Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/_FM0K5Ie2Ww9EQbKVyy2zw-veoc.roa
File: _FM0K5Ie2Ww9EQbKVyy2zw-veoc.roa (raw, json)
Hash identifier: GmjUVoG/XeR5140n0WM+VHVWS/piBiuw0GzhqBeKKxs=
Subject key identifier: FC:53:34:2B:92:1E:D9:6C:3D:11:06:CA:57:2C:B6:CF:0F:AF:7A:87
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0193E2D3AFB6B52BF4C492B747AB60932D2B
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/_FM0K5Ie2Ww9EQbKVyy2zw-veoc.roa
Signing time: Fri 20 Dec 2024 06:49:04 +0000
ROA not before: Fri 20 Dec 2024 06:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214038
IP address blocks: 31.192.210.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
2a03:2102:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:d3:af:b6:b5:2b:f4:c4:92:b7:47:ab:60:93:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 20 06:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc53342b921ed96c3d1106ca572cb6cf0faf7a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:ea:7c:85:5f:69:11:99:b2:d1:90:e7:87:
aa:b7:36:38:6d:dc:d5:fa:b4:e4:1b:f4:e1:e9:16:
3f:b3:56:a1:d4:f2:4d:bb:0e:d5:5b:76:73:34:6f:
17:fe:9c:34:32:7a:46:17:84:62:80:b8:d4:0b:3f:
55:82:f8:e3:33:1f:66:d8:b1:53:a0:d2:ef:62:f2:
18:03:cc:a6:f0:ab:0b:bb:12:5b:1e:68:6f:61:73:
3d:17:a5:3a:ba:ba:64:34:cf:c2:1f:14:73:a7:51:
fe:43:da:6b:7c:91:24:1a:86:7b:12:d5:4e:91:ec:
0d:0c:e6:c0:03:5f:8c:e7:5b:21:64:c7:ed:96:e6:
a5:73:ed:11:2c:f6:89:11:be:e4:78:58:75:ed:be:
f8:c3:58:b7:8e:b8:5c:af:c4:37:a5:d7:84:bd:0b:
d8:79:ed:7c:6f:88:6c:30:d5:40:3e:9a:e6:94:de:
2f:59:6c:9e:47:b1:b3:55:53:23:e0:44:9e:f1:5e:
29:be:10:9b:ca:47:01:aa:e2:e4:8d:e3:32:5b:46:
f7:31:fa:4b:2e:d9:81:a0:5c:83:dd:74:57:44:f9:
f0:76:e2:8a:00:31:16:fc:91:56:e7:80:9a:7e:60:
d3:7f:6a:f6:65:96:ee:3b:a1:9c:c8:4f:fa:82:ea:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:34:2B:92:1E:D9:6C:3D:11:06:CA:57:2C:B6:CF:0F:AF:7A:87
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/_FM0K5Ie2Ww9EQbKVyy2zw-veoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.210.0/24
89.252.136.0/24
93.115.77.0/24
95.173.183.0/24
IPv6:
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ed:78:e8:59:cf:f5:1e:01:7c:c2:1e:e5:02:be:57:0f:c6:
36:ad:20:20:76:9b:57:45:72:26:35:86:d1:3d:d8:1f:4a:39:
aa:67:df:6f:4e:76:24:7d:6f:7f:c4:ba:13:68:df:f9:81:ae:
a3:72:5d:59:cc:62:c9:8e:96:30:4b:4d:c5:ce:d2:2a:d3:af:
7e:e5:f4:0e:2c:22:30:95:86:50:bd:4f:c2:99:7a:4b:8a:b1:
49:7b:c8:d0:6d:21:0a:ee:9d:55:d3:de:74:44:51:e0:45:db:
59:ab:39:3b:07:9f:af:7c:19:35:ca:3d:68:18:6c:ab:3c:37:
52:b0:60:28:e8:d3:02:21:4f:b7:42:35:0f:7f:6e:46:2d:6e:
a3:44:23:95:05:1a:e9:a9:72:d4:c5:7a:23:79:a6:ca:b6:0a:
f1:9a:c3:96:f9:e0:fb:96:a0:0e:36:67:9d:f3:69:eb:f4:49:
55:75:f9:0d:21:45:00:0e:8a:34:c7:14:7c:8f:2b:b6:0e:ec:
eb:69:7c:ab:67:f4:c8:af:1c:bf:66:f6:2d:2b:07:7c:c4:2f:
a8:4f:ff:2e:8d:04:dc:d6:9c:91:b9:dd:3b:d1:32:3f:c5:c9:
8e:70:b9:10:11:74:0d:ea:65:77:c2:e5:fd:a0:74:63:28:30:
21:b2:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:03 2024 by rpki-client on console.sobornost.net