Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jybyduQTO7iDxPbjXoYPlwArHGw.roa
File: jybyduQTO7iDxPbjXoYPlwArHGw.roa (raw, json)
Hash identifier: Vb5kodmBZ7GwIE4/bNKLTBNS4R2sIdp2t1Ju3YB4Fcw=
Subject key identifier: 8F:26:F2:76:E4:13:3B:B8:83:C4:F6:E3:5E:86:0F:97:00:2B:1C:6C
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019357E9F2319A3B55A8FAD5A2D8FE933EB8
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jybyduQTO7iDxPbjXoYPlwArHGw.roa
Signing time: Sat 23 Nov 2024 07:26:09 +0000
ROA not before: Sat 23 Nov 2024 07:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62442
IP address blocks: 95.38.45.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
95.38.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:e9:f2:31:9a:3b:55:a8:fa:d5:a2:d8:fe:93:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Nov 23 07:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f26f276e4133bb883c4f6e35e860f97002b1c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:d2:6c:c1:fd:f7:bd:38:2d:9e:ba:af:05:
5c:5e:4c:1a:cb:2f:f0:d4:b2:bd:eb:e5:8f:2b:5c:
dc:8f:ec:ff:16:4c:7d:c5:c3:1f:51:1d:5d:83:73:
bd:1f:7e:d3:46:23:61:40:f0:fa:36:56:7d:80:a0:
90:73:5c:84:07:ca:62:1a:06:43:d3:bb:79:4f:9f:
3a:92:4a:33:32:ed:57:44:6b:6c:6d:b5:17:de:a8:
36:c7:84:db:9c:3b:2d:91:7a:9d:b9:80:9b:cb:93:
5e:0a:45:47:81:d2:49:14:d1:6c:db:ad:2e:a9:24:
a0:ea:f5:18:fc:a4:51:7d:20:4c:68:22:01:f0:d5:
4b:26:16:39:69:93:f0:bf:5e:e8:47:92:b6:86:41:
91:3d:4c:4d:d3:50:f7:1a:6b:54:a4:5a:c8:5f:a6:
62:db:7b:3f:02:13:03:66:08:49:2a:09:d1:44:59:
54:6e:bb:ff:47:8a:6e:8a:7c:ab:78:f3:19:2f:b4:
49:bd:ad:27:f8:ad:c9:36:0a:9a:cb:c5:84:bc:e0:
fa:b0:e7:7a:ae:ca:da:05:0d:a9:ff:cb:10:93:c7:
54:c7:4b:6a:b6:35:8b:83:5b:57:36:5f:57:63:dc:
c1:e9:52:f9:13:35:42:69:51:f4:e3:2d:03:f9:16:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:26:F2:76:E4:13:3B:B8:83:C4:F6:E3:5E:86:0F:97:00:2B:1C:6C
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jybyduQTO7iDxPbjXoYPlwArHGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.45.0/24
95.38.72.0/24
95.38.198.0/24
Signature Algorithm: sha256WithRSAEncryption
55:97:95:1f:54:88:ce:f6:ce:90:37:6f:76:2c:54:0d:a8:2c:
32:df:6a:f8:f2:6c:52:d9:bf:7c:38:2f:33:82:1a:52:03:59:
b6:56:46:d2:ae:69:43:07:f2:21:96:9c:2e:8b:c4:b2:22:42:
59:0f:f2:ff:30:9a:bf:87:29:fd:f0:35:ab:bf:8a:cf:74:f2:
51:2c:f5:47:b7:6d:0a:16:30:3c:16:c3:37:78:4a:c8:9b:24:
5e:58:a7:5f:56:71:1e:f3:74:f6:4c:8e:c9:e9:01:b3:d9:74:
6e:b0:c2:e8:36:66:b6:00:f4:71:87:92:a2:27:35:f0:0e:b8:
25:b8:12:88:71:68:d8:63:9d:b6:8d:a8:07:da:3f:65:bc:57:
3e:23:1a:a4:4d:1d:92:41:95:ad:1c:5f:bc:c6:7a:6b:2e:ea:
a0:3f:40:b5:f3:40:bf:6c:5a:dc:af:cc:84:ae:22:a9:86:34:
dd:0a:b8:7d:79:19:e8:b9:d3:a6:49:4d:4e:89:f2:40:64:4c:
91:79:31:9e:5c:73:4c:95:7e:6d:aa:48:94:f5:44:d5:a8:97:
c9:fd:a1:66:68:9d:df:2c:18:28:7b:ef:c6:1d:a3:be:35:53:
a5:be:ba:39:e8:3f:3d:8e:9d:88:87:72:cd:83:06:f9:ea:64:
fe:37:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:56 2024 by rpki-client on console.sobornost.net