Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/UCSS6ZKa66_dI8RZuCzTMeMHWXQ.roa
File: UCSS6ZKa66_dI8RZuCzTMeMHWXQ.roa (raw, json)
Hash identifier: 9SPNJW9Cn5c4Ak7SV6UkFww0eZbG2vsJ4RIwjM1CPlc=
Subject key identifier: 50:24:92:E9:92:9A:EB:AF:DD:23:C4:59:B8:2C:D3:31:E3:07:59:74
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 018CC4936C538005FB31F7520DDAAEDBDB7B
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/UCSS6ZKa66_dI8RZuCzTMeMHWXQ.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8666
IP address blocks: 185.121.53.0/24 maxlen: 32
185.121.52.0/24 maxlen: 24
2a06:9cc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6c:53:80:05:fb:31:f7:52:0d:da:ae:db:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=502492e9929aebafdd23c459b82cd331e3075974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:15:ae:66:25:26:fa:8d:51:41:c8:fb:44:cb:
e0:30:de:13:41:29:80:ad:dc:fe:b9:d0:c8:f7:f9:
05:6c:16:ca:97:d2:e3:a1:97:b1:42:54:6b:fd:8e:
7b:c0:91:c9:cb:89:6e:e3:9b:6a:3c:16:39:a4:28:
15:61:70:96:8d:5b:7e:a8:6c:6a:ce:23:83:7c:af:
9e:46:3b:ef:e8:a4:a7:9f:a8:a2:bc:d7:84:39:be:
70:bc:e0:75:b8:e3:34:65:45:d0:23:fb:53:1f:5c:
7f:98:2b:6e:a8:d6:48:9f:3d:9e:d4:ea:5a:42:dc:
90:4a:e5:d6:e6:5c:20:98:da:17:39:e6:3b:26:a1:
0d:d4:b5:41:98:e7:09:35:94:d9:d1:81:24:46:a6:
4f:16:61:e5:c0:80:51:fc:7e:30:d5:fb:12:94:90:
90:36:37:0a:c5:66:ec:2c:59:bd:69:72:21:f1:0f:
00:e2:9b:40:c6:9a:6d:92:78:35:5d:2a:c9:87:1b:
a5:4c:0d:33:29:55:28:f9:c7:65:85:00:6f:79:1d:
bb:a4:60:f2:98:29:45:74:20:aa:c6:a1:bb:39:f6:
97:f2:b6:13:3d:f7:50:1b:24:78:39:d9:86:7b:5d:
d9:67:50:1b:1b:23:89:43:9e:1d:8d:f4:8e:ef:00:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:92:E9:92:9A:EB:AF:DD:23:C4:59:B8:2C:D3:31:E3:07:59:74
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/UCSS6ZKa66_dI8RZuCzTMeMHWXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.52.0/23
IPv6:
2a06:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:de:f3:56:8c:49:59:7f:ee:79:f8:79:b4:34:40:8d:00:62:
7a:d3:60:fe:2b:6a:a3:69:53:2e:55:58:ae:d7:09:9f:a2:b8:
14:53:5f:84:7a:41:ce:0f:ad:c5:b4:07:ee:01:fa:8e:6c:de:
d3:12:06:1d:9d:bc:0d:d6:55:07:c1:96:39:70:e6:96:67:f4:
2e:76:05:c8:2b:a6:33:c8:d4:af:13:d3:bb:53:d7:71:91:51:
0e:10:d3:e0:73:4d:b2:44:18:72:b1:dc:80:f8:24:f4:34:98:
ff:af:4b:01:d9:33:4c:5d:b7:66:c3:d9:d0:8b:30:2e:ca:8f:
63:f4:db:21:ac:f7:e4:1c:2b:2d:49:f2:24:b6:5a:91:a0:5e:
23:32:e2:ba:53:af:21:04:9b:82:7a:ae:4d:be:9a:14:ae:cf:
d1:79:fd:95:01:29:b1:1c:ce:85:0d:45:2a:42:9a:23:43:30:
ee:4d:72:5b:0e:57:62:27:82:8b:41:c4:af:5f:82:63:f0:9d:
8a:e2:f7:c8:2c:22:09:93:31:c5:d7:8e:d9:cb:0d:69:67:81:
c0:32:2e:09:da:67:66:9e:b7:da:1a:0f:c9:40:bc:7a:c5:f2:
b7:65:b9:9b:6b:7b:7c:fc:ac:cd:b2:d6:6a:ed:7d:8d:c0:09:
8d:70:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net