Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/KDh3sYii8Jx6B2lE7uI8vyYawJ0.roa
File: KDh3sYii8Jx6B2lE7uI8vyYawJ0.roa (raw, json)
Hash identifier: UpPXSjJDA65e5uLp4r1trKhLCEUNPGQmEg91qmGHrP4=
Subject key identifier: 28:38:77:B1:88:A2:F0:9C:7A:07:69:44:EE:E2:3C:BF:26:1A:C0:9D
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 0193872AF7CA593574F6AFBD8FD05302815C
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/KDh3sYii8Jx6B2lE7uI8vyYawJ0.roa
Signing time: Mon 02 Dec 2024 11:39:20 +0000
ROA not before: Mon 02 Dec 2024 11:39:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48152
IP address blocks: 94.231.213.0/24 maxlen: 24
2a10:3200::/32 maxlen: 48
2a10:3201::/32 maxlen: 48
2a10:3202::/32 maxlen: 48
2a10:3203::/32 maxlen: 48
2a10:3204::/32 maxlen: 48
2a10:3205::/32 maxlen: 48
2a10:3206::/32 maxlen: 48
2a10:3207::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:2a:f7:ca:59:35:74:f6:af:bd:8f:d0:53:02:81:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Dec 2 11:39:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=283877b188a2f09c7a076944eee23cbf261ac09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:08:a4:98:8a:f1:07:8d:45:54:9b:92:17:
a0:11:45:ef:63:13:81:af:2e:7d:e1:a9:8b:6f:e0:
d8:38:56:8b:e7:dd:ad:70:db:be:8c:24:54:8f:db:
6d:a8:37:80:f0:0f:ca:b5:61:69:29:c1:51:37:76:
25:51:22:f1:1a:62:5a:30:3c:33:d8:a6:d8:63:0e:
ee:fa:eb:c4:90:48:af:ad:40:26:44:cd:fe:c0:2b:
2b:70:06:de:a7:ed:d4:54:d7:64:58:9d:ba:da:a0:
5f:d0:6b:8a:dc:6f:90:2f:2e:42:83:84:ee:4a:44:
9c:7d:f4:32:42:0d:20:ae:76:79:66:16:d5:3f:d7:
4b:6f:58:5a:90:83:5b:1d:c6:1d:2b:97:fa:25:47:
86:66:a3:29:db:ca:21:57:19:71:64:15:ed:ed:7b:
87:e9:7c:be:38:53:2d:b4:ec:e0:c3:a6:27:a9:b6:
7c:59:5d:3f:12:4a:f3:54:a2:ad:13:7a:f1:53:cd:
d3:67:a4:57:63:d9:5b:bb:dc:6b:94:fe:a9:c9:bd:
bf:38:7a:a0:cc:ba:5a:1a:9c:0d:99:84:f9:88:54:
40:b1:71:e8:9d:31:33:92:34:99:4c:4a:65:c4:5a:
4b:df:48:f3:5e:46:b5:39:eb:d4:06:ce:aa:ba:83:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:77:B1:88:A2:F0:9C:7A:07:69:44:EE:E2:3C:BF:26:1A:C0:9D
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/KDh3sYii8Jx6B2lE7uI8vyYawJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.213.0/24
IPv6:
2a10:3200::/29
Signature Algorithm: sha256WithRSAEncryption
c4:b1:10:8b:34:a7:fa:a9:a6:41:6c:e7:49:9d:0e:29:b5:b6:
c0:8d:02:c2:f1:59:2d:fc:2c:70:d2:70:58:0c:a6:85:90:f6:
f2:0b:05:5c:3c:aa:75:4f:1c:49:b9:43:8a:3c:d6:a2:94:2c:
05:7d:13:40:35:ea:bd:3e:fe:a3:3b:89:cd:fd:dd:79:92:85:
4e:78:09:38:b9:f4:0d:45:22:c2:c8:27:d3:4a:7f:b2:70:cc:
3d:1f:8e:e2:ac:f2:dd:31:ad:00:0c:f8:a6:6d:e3:32:bf:15:
ab:e7:e2:99:2c:a4:1c:d4:1e:0b:bd:1c:42:25:ae:82:47:77:
1d:ae:07:35:21:0d:a0:18:53:fe:5e:65:8f:85:f7:13:cc:6f:
d8:50:dc:7c:42:e1:99:e1:3a:b1:a3:2c:3d:6a:c3:10:9b:91:
f8:ae:0e:48:51:62:14:5e:12:d1:dc:1b:cb:6d:ff:02:50:9e:
cf:b5:fb:7a:b5:f9:0a:ec:7b:59:e6:95:f6:c1:7d:f3:6a:2d:
48:98:4d:82:78:e0:ba:0e:b3:72:2e:04:6a:7d:e8:54:c7:76:
f3:81:89:98:a5:b9:e6:65:85:94:99:ce:82:fa:90:35:94:2a:
96:44:31:73:8f:f3:9a:9d:96:a1:03:75:da:40:fe:5a:e1:b2:
b4:50:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:50 2024 by rpki-client on console.sobornost.net