Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V26wpOZHa25nRKnC0SMHltx-mbY.roa
File: V26wpOZHa25nRKnC0SMHltx-mbY.roa (raw, json)
Hash identifier: g1FPXEXRV42fkSucooYQ7kN9Z4mH+lYluKrYknd1hU8=
Subject key identifier: 57:6E:B0:A4:E6:47:6B:6E:67:44:A9:C2:D1:23:07:96:DC:7E:99:B6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01936E6F0705BD33C1D0E63438CBE200F495
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V26wpOZHa25nRKnC0SMHltx-mbY.roa
Signing time: Wed 27 Nov 2024 16:23:10 +0000
ROA not before: Wed 27 Nov 2024 16:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 85.133.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:6f:07:05:bd:33:c1:d0:e6:34:38:cb:e2:00:f4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 27 16:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=576eb0a4e6476b6e6744a9c2d1230796dc7e99b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:06:d0:d4:c3:f1:74:a8:10:52:ea:38:9d:
fa:15:a6:da:0c:72:47:68:91:2a:87:ce:76:d4:f9:
7f:d5:80:07:2d:ed:b7:65:22:02:39:b1:8d:af:87:
34:a3:56:2c:3d:5d:49:05:28:06:81:e2:cc:9a:34:
0f:1b:93:c7:ff:7c:c3:90:53:d0:56:16:c9:f9:37:
53:92:8a:58:14:0d:aa:5f:99:97:ac:b6:16:8c:7d:
63:68:ac:8a:17:33:95:bc:c3:a9:10:dd:b4:eb:2d:
e2:b3:16:f1:48:7a:1e:c9:3c:c1:99:5a:40:79:75:
ea:70:24:ef:ab:d0:d1:ec:18:fa:50:82:66:2e:c2:
67:ab:92:69:e8:a2:9f:6c:60:f3:73:d3:d9:cd:d2:
22:cf:bf:52:5c:52:c9:ba:47:0e:bd:37:74:e9:6d:
a4:e9:8d:c9:e0:78:5d:f3:64:84:b3:a2:bf:1f:61:
67:cd:7a:2c:b3:de:ba:70:f3:c9:69:92:6d:f8:7a:
2c:a6:91:61:b5:29:84:14:ed:20:3c:ea:79:57:83:
26:f8:99:0c:3e:fb:2b:74:f6:4c:c0:a8:ae:25:f3:
8a:01:29:d1:f8:c8:6d:3e:c8:74:08:f8:4b:b0:dd:
53:eb:89:b5:c8:ed:01:8c:88:c8:1b:db:70:c0:fb:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:B0:A4:E6:47:6B:6E:67:44:A9:C2:D1:23:07:96:DC:7E:99:B6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/V26wpOZHa25nRKnC0SMHltx-mbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dc:d8:5b:77:3f:77:67:27:14:f2:90:dc:2c:51:ea:c3:2f:
46:40:9c:41:1b:6e:e8:99:d6:a0:44:18:9b:59:90:33:19:ea:
1a:0f:23:1a:48:63:cf:be:25:7c:70:e0:48:f9:d9:c7:5b:8f:
7b:cd:db:5d:26:a1:cb:2a:38:a6:24:75:02:74:21:5b:c6:dd:
91:ee:e8:3e:ee:d5:b2:03:73:f1:d7:3f:cf:dd:fa:c9:5e:f9:
01:a7:cd:bd:bb:cc:ad:f3:47:05:0b:7d:51:3f:29:35:94:e4:
ac:c2:6f:d1:a7:dd:d8:d3:b0:92:52:b0:e4:17:d2:96:4e:62:
58:f0:78:11:ff:c3:10:80:16:92:75:6b:f0:80:4f:0d:d6:52:
10:55:bf:e0:f5:78:82:ca:bf:b4:d1:33:5a:92:90:5c:f6:82:
4e:03:09:04:ab:c6:e0:d1:59:da:3b:56:1e:55:a4:a5:2a:24:
b5:8a:66:67:79:6a:ba:30:0d:14:48:b8:7f:8d:a1:d4:27:e6:
74:72:ec:c7:2b:0c:e5:57:74:bb:17:c7:a3:2d:11:dd:cd:ca:
f8:fa:61:43:26:53:91:de:11:50:ee:d4:aa:dd:50:95:a2:af:
0e:84:4a:5c:1a:da:69:58:e2:6a:6b:1d:ba:c0:28:84:3e:6b:
ab:5d:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:24 2024 by rpki-client on console.sobornost.net