Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjDz9cpfabTl_w7CyaP8-H2YufA.roa
File: mjDz9cpfabTl_w7CyaP8-H2YufA.roa (raw, json)
Hash identifier: Q/bfZotu9Fg37dYCvOqiLmBF3SfTvKno+O90JW8dfWo=
Subject key identifier: 9A:30:F3:F5:CA:5F:69:B4:E5:FF:0E:C2:C9:A3:FC:F8:7D:98:B9:F0
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0192D78EDD7081F092108B277F56F1A05AA6
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjDz9cpfabTl_w7CyaP8-H2YufA.roa
Signing time: Tue 29 Oct 2024 09:15:17 +0000
ROA not before: Tue 29 Oct 2024 09:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209459
IP address blocks: 185.97.116.0/22 maxlen: 24
185.143.232.0/22 maxlen: 24
193.176.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:8e:dd:70:81:f0:92:10:8b:27:7f:56:f1:a0:5a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 29 09:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a30f3f5ca5f69b4e5ff0ec2c9a3fcf87d98b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:2c:4f:8e:ad:04:02:24:76:5e:e6:32:99:
a9:34:9f:d1:42:50:59:7a:8b:3d:17:f8:d3:9c:46:
37:06:ed:33:12:0f:79:c1:d9:ab:98:a9:4f:aa:75:
ea:d8:33:f7:48:38:39:1c:dd:1c:8d:b2:2f:21:61:
ca:24:5c:d2:c5:75:a7:34:23:9a:b5:4d:55:a3:ad:
e5:4d:4b:8e:c7:b7:79:12:f5:b0:64:a8:3e:5e:cd:
cb:39:ef:75:29:3a:57:87:73:65:03:10:ad:e2:08:
0d:b4:3a:0a:d6:15:c1:d7:f2:9c:07:87:40:78:08:
c1:71:3c:7f:fa:cd:3c:41:c3:f7:3f:63:69:1d:00:
a9:39:75:50:36:fc:f6:dc:af:31:21:da:f1:ed:bf:
29:54:b8:05:79:7f:cc:18:97:2c:59:21:2d:d8:2f:
b2:2d:80:a8:55:6b:6f:c3:20:57:22:1b:a5:90:40:
a9:27:2d:de:4d:9d:1e:3c:5b:ce:17:7d:8d:fe:b8:
33:e0:d2:14:a6:57:17:50:a4:90:9a:5b:95:2a:ec:
db:89:ca:af:4e:75:1d:5a:1d:6b:0a:ef:5b:42:46:
6d:24:1b:61:6a:88:e9:7d:6a:6f:71:24:89:f3:55:
7c:82:b0:3a:eb:12:47:e3:d4:5e:51:9d:03:ad:b6:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:F3:F5:CA:5F:69:B4:E5:FF:0E:C2:C9:A3:FC:F8:7D:98:B9:F0
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjDz9cpfabTl_w7CyaP8-H2YufA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.116.0/22
185.143.232.0/22
193.176.240.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d1:2c:03:40:b4:d2:b8:b3:64:55:7b:aa:dd:fb:28:b3:c4:
90:f9:2d:7d:a1:6f:6d:f4:2a:d9:10:d5:c3:fb:a3:5e:d6:24:
72:90:d3:3a:db:3c:0f:92:18:5c:aa:0b:fb:e6:f2:dc:22:95:
0f:97:ed:89:25:a1:cb:02:27:f2:85:8f:68:88:11:48:ee:cb:
b6:c8:9c:a0:d8:70:03:a5:4f:0b:db:ad:bf:fe:d5:7b:6c:bf:
c4:6e:d0:f8:a5:b5:0a:f8:8b:9a:0c:df:7d:a5:25:5f:45:35:
0a:de:3d:09:80:93:bc:f8:9d:48:1b:da:35:91:52:a2:92:5a:
6d:06:fd:7a:4c:f3:d5:c8:62:83:52:b5:50:1a:e8:75:74:45:
21:27:21:04:1b:e1:31:29:e3:df:dc:b0:c5:6f:55:46:74:3a:
d1:bc:15:d0:67:dd:44:94:a9:96:63:cf:a0:5e:1c:a3:79:8d:
dc:4f:ee:bb:ab:c5:53:d3:55:31:49:97:54:ac:55:f2:0c:1a:
e3:f2:40:c5:0d:3d:d9:a3:ec:26:9c:61:11:f3:90:bb:a8:6e:
ad:14:ad:96:e9:93:af:d0:4a:c0:83:5c:c8:32:87:e7:03:cb:
58:0b:3d:59:26:49:c2:0e:46:3f:6b:c7:e1:c0:0f:17:d3:95:
6c:e4:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net