Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/cWaZ2JO_nw5F0JqO1QOXOmHu07U.roa
File: cWaZ2JO_nw5F0JqO1QOXOmHu07U.roa (raw, json)
Hash identifier: 5wySDFiaOK7W34S9smooEH68nkvAhDaiP+LfiAZQ+Rk=
Subject key identifier: 71:66:99:D8:93:BF:9F:0E:45:D0:9A:8E:D5:03:97:3A:61:EE:D3:B5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 018CC94E2CD296B67A89EAA730047A50580A
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/cWaZ2JO_nw5F0JqO1QOXOmHu07U.roa
Signing time: Tue 02 Jan 2024 08:33:12 +0000
ROA not before: Tue 02 Jan 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200939
IP address blocks: 185.42.142.0/24 maxlen: 24
185.42.142.0/23 maxlen: 23
185.42.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2c:d2:96:b6:7a:89:ea:a7:30:04:7a:50:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jan 2 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716699d893bf9f0e45d09a8ed503973a61eed3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:1c:06:c4:73:d9:35:25:04:ba:b0:0b:7a:
dd:89:ce:09:a7:7b:7f:8c:bf:5c:9e:31:d5:b1:93:
80:c6:83:f4:35:bf:56:f8:66:a1:71:5b:aa:71:74:
ee:07:6f:4e:8b:5d:71:08:05:06:0c:25:4f:0b:ed:
c1:90:05:e0:e4:ed:ae:97:21:9c:39:3f:dd:31:86:
5a:fa:c4:68:87:78:4b:62:fc:f1:ca:17:16:73:ba:
ea:20:b3:de:51:85:51:61:b6:00:3e:aa:aa:3c:fb:
22:de:7d:42:49:a7:cc:f3:65:d2:ed:4f:2a:5c:4a:
ef:21:fb:a0:f2:62:7c:82:56:b5:aa:58:24:a5:cb:
74:71:e7:7d:d1:0a:78:3e:6f:92:30:0e:83:f0:ed:
0b:00:b3:6d:88:cb:56:06:78:74:8a:8a:49:17:78:
7f:f7:50:17:a0:9a:eb:14:a5:33:d2:24:41:41:50:
33:20:cf:1c:0e:63:33:20:c6:8b:07:38:e8:dc:3b:
b9:27:b9:64:67:0b:8c:89:0a:e6:4a:bc:5b:42:8c:
12:d0:ad:54:84:5b:1b:6c:ce:cf:cd:0a:ba:c7:d5:
91:ef:c9:dd:0e:28:24:fd:ad:d5:17:47:2b:f4:80:
c8:bb:17:f9:1e:86:c7:4d:7e:f5:4f:b6:9c:ee:c9:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:66:99:D8:93:BF:9F:0E:45:D0:9A:8E:D5:03:97:3A:61:EE:D3:B5
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/cWaZ2JO_nw5F0JqO1QOXOmHu07U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.142.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8e:d1:ea:da:cc:e4:16:92:0e:84:25:af:d1:ab:1e:db:e4:
f7:63:42:aa:fe:39:51:77:84:51:28:96:e8:a8:a0:d5:34:e9:
05:42:43:60:89:75:01:07:e4:c6:6a:23:cb:d4:b6:3c:dc:40:
7e:9a:af:46:45:e2:3d:d0:55:a5:50:2d:e0:5f:77:0d:e3:e7:
01:01:53:57:11:b5:f7:46:68:be:03:a0:0e:2f:ad:cc:f3:7a:
a5:45:00:04:ee:66:07:e9:81:e1:d0:2c:fd:5b:9b:c6:e1:46:
6c:2d:d2:62:fb:01:f4:49:e4:92:70:71:95:cb:01:ec:e6:ed:
a4:b1:bc:52:60:2c:1c:ed:a5:2f:36:44:80:95:2f:8f:77:97:
97:42:a7:ba:b9:90:27:9a:33:80:8d:7e:e3:ed:14:9a:37:4f:
fc:1d:d6:12:a6:e5:9e:b1:d4:fb:ea:f4:3b:72:9d:dd:9a:cf:
4e:e1:39:9a:b7:c2:5d:46:9a:a5:7d:12:a9:46:80:6d:f2:44:
0b:58:45:1b:7f:df:50:71:c6:95:13:21:24:e9:d4:4c:85:5a:
f3:b8:04:5d:ff:3d:69:8d:a2:e2:56:c1:75:da:03:e1:ba:44:
5f:dd:70:ed:4a:75:f6:29:c1:24:45:bd:b4:85:a3:6d:ec:b7:
72:a1:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:51 2024 by rpki-client on console.sobornost.net