Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZngrGbSuprFgLT8B_wvheu8uewk.roa
File: ZngrGbSuprFgLT8B_wvheu8uewk.roa (raw, json)
Hash identifier: s+tKdctUX5kzOCncjnXJDjhTu9fzTKkqS3eahVyzdA8=
Subject key identifier: 66:78:2B:19:B4:AE:A6:B1:60:2D:3F:01:FF:0B:E1:7A:EF:2E:7B:09
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 0191DB0BCCAE80739B62D431134C909C8F2F
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZngrGbSuprFgLT8B_wvheu8uewk.roa
Signing time: Tue 10 Sep 2024 08:27:48 +0000
ROA not before: Tue 10 Sep 2024 08:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204649
IP address blocks: 80.73.208.0/21 maxlen: 24
80.73.216.0/23 maxlen: 23
185.244.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:0b:cc:ae:80:73:9b:62:d4:31:13:4c:90:9c:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Sep 10 08:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66782b19b4aea6b1602d3f01ff0be17aef2e7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:f8:3a:47:72:56:af:b8:50:9f:c7:3c:49:
d8:fe:01:4b:c6:64:fc:79:47:f9:28:74:02:82:36:
de:ae:2e:25:3f:04:b5:38:31:57:e9:e6:d3:de:c8:
1c:11:41:be:2d:66:51:78:f6:2a:31:2e:a5:ee:8c:
3e:62:68:7d:86:68:40:78:5c:30:4e:76:7e:32:69:
1c:0e:a7:44:c8:92:2c:0d:fc:03:9c:ea:ca:7e:d9:
59:10:ea:c1:25:68:92:a6:7e:ab:0e:bd:2b:7e:a7:
3e:40:6f:89:b4:6f:bf:2a:3d:f7:ea:b8:e6:75:24:
98:e1:4b:44:48:19:80:12:74:73:59:e6:84:28:aa:
7f:45:3a:4f:d0:8e:d6:eb:0a:da:d0:63:11:b8:15:
e2:bb:6d:d1:39:53:31:d2:86:df:16:96:84:d6:7e:
b4:5e:0a:cd:40:be:9a:22:cf:e8:34:85:21:fa:88:
38:12:f2:8d:7a:b5:3b:99:b5:c1:09:44:a0:5e:16:
14:78:cb:af:32:c2:24:9d:7c:08:d0:f4:5e:58:8d:
45:28:c9:aa:9c:0d:c6:f9:5d:45:cd:98:05:8e:3d:
db:b0:34:86:77:60:2f:ca:73:ec:37:9c:16:ab:f5:
b3:71:c2:51:19:58:f0:0e:c8:67:57:d4:d1:2f:48:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:2B:19:B4:AE:A6:B1:60:2D:3F:01:FF:0B:E1:7A:EF:2E:7B:09
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZngrGbSuprFgLT8B_wvheu8uewk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
e9:e6:63:ad:8e:2e:2d:3c:2f:dd:46:82:be:6a:64:07:7d:a5:
b8:43:4a:98:32:e6:3b:59:93:42:92:06:fa:00:ea:b1:32:4c:
6e:4e:48:bf:f3:12:14:99:df:22:e8:db:7a:a4:65:69:b8:32:
43:82:5d:19:80:11:0b:70:de:32:cc:ad:2b:3e:21:58:da:3b:
ee:2f:59:d7:a5:79:8a:81:3f:a4:09:e4:9c:a5:d3:6d:da:ec:
16:25:66:af:5f:20:a9:d4:c1:3d:4b:68:2f:b2:73:7a:9a:34:
15:36:a6:55:55:6c:32:1c:77:a4:76:f5:56:44:1f:1f:e8:02:
5f:d1:55:89:8f:f6:57:b1:66:a3:f3:16:fe:4d:37:c0:a9:34:
6c:1c:5d:a5:66:71:05:ac:d3:55:e8:b8:25:2f:bf:51:8f:51:
7c:68:b7:46:9a:22:bf:c4:82:21:bb:8b:d6:44:40:a8:d5:d1:
72:ce:c5:9b:8b:47:99:93:5c:86:e6:04:27:04:6d:b8:1b:9c:
56:7c:1a:64:f8:86:12:8d:52:88:0b:1b:9b:c7:7d:45:21:25:
1d:97:47:28:7f:53:00:d2:0f:1c:a8:29:ff:f2:b9:25:dd:40:
17:2d:e9:24:6f:27:1b:c4:c9:ed:99:76:a3:70:ec:44:1a:f2:
26:8b:cf:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:01 2024 by rpki-client on console.sobornost.net