Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/EljqBD4V8cJSeuspj_ZRmZU2MiI.roa
File: EljqBD4V8cJSeuspj_ZRmZU2MiI.roa (raw, json)
Hash identifier: XZbkDUcYivq+rf+J3iNYGDohQu5yZKGx9G40yfjby7I=
Subject key identifier: 12:58:EA:04:3E:15:F1:C2:52:7A:EB:29:8F:F6:51:99:95:36:32:22
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01922EA9BC7D9D1E69C56A2390366AE06B9C
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/EljqBD4V8cJSeuspj_ZRmZU2MiI.roa
Signing time: Thu 26 Sep 2024 14:08:48 +0000
ROA not before: Thu 26 Sep 2024 14:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 188.95.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:a9:bc:7d:9d:1e:69:c5:6a:23:90:36:6a:e0:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 26 14:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1258ea043e15f1c2527aeb298ff6519995363222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:bf:3d:92:9a:ee:db:82:26:ad:de:f9:f9:
97:77:89:9c:d6:d5:fa:e2:37:0e:de:33:18:8a:ce:
64:7f:0b:a1:1d:bc:72:48:41:14:f1:42:e2:8e:0b:
24:02:bd:01:42:d4:69:87:f8:29:77:69:28:82:a5:
20:cc:fe:5e:96:9e:f4:f1:5d:a0:8b:29:58:f4:ac:
9c:8e:ea:70:d7:f7:76:6a:0a:5a:f6:17:cd:32:ef:
bd:71:d1:10:72:06:b7:d5:0c:3a:97:f6:0a:aa:d9:
d9:67:d3:ee:e1:7f:12:d8:be:e1:ea:91:8a:22:f7:
37:d1:80:5a:50:f7:3b:a7:05:c7:4c:40:da:0c:5a:
23:2a:df:e8:00:6b:68:9c:86:97:91:a6:4d:11:36:
a1:11:68:2d:93:7c:6e:82:99:41:01:fc:3d:01:d2:
16:16:95:22:5e:b4:5b:5d:54:ef:83:ae:74:95:c9:
b3:3e:9c:b1:9e:f6:3b:3d:c4:04:e0:f0:8f:9e:42:
24:f5:16:ed:8c:22:d8:66:3f:f2:dd:99:20:6d:c5:
66:df:85:96:2c:11:de:06:7c:7d:5d:e6:8d:c2:df:
1f:bb:f9:a0:39:27:98:0d:bd:05:68:98:3e:c8:e3:
ac:18:58:0c:45:c1:42:6b:38:ba:24:cf:78:09:71:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:EA:04:3E:15:F1:C2:52:7A:EB:29:8F:F6:51:99:95:36:32:22
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/EljqBD4V8cJSeuspj_ZRmZU2MiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c7:c0:24:c6:59:53:25:6d:ff:d2:3d:fc:cb:36:9c:cf:8b:
8a:85:f4:13:f4:fd:b0:fa:d1:ec:90:07:12:6b:e7:17:e5:eb:
c8:29:51:2b:99:ba:a2:08:12:ec:97:9f:25:63:be:67:5b:e6:
52:7b:a5:f6:2b:fc:df:16:6f:65:5e:24:4e:b9:11:40:17:9f:
1e:b8:d0:55:3e:57:26:05:3d:75:63:7b:aa:00:5e:6f:25:59:
b2:57:ad:58:d3:f2:83:af:7c:6b:91:20:fb:d2:03:b8:db:05:
c8:04:44:1f:4d:02:3e:4f:fe:f1:88:93:63:35:a3:56:06:ec:
e9:ca:e4:b3:fb:2a:93:9d:5a:a9:02:d0:cb:5c:18:9b:ed:e9:
98:fd:b7:f5:7e:06:9d:fe:fd:31:e9:07:98:93:81:00:d0:6e:
5d:ad:52:07:76:32:b7:e7:ee:ae:b5:4a:d7:bf:4e:4b:0e:12:
4a:10:0f:6b:eb:cf:a6:d0:95:54:f4:16:7f:45:fa:91:3c:19:
4f:ff:dc:77:f6:6b:aa:32:0e:7e:ea:54:81:4e:5a:f6:28:fe:
7f:bf:0b:9d:ce:d2:cc:83:62:79:6a:a3:d6:bd:c8:97:bf:e9:
b6:6f:0a:cd:70:3f:23:be:37:df:79:72:d7:39:12:52:a0:a0:
e9:ad:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:02 2024 by rpki-client on console.sobornost.net