f3:ee:26:ca:5b:dd:8f:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7F:B3:37:B1:58:D3:64:AD:71:FC:74:83:87:49:A8:89:C6:A8:25
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/s3-zN7FY02Stcfx0g4dJqInGqCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.79.0/24
Signature Algorithm: sha256WithRSAEncryption
06:00:8b:9a:8d:91:ac:ea:11:c5:41:2f:db:f1:bc:f2:9a:f1:
38:42:5d:9c:f1:99:bd:3f:16:9b:97:4a:4e:fb:7f:d0:13:4b:
38:8a:ea:39:ea:6f:f0:4d:79:3e:2c:ed:63:b2:fe:90:7e:54:
bb:fc:e7:fc:43:ef:45:ad:7a:53:4d:98:3d:ed:04:ef:77:54:
31:92:e6:dc:07:7a:17:ff:04:8b:64:e1:c3:2c:09:0e:ca:0a:
79:49:58:a1:71:24:f9:54:ba:19:f6:b3:ff:08:eb:c6:f0:04:
1b:f2:ba:9f:53:ad:6e:19:ed:25:29:11:b2:2b:0b:f7:2e:e7:
2c:3f:10:6f:ec:d3:85:45:b6:6f:07:b9:f7:af:db:e2:9f:ef:
24:30:c2:78:e7:8d:81:65:4a:70:93:7c:7e:83:c4:0a:6e:2d:
66:30:49:0d:cc:0b:2f:33:da:b2:9d:1e:f9:60:f8:c3:41:d9:
4d:e7:87:29:7e:03:22:5d:ce:5f:ae:5a:7c:d9:b6:7c:89:85:
b7:a3:3c:d6:1f:e9:e2:de:ad:b8:5a:96:73:a3:3f:ca:f3:d2:
c5:dc:06:ce:47:aa:ef:9d:fe:af:5e:5d:7c:7d:af:f1:d6:2c:
0e:ac:6f:a7:9f:5e:02:20:61:c8:7a:8d:5d:e5:73:62:f8:18:
bb:b1:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net