Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/ZwLFB-gp-tiR6JI6DOaFJ_o6DkU.roa
File: ZwLFB-gp-tiR6JI6DOaFJ_o6DkU.roa (raw, json)
Hash identifier: 4MmtZri7sz6LPBGO5dp4RjlSHzcP4A5qrxTrt6yd8vo=
Subject key identifier: 67:02:C5:07:E8:29:FA:D8:91:E8:92:3A:0C:E6:85:27:FA:3A:0E:45
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 0192B944583FBC7CB15EA0E7DDB30232EA61
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/ZwLFB-gp-tiR6JI6DOaFJ_o6DkU.roa
Signing time: Wed 23 Oct 2024 12:05:16 +0000
ROA not before: Wed 23 Oct 2024 12:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 195.234.80.0/24 maxlen: 24
2a13:7b40:1::/48 maxlen: 48
2a13:7b40:a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:44:58:3f:bc:7c:b1:5e:a0:e7:dd:b3:02:32:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Oct 23 12:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6702c507e829fad891e8923a0ce68527fa3a0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:7b:5a:6d:f6:ab:0d:07:51:07:61:62:70:
35:20:8c:47:3f:cc:56:fc:59:60:c6:7d:83:e8:05:
44:73:f1:cc:69:3e:5a:80:76:e0:79:d2:90:4e:04:
de:c5:e6:fe:c4:77:23:e7:90:c0:50:e8:5e:b7:a0:
c9:b9:86:8f:ce:c7:19:3c:66:7e:b7:3e:7d:fb:99:
1d:ca:d4:60:f1:66:f3:d2:25:e6:14:bc:e5:9a:17:
2c:5f:22:8a:11:8c:67:78:96:79:98:f4:0f:c0:da:
6f:c7:0a:f3:b4:80:7c:67:a4:2d:9f:bb:d5:ac:d7:
5f:6e:dc:82:02:75:f5:c3:ff:42:19:c3:c3:2c:4d:
fd:2e:10:b2:e7:5f:4a:99:69:c7:dd:cd:34:47:35:
6f:db:38:79:83:03:ad:a3:d8:ef:dd:a0:49:a3:4e:
f6:f7:13:06:12:d2:75:69:4e:38:6c:7d:94:c3:1d:
06:0a:5c:ce:73:95:f0:45:97:18:d5:b0:76:62:81:
8c:ee:69:82:26:7f:a1:9e:b0:19:c5:e6:59:44:a0:
69:ac:26:a3:22:27:12:55:6b:85:b6:d9:cd:e8:fa:
d3:e4:02:73:a0:b6:78:a4:13:d9:e2:11:0e:c2:17:
32:34:14:16:54:2d:fa:5b:59:c7:17:7c:8c:47:4d:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:C5:07:E8:29:FA:D8:91:E8:92:3A:0C:E6:85:27:FA:3A:0E:45
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/ZwLFB-gp-tiR6JI6DOaFJ_o6DkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.80.0/24
IPv6:
2a13:7b40:1::/48
2a13:7b40:a1::/48
Signature Algorithm: sha256WithRSAEncryption
0b:1e:70:81:6e:a6:4a:12:6e:c2:bc:9b:68:38:fb:90:5d:93:
a7:f6:1d:90:b8:96:fa:64:9c:dd:c5:9f:e0:57:44:40:b3:02:
48:81:9d:a0:35:7a:b5:aa:60:76:8e:29:94:3d:5d:a5:c2:ec:
06:38:ac:9b:96:4c:78:fe:f2:2f:5b:6c:84:7e:dc:7d:56:e4:
b4:eb:f1:57:1d:61:e4:4b:4a:d5:6d:12:96:2a:de:9a:0c:62:
1d:eb:cc:87:9d:5f:7a:bf:52:c4:c4:8f:fe:64:6d:a8:79:fb:
67:2d:f6:bd:36:be:a5:ed:82:c0:53:31:ad:da:4f:7e:af:87:
c4:2f:6d:59:65:9b:39:da:6e:3c:1a:4d:20:91:44:1b:7f:33:
8e:57:e5:7d:d8:04:da:1b:e7:51:cc:e6:90:61:41:72:fd:fa:
ce:7d:2c:6a:64:66:79:6b:43:5b:59:5d:2f:60:2f:9e:d6:36:
30:c9:3f:78:d0:57:cf:ad:bd:9c:78:89:ba:44:17:bd:eb:32:
c7:41:fa:af:fc:cf:a3:6d:c5:9b:15:d1:56:32:f1:96:e9:b5:
04:df:d6:97:2a:e5:c9:6c:72:5c:65:03:a5:9e:a0:c4:f1:57:
87:dd:4e:3d:2c:bd:3e:1d:c1:ce:cc:c2:6f:04:03:5b:34:cf:
81:06:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net