Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CNSDxz96Rlssiw7k-39CPEs0LxE.roa
File: CNSDxz96Rlssiw7k-39CPEs0LxE.roa (raw, json)
Hash identifier: pKUsSVcvWtkjyJK75tC4kAjQDx1fJil46bO1LtGTem4=
Subject key identifier: 08:D4:83:C7:3F:7A:46:5B:2C:8B:0E:E4:FB:7F:42:3C:4B:34:2F:11
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0193D1544B8129F8BFF48AB00BA77751FE9C
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CNSDxz96Rlssiw7k-39CPEs0LxE.roa
Signing time: Mon 16 Dec 2024 21:16:22 +0000
ROA not before: Mon 16 Dec 2024 21:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:54:4b:81:29:f8:bf:f4:8a:b0:0b:a7:77:51:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 16 21:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d483c73f7a465b2c8b0ee4fb7f423c4b342f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:1b:57:3d:e5:f0:5b:c5:17:34:a4:9a:8e:
db:11:bf:90:b6:85:ce:a0:43:b2:d7:48:72:4c:44:
2d:96:9f:f3:5d:76:1b:c1:42:b3:81:d9:b1:ba:ae:
a0:ce:d4:f5:a6:33:03:0f:ea:f7:c2:a2:ac:27:dc:
0c:75:aa:d7:33:ce:d9:73:1f:6b:1c:4f:2f:cc:ca:
82:c3:8c:82:70:0c:b2:70:7a:b5:2e:c1:8a:87:bf:
7e:29:e1:9a:b4:16:08:96:11:50:07:29:6a:01:f4:
90:de:98:7c:0d:04:bd:1e:8e:47:6b:38:97:0c:8a:
b2:27:e4:7a:38:8e:84:4c:b1:a3:fd:8c:70:9a:6f:
ea:88:e1:f3:f0:cc:a3:62:05:e3:63:b3:45:63:a2:
6f:55:53:b0:c6:02:7f:57:d2:0c:9c:3a:47:68:e3:
f0:e7:79:2d:2b:d8:c1:af:c9:00:0e:ef:bc:8f:31:
dc:cf:fa:70:35:9f:bb:b8:e0:8d:dc:91:a3:7c:06:
a6:52:da:5d:24:0e:06:9b:2c:df:11:29:58:1e:be:
8c:70:58:7d:f3:b4:f8:c6:9f:29:d1:0e:4f:e4:32:
f1:23:15:d3:4c:17:78:98:25:e2:c3:d1:ba:0a:90:
06:19:09:d8:6c:5b:a6:80:c1:9e:1b:99:19:6f:21:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:83:C7:3F:7A:46:5B:2C:8B:0E:E4:FB:7F:42:3C:4B:34:2F:11
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CNSDxz96Rlssiw7k-39CPEs0LxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:2a:a0:76:c1:61:39:1e:e9:7e:fa:1b:11:c5:78:6c:ac:a7:
4b:47:55:0f:d9:ad:86:4a:d0:61:20:87:1e:15:f1:48:8e:ab:
69:8b:b4:f7:f2:f3:2f:c3:cb:d5:4d:2e:69:0e:39:01:c6:03:
f7:25:07:47:89:94:0c:5a:28:71:d0:bd:63:0a:7e:e6:14:42:
be:b6:60:01:25:f2:ad:fa:5d:51:0d:45:e3:14:19:65:6c:b3:
a1:5d:27:f4:86:37:67:2b:8b:e0:70:fa:f6:08:ae:42:b0:8f:
26:2f:6d:30:ab:7a:bb:2e:89:e8:76:45:0b:61:b1:06:ac:1d:
e3:3d:4c:8f:22:96:fc:f6:9c:d2:90:7c:04:a7:bd:92:cc:84:
d4:a3:ec:18:47:93:e2:75:51:ba:60:20:f8:27:68:2a:df:66:
97:32:ab:c1:85:72:58:9f:0c:22:bd:bc:90:24:ab:8e:51:1e:
a7:0b:c6:41:4e:2b:a1:9c:d1:2b:6c:30:04:df:25:b8:61:70:
cb:f8:23:2d:d1:2b:f7:bb:0b:41:d1:52:71:e7:3e:5e:0f:f0:
54:cf:56:7e:e9:d3:fd:78:32:50:0f:18:78:a7:66:3b:45:5e:
f7:dd:b1:67:98:fb:b3:6e:bd:53:c9:69:a1:9e:1a:96:b9:27:
53:a3:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:53 2024 by rpki-client on console.sobornost.net