Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HusuBkz271zstwsp5tplM3mAg38.roa
File: HusuBkz271zstwsp5tplM3mAg38.roa (raw, json)
Hash identifier: mzo0XnrnOdKOPnrSHHSz1z+NgatzRq83lHU0IES++9E=
Subject key identifier: 1E:EB:2E:06:4C:F6:EF:5C:EC:B7:0B:29:E6:DA:65:33:79:80:83:7F
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0193A6695AD2D242B462358F34811A488367
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HusuBkz271zstwsp5tplM3mAg38.roa
Signing time: Sun 08 Dec 2024 13:15:42 +0000
ROA not before: Sun 08 Dec 2024 13:15:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 77.111.119.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:69:5a:d2:d2:42:b4:62:35:8f:34:81:1a:48:83:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Dec 8 13:15:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eeb2e064cf6ef5cecb70b29e6da65337980837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:a0:8c:a9:36:19:a6:1c:6c:9d:d1:23:b1:
50:2b:df:21:c5:1a:3d:41:2f:79:b2:31:19:69:2c:
ce:29:f0:0e:b8:8b:c2:2e:82:74:20:79:62:aa:1e:
fb:a7:1e:c9:4e:e9:5c:b8:77:15:9b:f9:9b:f6:5d:
c7:75:5d:10:e6:88:a9:b8:68:95:e6:79:1e:55:3a:
16:c4:e0:02:a0:cc:9c:ea:c3:59:87:d1:56:54:dc:
88:3e:ce:6f:de:e0:b4:fe:75:cd:86:ea:0e:c9:d0:
33:9e:0a:c3:bd:e6:97:7a:29:7c:f1:8f:99:c8:4f:
c8:1b:b8:73:87:c6:a9:d3:d1:30:8a:26:81:c8:39:
1b:f1:f3:7e:15:a6:35:00:de:ae:6c:92:3e:2f:a4:
71:61:d7:7d:f3:9b:8a:de:78:49:a2:1f:62:7b:47:
4f:a6:2e:52:92:be:58:44:64:3d:2f:a2:7c:e2:f2:
9b:23:0f:c5:44:7e:2d:fc:7f:b5:3d:63:b6:97:b8:
e3:c0:a5:34:8b:b1:e6:f8:b8:f0:31:ba:d3:bb:d6:
6e:42:db:45:2c:fc:c9:b1:e6:b2:ce:f8:a6:39:21:
a1:7c:6c:36:c8:7c:89:33:5f:87:d5:67:4a:56:09:
12:67:df:dd:b0:a6:03:8b:83:c9:94:47:9c:27:ce:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EB:2E:06:4C:F6:EF:5C:EC:B7:0B:29:E6:DA:65:33:79:80:83:7F
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HusuBkz271zstwsp5tplM3mAg38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.119.0/24
91.190.187.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
12:10:83:59:49:d3:17:86:01:1f:13:17:9f:18:08:1c:71:8f:
ce:cf:a4:71:88:f8:7d:e2:3e:10:5b:e6:9f:22:9d:5f:dc:e1:
17:62:a9:e2:b1:dc:95:97:e7:90:6b:ce:02:ae:07:48:49:5e:
a8:fb:2e:99:dc:41:36:5f:43:58:69:d6:62:12:8b:d7:09:24:
32:2a:a1:89:b2:14:27:4c:ee:af:cd:9a:ec:1c:f9:3a:af:ba:
5e:3b:76:57:c3:ea:ce:c0:9f:51:d2:ed:e4:2f:f8:aa:23:08:
b3:fc:35:df:18:17:e8:42:94:d2:ba:73:08:d5:2e:b8:2d:2c:
5b:e2:e1:e8:28:e4:44:a9:af:8d:cf:ae:e7:d0:78:41:59:64:
54:06:ed:35:39:2d:69:be:8f:39:0f:56:67:19:29:6f:91:a3:
71:8e:14:3c:f7:a9:73:dc:4a:8c:b2:ba:1f:d9:8e:7a:47:eb:
10:7d:c2:63:eb:a7:7d:d2:8a:53:69:37:c3:3f:81:5d:98:72:
29:73:6e:4b:6c:76:eb:d2:49:f4:b7:60:20:94:78:a6:90:46:
b5:25:fb:b7:ad:d9:2a:06:b8:b6:37:9d:36:fb:e6:bf:f7:3f:
64:e0:0b:b8:cc:a2:cf:a8:55:92:3f:3b:7c:08:b1:41:11:b3:
a5:5d:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net