Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/0HaJdrQTeKl1pxgKZsoK9Zs3tFY.roa
File: 0HaJdrQTeKl1pxgKZsoK9Zs3tFY.roa (raw, json)
Hash identifier: w9PvyJ6Ithu6sQ5xrmeyEpGEOSP6OEv/v9DCsz7w7vo=
Subject key identifier: D0:76:89:76:B4:13:78:A9:75:A7:18:0A:66:CA:0A:F5:9B:37:B4:56
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 018CC9BCD95BAF5ACEDFC82E8982020F43BF
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/0HaJdrQTeKl1pxgKZsoK9Zs3tFY.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6681
IP address blocks: 89.150.33.0/24 maxlen: 24
193.200.64.0/24 maxlen: 24
193.200.65.0/24 maxlen: 24
195.191.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d9:5b:af:5a:ce:df:c8:2e:89:82:02:0f:43:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0768976b41378a975a7180a66ca0af59b37b456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:13:15:73:ef:1b:df:2e:15:c6:52:9e:76:
e8:dc:9a:45:3c:9d:30:6f:9c:6b:f2:2a:1c:f0:bc:
3b:66:8a:af:88:51:09:6f:b5:11:3e:f4:dc:0d:a7:
ea:5a:d9:fa:09:4e:9b:c7:56:46:63:90:67:2e:87:
51:c2:63:3d:0b:b1:c9:38:fb:65:31:79:e1:9e:38:
4d:1b:97:e5:c9:6d:3d:ee:5b:92:e9:c0:1c:ee:69:
be:5c:fb:58:67:2e:c3:55:ce:64:fe:38:ed:8e:dd:
d8:53:f0:b6:77:13:88:9b:51:27:31:6f:a5:31:77:
52:f1:6f:ea:8d:67:f5:08:31:c1:cf:bf:91:28:c4:
48:4c:86:05:0c:95:0e:9c:82:e5:63:7d:0e:4f:f9:
53:74:9e:36:b4:5e:e7:10:8e:06:d2:3e:35:ce:61:
d6:51:58:09:df:31:98:b1:49:22:79:fa:b0:db:11:
61:51:4c:24:5f:cb:d3:4c:93:0b:e9:75:24:dd:cd:
47:ff:a1:74:33:e7:02:26:e8:0a:1e:f3:02:90:90:
af:0d:ae:c2:32:f7:fb:90:d5:57:a1:64:d6:f9:f0:
b1:bd:1b:05:f8:6b:48:61:b0:b7:b4:57:64:fb:26:
5e:89:1d:cd:d0:3b:d3:c0:ba:89:02:77:0c:a1:9a:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:89:76:B4:13:78:A9:75:A7:18:0A:66:CA:0A:F5:9B:37:B4:56
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/0HaJdrQTeKl1pxgKZsoK9Zs3tFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.33.0/24
193.200.64.0/23
195.191.234.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9e:33:32:1e:36:28:27:39:c9:90:0f:af:ed:62:5f:44:65:
17:e5:8d:b9:ce:d1:ea:75:59:ef:24:2e:2b:a0:45:0a:24:ac:
4f:63:60:7c:f1:87:da:07:de:56:da:aa:94:23:49:11:75:9d:
81:6d:f1:77:eb:8d:1b:21:03:13:65:16:5f:95:ff:85:1f:8e:
c2:b4:4a:c1:f1:01:11:a3:08:30:2e:43:52:39:1a:99:f6:cd:
d6:f6:7f:4c:1c:5c:9b:ee:d6:e2:7e:71:b5:ea:2e:f9:38:49:
04:74:1f:2b:c5:3c:46:36:7b:ff:a4:79:3f:09:95:8e:d3:34:
e6:d1:33:d2:b1:70:95:48:29:b5:24:5e:a4:14:4d:bb:ca:b7:
05:04:e2:1b:6f:a0:fc:90:e8:ef:f2:93:5c:64:0d:f2:bb:17:
51:ca:8a:71:75:67:7f:30:e1:f7:3e:52:26:d3:b2:ab:57:23:
ac:00:36:8a:e0:1d:8e:7e:ea:a1:aa:80:3e:62:92:97:47:27:
3c:2b:db:42:57:6b:02:0c:dc:41:e2:ee:65:12:ed:d9:f0:cf:
06:2d:0a:27:f0:cc:4b:30:96:a5:fb:95:9a:75:92:40:55:f4:
da:47:65:a2:57:bc:2a:3d:5f:b6:e3:7c:f7:46:ff:66:a5:f1:
4d:d9:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:08 2024 by rpki-client on console.sobornost.net