Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/Gom9ZjnahSnkY87mcJM8gp2SkfM.roa
File: Gom9ZjnahSnkY87mcJM8gp2SkfM.roa (raw, json)
Hash identifier: 492qZiDKBCMKi/WdZOU/MneOVJx8geycCw1zw/ZonbE=
Subject key identifier: 1A:89:BD:66:39:DA:85:29:E4:63:CE:E6:70:93:3C:82:9D:92:91:F3
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 0193D3D0969FC5F946357696D82F45807B40
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/Gom9ZjnahSnkY87mcJM8gp2SkfM.roa
Signing time: Tue 17 Dec 2024 08:51:22 +0000
ROA not before: Tue 17 Dec 2024 08:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43150
IP address blocks: 153.94.128.0/23 maxlen: 23
217.199.199.0/24 maxlen: 24
2a00:4d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:d0:96:9f:c5:f9:46:35:76:96:d8:2f:45:80:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Dec 17 08:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a89bd6639da8529e463cee670933c829d9291f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:83:dc:58:4c:cd:45:02:55:65:48:a9:c1:
90:48:08:c5:2e:b9:61:2a:98:86:71:30:82:60:43:
da:e4:95:37:4d:6c:89:52:ae:01:2f:71:70:66:b1:
fa:d4:4d:94:04:0d:20:80:64:d2:65:40:56:5f:73:
5f:71:9e:84:f6:ab:50:bf:bd:bc:4c:6e:70:ea:23:
7a:98:86:00:a3:da:0c:6e:2e:bb:01:1c:3e:fa:2d:
e1:21:f1:cd:82:21:1a:10:58:47:30:30:f4:a3:e7:
10:89:23:77:8a:5d:2c:06:72:33:e6:c1:3d:c1:29:
1c:0b:81:62:ea:bb:f9:9a:70:df:3b:af:9a:1d:d6:
56:71:f1:73:b7:45:1b:fd:51:86:56:06:86:a8:fd:
fb:88:10:f1:8b:a8:1f:07:dd:07:ce:e9:00:ae:cf:
0a:35:4b:c8:44:81:bd:e3:bf:7d:8b:89:ea:5b:7b:
ff:ca:15:57:8a:12:ca:ea:12:6b:1d:04:aa:1f:9c:
3d:82:3a:e2:62:17:b1:23:7e:5b:f5:03:00:1c:33:
29:3a:77:ed:52:80:64:c1:d1:a3:07:c3:f2:fd:f0:
34:af:45:87:c7:84:f6:cb:a5:e7:09:63:70:e0:c1:
7f:ea:b7:2d:e0:c0:f6:11:90:1c:c0:74:36:dd:2b:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:BD:66:39:DA:85:29:E4:63:CE:E6:70:93:3C:82:9D:92:91:F3
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/Gom9ZjnahSnkY87mcJM8gp2SkfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.94.128.0/23
217.199.199.0/24
IPv6:
2a00:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
68:f7:2a:cf:d9:27:b6:eb:08:11:25:bd:00:d3:60:e7:cb:38:
82:53:a1:32:93:1e:05:97:67:d8:29:f1:4a:82:30:13:c7:5b:
b2:fb:f9:d5:42:4d:1e:8c:1c:b2:82:64:f1:d1:be:76:5e:f3:
c5:2e:02:54:6b:09:9d:9b:8e:62:18:c6:20:fd:48:b3:a4:19:
1c:14:d4:2f:72:8b:f9:20:e8:d1:fe:39:7b:eb:cf:cc:c0:6f:
41:1c:a0:83:aa:a5:f0:5c:a3:2e:6f:44:e4:03:9a:42:56:c0:
60:fb:03:98:84:ad:15:34:83:42:f4:e9:bd:02:b0:8e:61:5f:
f2:b1:fd:92:9d:00:d4:5f:b5:86:b1:38:18:02:58:21:25:a6:
43:32:d0:68:0c:53:df:c6:0b:d3:3f:4f:6d:a4:63:bb:09:dd:
5e:d2:e0:7a:f8:98:6e:f2:eb:32:c1:df:82:1d:b7:d2:03:f3:
8c:74:ba:8b:2f:55:97:56:7f:f8:15:44:ab:29:03:60:80:3e:
f0:14:f2:2e:7b:30:b6:a2:7e:2d:45:b2:9c:87:e3:b9:3a:e3:
60:94:43:3d:c8:a5:5b:22:cd:12:78:4a:53:80:ca:ab:06:48:
ad:fd:aa:81:9a:64:d3:14:2a:64:b4:bd:13:85:ba:c9:9f:49:
9c:8d:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net