Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/0Zg_hW4kyQxGYQd03s-tyHvfCHQ.roa
File: 0Zg_hW4kyQxGYQd03s-tyHvfCHQ.roa (raw, json)
Hash identifier: jA7SjU7ZofHn6QYZGrqJh1z6BuMxfd0bE78OVZSpsCI=
Subject key identifier: D1:98:3F:85:6E:24:C9:0C:46:61:07:74:DE:CF:AD:C8:7B:DF:08:74
Certificate issuer: /CN=cdd1bf95a2b3bfda45e1080da9f6c3e858e62911
Certificate serial: 018570CBE9DD41F2F41F12E5B338BD33D934
Authority key identifier: CD:D1:BF:95:A2:B3:BF:DA:45:E1:08:0D:A9:F6:C3:E8:58:E6:29:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdG_laKzv9pF4QgNqfbD6FjmKRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/0Zg_hW4kyQxGYQd03s-tyHvfCHQ.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 94.103.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e9:dd:41:f2:f4:1f:12:e5:b3:38:bd:33:d9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd1bf95a2b3bfda45e1080da9f6c3e858e62911
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1983f856e24c90c46610774decfadc87bdf0874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:7b:ca:3f:49:c4:d9:6b:e2:4a:92:a7:15:
71:7c:ca:11:0c:5c:67:8c:1d:91:3f:21:2b:9d:fa:
2b:b8:fe:c1:7b:49:99:ac:21:3c:9a:26:69:93:02:
48:47:61:61:0e:d2:c4:25:d1:f6:94:bd:94:cd:2d:
2d:f8:19:bd:cb:a8:c9:8e:bb:14:56:39:50:22:0b:
b7:1f:af:c8:4e:26:f4:ca:23:77:75:2b:40:0c:b5:
2f:70:64:0e:91:1a:f5:4c:b2:52:fa:99:af:e1:1c:
47:0f:24:c3:0b:f9:cb:d7:19:84:f6:71:af:45:79:
ca:9b:45:83:ca:b2:76:1c:ff:82:53:3d:cc:f1:dc:
2d:16:df:be:e5:54:4e:21:30:63:5a:75:2e:54:44:
bc:63:c4:75:40:c4:f2:93:6e:5e:77:e7:ab:d0:3c:
ce:21:65:15:e1:68:b3:88:08:cd:b7:b0:9e:3b:87:
4a:8a:16:7b:c9:19:7e:df:05:bf:7b:63:f4:cf:60:
c4:02:51:9d:be:a5:33:40:99:fb:cc:e2:f3:34:40:
ce:78:c3:9e:b0:c8:f0:7a:19:d2:b7:d2:b1:01:81:
68:1a:97:6e:8a:73:91:3e:6c:99:6f:b8:2d:4a:bd:
e4:b7:e9:42:21:3a:61:fb:38:66:cf:aa:ed:c6:4d:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:98:3F:85:6E:24:C9:0C:46:61:07:74:DE:CF:AD:C8:7B:DF:08:74
X509v3 Authority Key Identifier:
keyid:CD:D1:BF:95:A2:B3:BF:DA:45:E1:08:0D:A9:F6:C3:E8:58:E6:29:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdG_laKzv9pF4QgNqfbD6FjmKRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/0Zg_hW4kyQxGYQd03s-tyHvfCHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/zdG_laKzv9pF4QgNqfbD6FjmKRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3c:9b:75:2a:e9:0a:c7:58:9b:fc:34:9d:75:cb:76:69:d5:
52:96:13:be:be:f5:4e:07:a1:af:9e:bc:6a:79:fe:ec:e4:6e:
2a:09:a5:db:94:20:ff:59:37:08:89:1d:9e:b4:cc:a4:89:d6:
f5:6d:44:da:45:c2:4f:3d:16:96:00:88:aa:74:56:74:cd:e6:
34:e9:f4:cf:83:93:24:c8:aa:aa:13:5a:8a:c4:33:ba:9d:bb:
50:69:f4:d9:4a:ff:85:d5:1f:b0:b1:59:87:04:f2:25:4d:40:
a9:cf:4a:94:a3:9f:10:99:df:02:5a:a5:c2:6f:5b:e7:72:bd:
55:0d:22:de:4e:00:04:78:a7:fe:b4:f8:f1:5b:d6:2e:c8:27:
75:19:76:53:b3:ca:98:6d:1d:f9:09:3f:a9:f5:42:e7:ae:d7:
72:f6:b0:42:3a:c1:69:80:9b:d8:b3:ba:2a:2a:69:cd:38:18:
1c:ab:3f:40:15:34:34:2e:3d:52:f5:47:75:01:ee:83:cb:a0:
04:11:ae:dc:48:c0:ac:fc:f8:2b:0d:78:07:f4:c4:ef:d3:13:
6b:68:07:a4:26:dc:9e:7e:98:64:e9:ad:04:59:50:3c:d6:b4:
93:e7:9a:3a:b4:09:3e:0d:4a:7a:b9:80:48:46:9a:97:5d:e3:
82:76:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net