Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/iPtK3lpPyq0Com_CyGWj3T0ZbrQ.roa
File: iPtK3lpPyq0Com_CyGWj3T0ZbrQ.roa (raw, json)
Hash identifier: deRw8wiTYmb8ChkPCn3PsfZq9Xm/ph4bO6wcTmECkRQ=
Subject key identifier: 88:FB:4A:DE:5A:4F:CA:AD:02:A2:6F:C2:C8:65:A3:DD:3D:19:6E:B4
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 018CC8DF8FF308F382EECCF63C4FE0C8917C
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/iPtK3lpPyq0Com_CyGWj3T0ZbrQ.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28933
IP address blocks: 212.101.128.0/18 maxlen: 18
195.47.197.0/24 maxlen: 24
2a00:1368::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8f:f3:08:f3:82:ee:cc:f6:3c:4f:e0:c8:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88fb4ade5a4fcaad02a26fc2c865a3dd3d196eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:4a:8c:2a:ab:af:76:e2:eb:e5:4d:84:63:
4b:a1:73:69:ba:0c:c9:20:13:88:8f:eb:59:93:ed:
2f:7d:e0:f3:73:86:1d:49:04:16:6b:ca:98:b9:74:
4d:d0:16:b0:c2:c9:28:c9:44:da:b8:e2:a7:85:70:
f9:9f:60:17:f2:a2:30:b6:98:a3:fa:d2:b2:c7:22:
3c:af:25:91:db:0b:d1:c3:00:b4:70:27:6f:95:9d:
66:a0:1d:2c:d8:f9:ae:a0:1e:80:f4:6b:b9:7d:6a:
30:e8:88:ce:5c:85:fd:d8:ab:b6:63:aa:5f:40:6c:
1c:54:6a:67:4a:d8:4a:67:24:6b:cd:ab:fa:df:77:
7d:91:35:c1:59:33:1e:b1:2a:09:45:16:6a:d7:8e:
a0:50:da:b8:3c:da:4a:ef:61:da:28:1a:ca:17:28:
ac:be:90:4a:93:4e:e9:53:67:34:31:97:32:ea:c6:
ed:38:09:81:32:ee:49:4f:52:54:67:9e:e8:27:62:
b6:49:2d:cd:09:f4:fb:dd:0f:bb:97:37:07:33:bf:
82:5f:14:8d:a0:b2:cc:d0:f9:e8:40:db:d1:20:38:
14:3f:e9:6c:9e:3c:00:30:f8:93:00:ba:48:92:fc:
e8:51:ab:57:19:be:1d:0a:be:a3:e4:66:02:ac:71:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:4A:DE:5A:4F:CA:AD:02:A2:6F:C2:C8:65:A3:DD:3D:19:6E:B4
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/iPtK3lpPyq0Com_CyGWj3T0ZbrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.197.0/24
212.101.128.0/18
IPv6:
2a00:1368::/32
Signature Algorithm: sha256WithRSAEncryption
85:25:e0:43:a2:52:b6:a1:74:bb:3a:d5:d7:2b:d8:a0:70:d0:
5a:e2:ae:eb:c8:ca:88:48:57:d9:f5:1f:23:75:a1:20:4e:05:
3c:d0:0f:bb:d8:7e:55:0e:0b:92:c0:38:51:75:14:33:9c:df:
a5:5d:6b:fd:77:36:5c:d7:ef:0b:ca:2b:e7:df:13:2d:07:8c:
16:1a:39:cc:78:4d:be:3c:c0:c2:5d:9f:41:a9:5a:72:ff:49:
89:6b:e1:3c:a9:80:e5:4e:08:ae:43:9f:69:43:6a:b9:42:0b:
5a:23:94:50:6b:85:8b:e2:80:b5:e7:8d:ba:4e:df:5f:c2:f4:
29:65:87:42:e7:9e:92:ef:20:36:ef:ce:9b:c9:3d:1b:8f:a5:
87:ef:04:35:ff:b7:e7:d2:69:98:c2:0e:1d:e8:0f:53:b0:89:
1d:16:0c:87:84:27:3c:19:5f:22:55:34:27:92:be:9f:95:1a:
42:b1:f8:a2:b0:bd:7f:1e:e4:60:e3:56:fa:df:28:ae:a0:5d:
0c:9f:8f:38:20:42:e3:b3:29:f9:de:97:8d:eb:62:ea:85:52:
9a:b2:1f:63:27:20:fd:df:e2:43:d4:9b:a6:5d:49:cf:a1:44:
e1:cd:e1:ad:2c:17:9a:ad:82:53:ac:f7:f8:35:53:cb:fc:f1:
15:d3:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:37 2024 by rpki-client on console.sobornost.net