Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/3z_-RanenADDRspMXqaUmZgGVvg.roa
File: 3z_-RanenADDRspMXqaUmZgGVvg.roa (raw, json)
Hash identifier: FVVyFD7tDoHiXjk290aqfaCGlFnAtP3rAb1sbU2Pk2o=
Subject key identifier: DF:3F:FE:45:A9:DE:9C:00:C3:46:CA:4C:5E:A6:94:99:98:06:56:F8
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 018CC72572D56B12873E0DE743BE20B32EDC
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/3z_-RanenADDRspMXqaUmZgGVvg.roa
Signing time: Mon 01 Jan 2024 22:29:29 +0000
ROA not before: Mon 01 Jan 2024 22:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209041
IP address blocks: 81.21.225.0/24 maxlen: 24
81.21.224.0/24 maxlen: 24
81.21.227.0/24 maxlen: 24
2a0d:26c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:72:d5:6b:12:87:3e:0d:e7:43:be:20:b3:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Jan 1 22:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df3ffe45a9de9c00c346ca4c5ea69499980656f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:5f:54:7b:36:98:e5:6b:bd:c9:7f:59:3c:
03:ba:26:98:aa:64:57:5a:ae:5b:ee:94:f0:bd:e2:
e9:95:4f:1c:42:6d:ef:0d:26:c2:90:d1:83:6a:9a:
58:71:69:cb:d4:28:2a:26:ac:1b:aa:42:4c:c8:1c:
9e:a9:fc:64:68:1a:7e:69:9e:81:57:1f:51:33:30:
15:74:9b:8d:33:59:bf:75:7f:96:23:33:ec:b0:c8:
04:a5:c8:4f:60:a4:a0:4c:0d:15:71:90:d5:58:a7:
21:98:55:f8:86:28:c1:6c:75:3e:13:dd:b5:25:8d:
91:53:5d:6b:e0:78:88:e3:ae:5d:df:dc:ab:4b:06:
cc:7c:aa:8b:bf:94:13:32:b4:cc:f7:3e:03:75:d2:
e7:e2:6b:95:8a:7a:bc:9d:4a:17:58:b6:1c:8c:69:
ed:a4:52:64:87:7a:9c:80:84:11:78:51:64:e1:14:
e5:52:1c:08:34:11:2e:45:a5:0b:5b:01:38:18:a0:
aa:42:21:24:7b:ed:b6:f7:ea:16:bd:e5:22:68:34:
2f:16:07:53:2a:88:c0:c4:0e:ac:b6:99:35:b3:38:
df:39:bb:d7:3a:76:57:8f:e3:84:59:dd:bf:26:b6:
68:57:48:93:a1:74:8e:e1:d6:13:b7:c3:75:6a:03:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:FE:45:A9:DE:9C:00:C3:46:CA:4C:5E:A6:94:99:98:06:56:F8
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/3z_-RanenADDRspMXqaUmZgGVvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.224.0/23
81.21.227.0/24
IPv6:
2a0d:26c0::/32
Signature Algorithm: sha256WithRSAEncryption
51:8f:56:09:3f:a6:fc:87:f1:64:85:6c:a9:ae:de:0d:d7:0a:
ac:60:0c:ef:d4:56:04:db:51:96:88:01:e6:d6:de:f7:4f:27:
67:f2:a5:bc:45:25:fa:d4:8a:e1:58:1f:66:33:85:a9:c0:c2:
63:e5:27:6d:91:56:98:d5:0d:ba:c5:b8:71:08:4e:93:c7:4b:
7c:da:e2:73:ca:70:99:a1:87:7b:fd:a9:8d:1f:c1:2b:a4:29:
87:17:96:61:fe:7f:e4:af:75:8a:ff:6c:cf:2c:f8:08:b6:34:
88:bb:26:18:f4:bc:99:3d:dc:1d:dd:7f:3a:83:b3:21:ee:2e:
8f:cd:0a:62:88:4c:39:8d:81:99:c9:ae:12:fe:81:6b:a9:7b:
0e:52:5a:f3:14:81:5b:cf:38:4e:c1:0b:6a:53:1e:f0:b7:7a:
93:f5:8d:10:d3:32:11:f7:b0:c6:41:0f:2b:84:a3:b9:66:4a:
df:5c:9a:8d:54:a9:00:ab:81:72:9c:22:88:7d:f1:90:2d:5b:
74:0c:5d:d9:9f:f7:1e:46:2a:d6:94:ef:d0:c0:4f:da:f9:7e:
21:21:d3:ec:9e:ba:b7:69:f1:9c:40:ca:77:6c:ed:b8:98:f9:
f7:c1:5d:cc:65:b8:94:ff:b4:21:0b:35:e7:58:23:15:40:d1:
ff:aa:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:19 2024 by rpki-client on console.sobornost.net