Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Clzu3A2ooGYkbiwJ_AndauaEqII.roa
File: Clzu3A2ooGYkbiwJ_AndauaEqII.roa (raw, json)
Hash identifier: E6r63zG6sefoguypB+lgHja7CCeS19CQz6JR5YKc6sk=
Subject key identifier: 0A:5C:EE:DC:0D:A8:A0:66:24:6E:2C:09:FC:09:DD:6A:E6:84:A8:82
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0193DFD478BBE7E49CFBF82FFF582267A0B4
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Clzu3A2ooGYkbiwJ_AndauaEqII.roa
Signing time: Thu 19 Dec 2024 16:51:03 +0000
ROA not before: Thu 19 Dec 2024 16:51:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 95.38.38.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:d4:78:bb:e7:e4:9c:fb:f8:2f:ff:58:22:67:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Dec 19 16:51:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a5ceedc0da8a066246e2c09fc09dd6ae684a882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:c0:58:2d:a7:f7:78:fd:45:bd:8c:9b:54:
b7:cb:3e:ba:c1:d1:07:ec:7c:d5:57:17:92:0c:af:
2e:3f:5b:37:82:81:2b:c2:08:95:e8:da:05:1d:d2:
8e:2f:a1:41:a4:d0:be:85:6e:b1:a9:20:4d:46:7f:
d4:8d:4a:41:48:ea:ed:d8:29:37:7a:72:18:8b:1a:
c6:07:aa:62:16:af:9c:db:19:b7:cb:6a:91:62:88:
21:80:40:50:e7:6d:59:80:01:e1:f8:71:45:0a:4b:
f5:5a:88:9c:fe:40:f0:7f:21:e0:0a:76:6e:72:8c:
6f:a6:4e:b1:73:15:c5:d3:4a:cd:2d:20:c2:84:09:
28:41:30:d1:b9:9a:66:6b:a6:24:ef:3a:cd:ed:c6:
fc:24:14:be:04:d6:ed:6d:d8:88:59:fc:96:66:c7:
37:1d:2a:93:d0:7a:31:85:e3:27:03:d9:2f:e6:a4:
87:07:e9:4a:0b:73:f1:fc:d9:3d:4e:4a:60:83:df:
52:6b:bb:88:9f:6d:74:42:55:fe:19:47:20:17:c8:
ff:8c:eb:41:e3:d7:35:fc:0b:74:63:a0:a7:03:cc:
84:26:b4:30:67:df:81:41:69:7d:cb:ce:09:d0:15:
0d:21:12:ee:4b:c9:f4:7a:52:8d:74:0f:1f:cd:79:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:EE:DC:0D:A8:A0:66:24:6E:2C:09:FC:09:DD:6A:E6:84:A8:82
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Clzu3A2ooGYkbiwJ_AndauaEqII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.38.0/24
95.38.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b2:88:d1:17:19:aa:e9:d9:c1:bf:56:51:ac:c3:3d:bd:ba:
76:dc:ef:3d:18:01:53:5e:a6:3b:09:c4:f7:c6:e4:ef:31:61:
a5:ef:11:1a:86:d9:eb:94:de:fa:5d:2d:2b:59:13:3d:ce:97:
12:c0:2c:c9:8f:e0:13:ec:a3:4e:b3:64:48:1b:00:70:fc:18:
f2:79:96:cd:53:68:67:77:83:36:f4:c5:af:2b:74:36:7c:88:
59:9e:4b:4d:90:a8:1d:21:66:9e:a8:7b:c8:a5:6b:41:38:85:
85:c2:c9:44:76:c7:a1:d9:e8:e0:b2:ad:56:22:49:14:83:30:
ee:92:c9:b3:ba:7f:f9:86:9d:cb:a8:52:47:e6:a1:40:72:05:
57:0c:49:74:c1:c5:84:82:a8:2c:45:00:79:08:c1:99:78:9f:
81:1a:7b:e9:c0:0c:20:ba:88:db:50:0f:25:24:88:cc:26:89:
63:fa:fd:8e:0f:72:87:97:33:66:be:37:a4:d3:11:b2:e8:43:
c3:c8:95:f1:08:d1:e3:29:ad:6e:d6:31:f9:66:0a:8c:69:80:
f8:d1:49:03:76:8e:77:58:f3:b7:ad:e9:8f:0b:b0:81:f7:bb:
d6:fd:a7:0c:3f:81:60:fe:76:62:d8:6d:8c:9b:f7:19:61:49:
4f:64:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net