Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/09e_nWt_iK_4YIOZJ64TNLeOVDg.roa
File: 09e_nWt_iK_4YIOZJ64TNLeOVDg.roa (raw, json)
Hash identifier: wJwu7aiIqR1qmC04K0FXmpnZpUKBzkziDuIW+5hfgfU=
Subject key identifier: D3:D7:BF:9D:6B:7F:88:AF:F8:60:83:99:27:AE:13:34:B7:8E:54:38
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0193CE9181B546F6813EFCF9528F814CA4F2
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/09e_nWt_iK_4YIOZJ64TNLeOVDg.roa
Signing time: Mon 16 Dec 2024 08:24:22 +0000
ROA not before: Mon 16 Dec 2024 08:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 185.84.116.0/24 maxlen: 24
185.84.118.0/24 maxlen: 24
185.132.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:91:81:b5:46:f6:81:3e:fc:f9:52:8f:81:4c:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Dec 16 08:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3d7bf9d6b7f88aff860839927ae1334b78e5438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:d5:a7:42:f3:19:97:0d:59:8c:54:04:ea:
d8:a4:c1:35:44:b1:c9:08:2c:c0:97:dc:8f:c2:0c:
a1:c7:12:80:d7:d8:e5:69:62:68:e6:5a:98:27:05:
31:1e:64:a5:cd:f6:45:00:6c:36:58:dd:b0:08:8e:
38:50:76:93:65:d4:10:b4:24:64:28:f4:d0:c5:ac:
27:a7:8e:26:f2:78:5f:6f:71:ba:b8:a7:aa:0f:72:
be:68:e7:bb:bb:4f:8c:d5:3b:33:57:b5:4e:6f:9e:
ec:6d:9c:f0:2e:4a:97:4e:a8:68:d3:b8:62:79:ef:
cd:4e:f2:d2:9b:e4:46:ca:a3:4b:84:b0:ad:3e:91:
ea:9e:c4:1f:b8:d9:78:5f:1f:e9:0d:53:ae:8e:10:
23:68:ad:b0:23:15:0e:36:d4:69:c3:68:47:72:a7:
6f:42:95:25:96:88:8c:40:6f:83:8a:53:90:f1:5c:
73:37:e5:be:1d:00:4a:34:86:c8:54:b7:99:12:f1:
6c:9e:7a:f6:fc:88:99:e4:d8:b1:9f:c3:bc:a2:ce:
82:35:f2:bc:7d:41:57:b1:5d:fb:27:01:9e:d4:a8:
df:57:aa:26:f1:8c:51:64:c9:5d:12:88:08:ab:5d:
4c:41:fc:73:8c:a2:49:f6:e5:8d:a4:13:08:f0:cd:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:BF:9D:6B:7F:88:AF:F8:60:83:99:27:AE:13:34:B7:8E:54:38
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/09e_nWt_iK_4YIOZJ64TNLeOVDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.116.0/24
185.84.118.0/24
185.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c6:44:3c:0f:51:3f:2a:f7:c4:ac:ba:dd:ad:2e:00:a7:78:
47:8d:d1:4f:73:54:02:5b:5d:60:8f:1d:3e:10:92:27:b7:87:
09:10:c9:36:02:61:50:62:6c:2f:26:6b:5c:53:11:80:11:7d:
9c:22:57:e2:d3:ef:30:f7:4b:a9:52:94:ce:e0:70:e0:79:db:
a5:a8:10:4a:97:73:d5:f1:9b:60:5e:ec:85:b4:4c:c1:75:0e:
89:50:c0:05:23:55:78:3b:f3:88:3d:72:7c:24:8b:4f:a2:04:
4f:f1:41:81:15:48:8b:ba:c8:1b:85:89:34:85:38:b9:63:00:
b9:81:8a:d2:98:f9:be:88:a2:bd:79:a0:8b:d4:79:f0:1c:ab:
cc:a5:3a:44:c2:e5:23:6a:5a:ff:d8:34:17:31:a9:85:b1:33:
22:53:5b:03:b8:9c:12:95:d7:5b:f6:e7:aa:6c:8e:cf:99:07:
05:c1:0d:94:e0:61:de:7a:1e:8e:f3:0d:23:3b:c9:7f:1b:0b:
52:67:a0:43:e2:aa:9a:df:6f:b9:76:a9:2a:3f:a3:b2:10:d5:
5b:c7:9e:79:82:16:e2:b1:d7:01:69:3e:59:52:ca:ac:bd:b1:
57:4b:ce:cf:39:5d:e4:e7:74:40:db:cc:c1:3e:52:4b:6d:a0:
83:33:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net