Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/NcPGHOVbinU-jA1uXDttFWRhWuU.roa
File: NcPGHOVbinU-jA1uXDttFWRhWuU.roa (raw, json)
Hash identifier: mcmQMHLex/qDA0AJp/SWKVesAwqBdkUBiDgq5LVEAeU=
Subject key identifier: 35:C3:C6:1C:E5:5B:8A:75:3E:8C:0D:6E:5C:3B:6D:15:64:61:5A:E5
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 018CC348A7BF33D2741326B71C58FFC28D3F
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/NcPGHOVbinU-jA1uXDttFWRhWuU.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44462
IP address blocks: 185.178.0.0/22 maxlen: 24
81.21.112.0/20 maxlen: 24
2a0a:4d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a7:bf:33:d2:74:13:26:b7:1c:58:ff:c2:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35c3c61ce55b8a753e8c0d6e5c3b6d1564615ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:41:5e:13:66:04:b4:15:13:83:8b:96:17:
09:da:f4:5b:d3:b6:c8:31:0f:18:95:94:69:d4:17:
2e:cb:24:03:20:d9:7d:06:28:c2:b5:da:02:52:53:
fe:c0:32:ab:f6:50:13:ad:32:ae:53:0b:e7:9d:3f:
74:a8:4c:38:0b:24:9d:54:cc:7f:54:38:a4:4b:a0:
9c:f7:f5:c6:92:f7:d8:dc:7b:22:e4:06:67:c6:ad:
98:bc:60:ee:74:b3:a7:7f:ef:42:91:7c:13:ba:97:
11:24:45:36:a1:e0:10:cc:f6:a9:7c:28:8b:17:19:
1c:af:47:d3:31:19:1c:e1:b6:19:11:a4:d2:ca:17:
62:5a:33:9c:33:84:12:4d:98:cc:50:d3:1e:e6:9b:
d4:4a:3d:ed:3e:90:4b:36:f1:a0:02:b9:76:91:f7:
77:cf:82:a7:a4:45:7d:0f:3a:4a:98:0d:f1:f0:27:
0a:46:b8:d9:ed:de:46:78:ff:1c:46:86:4c:28:89:
bb:4e:87:b8:18:8d:71:a6:5e:85:0b:f3:f1:6f:20:
02:00:91:b6:71:59:b4:7d:53:59:a0:0d:a1:bc:82:
15:06:86:d0:7a:73:ec:e5:19:a5:fe:ac:9d:cb:d8:
05:9a:32:67:99:54:49:d8:40:1c:2c:b4:9a:11:23:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:C6:1C:E5:5B:8A:75:3E:8C:0D:6E:5C:3B:6D:15:64:61:5A:E5
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/NcPGHOVbinU-jA1uXDttFWRhWuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.112.0/20
185.178.0.0/22
IPv6:
2a0a:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
10:e6:42:07:28:61:d6:b1:db:38:a1:66:8d:bc:1a:49:37:f8:
62:5b:fd:13:9b:97:ff:f6:49:32:90:7f:ea:e4:f5:e8:49:4e:
03:ae:f5:08:b7:a7:ee:04:e3:94:01:8d:6b:47:b9:f3:89:d6:
b9:70:8e:12:65:d5:e3:0f:eb:12:7e:38:79:8c:b6:db:95:24:
e0:f9:16:27:25:ad:17:c1:8b:9d:50:46:f3:f9:f7:d1:fe:99:
2c:15:ff:3d:3a:37:44:18:58:99:ab:11:62:50:dd:f0:94:58:
65:f7:5a:58:89:04:71:1b:cc:47:d8:c1:6d:71:1f:09:7c:e7:
58:13:6b:1d:03:f3:c1:0c:5e:0e:23:75:a4:97:ee:2a:34:26:
1c:0b:76:c3:16:fa:d3:95:28:40:71:c7:0d:89:9b:5e:12:71:
bf:cb:3f:cf:6d:cd:1c:8b:a3:e8:62:62:92:74:27:1f:72:1b:
d7:71:23:af:c5:16:b2:af:be:da:27:e8:c9:b1:53:6d:fd:e9:
75:cb:dd:b8:f0:f3:c5:95:45:cf:ae:ac:50:de:c0:44:4e:46:
d6:88:ec:a1:16:eb:64:7b:9a:36:e8:ac:8b:5e:16:fb:43:76:
d7:ee:d4:34:9b:67:53:1b:79:f8:8a:4d:12:5e:9e:1e:45:f0:
b2:2b:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net