Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/MuzhXn11HmOYXUtpf3Oi9QtWalM.roa
File: MuzhXn11HmOYXUtpf3Oi9QtWalM.roa (raw, json)
Hash identifier: wDJueZsAIpq1nv4VpId04bcAPc71jOt7zu0dcRActxY=
Subject key identifier: 32:EC:E1:5E:7D:75:1E:63:98:5D:4B:69:7F:73:A2:F5:0B:56:6A:53
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 018CC64A7B2919E6EB2CD30512E738F0BFE8
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/MuzhXn11HmOYXUtpf3Oi9QtWalM.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34832
IP address blocks: 195.211.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7b:29:19:e6:eb:2c:d3:05:12:e7:38:f0:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ece15e7d751e63985d4b697f73a2f50b566a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:8c:90:cb:97:15:63:d5:4b:55:f3:01:10:
13:89:75:93:83:e6:4a:da:6f:74:cf:19:ac:00:7e:
ec:1c:e3:5c:1a:bc:bf:8e:f3:1d:5e:2c:2f:a8:5e:
55:9d:f9:3a:98:7d:42:d6:18:87:bd:c7:aa:1c:6c:
15:f8:fb:84:d0:f5:50:6d:b8:a3:03:9a:2d:0e:8e:
4e:4f:5b:5b:96:bd:7b:cb:5e:cb:b7:21:bb:b0:68:
e7:19:92:8e:35:71:3c:45:e5:82:89:17:30:5c:7a:
4c:00:1e:a5:89:58:50:bf:03:c0:0a:1b:d7:c2:cd:
1b:2f:cf:4e:d8:3e:9f:1b:ac:18:29:73:dd:95:76:
79:35:da:f0:be:da:3d:35:45:a4:14:e4:34:54:e3:
e1:7d:e2:69:3c:91:82:18:ea:37:a5:a8:7d:18:04:
46:d4:45:b1:b5:21:83:66:38:3a:59:d2:08:f1:4a:
c6:cf:d9:75:60:ee:e8:dc:66:2a:0b:d2:60:79:07:
28:d6:31:53:54:9c:96:a6:f5:53:57:35:fd:cc:10:
26:58:ee:33:9a:3c:97:1a:a5:04:55:a2:c0:e1:f6:
20:20:97:82:b2:fa:6b:6a:24:85:9a:3f:56:e8:3f:
45:f8:28:c3:79:a0:ac:ba:88:4a:67:40:f3:6a:86:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:E1:5E:7D:75:1E:63:98:5D:4B:69:7F:73:A2:F5:0B:56:6A:53
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/MuzhXn11HmOYXUtpf3Oi9QtWalM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.120.0/22
Signature Algorithm: sha256WithRSAEncryption
27:62:96:68:4c:d4:6f:a9:1c:db:32:25:36:da:34:4c:dd:1c:
dc:7f:06:5d:84:63:e1:95:ae:97:cb:2c:79:46:a2:b3:c3:e7:
ee:11:ec:e3:6f:fd:f1:34:08:d3:54:dd:84:80:0c:6b:a5:a3:
be:e7:ac:16:99:63:17:54:e3:ee:da:d5:6b:41:3f:70:d0:6e:
04:fc:69:d9:21:b2:a3:6f:04:31:36:c2:2d:9c:08:95:2f:a3:
d2:85:7f:b3:13:4d:b1:5d:07:5a:99:b5:7d:0a:86:ef:66:9c:
d5:b0:50:0b:c3:b3:3a:d7:21:cd:28:69:0f:fd:5f:7b:48:9b:
cf:25:4e:eb:54:00:87:43:d1:27:d0:d8:6e:7c:9f:c0:57:dc:
00:02:fa:46:e4:51:77:19:a7:fb:be:98:de:6f:35:9a:89:64:
4a:b3:a0:27:4d:ea:f3:30:2c:3d:d3:1c:8a:eb:8c:cd:12:55:
b3:1d:83:3c:cf:de:af:07:3c:ae:ec:2d:c3:45:0d:83:48:9f:
d8:9d:17:51:41:e5:a0:17:1e:98:c0:7f:47:6e:7c:40:23:a1:
3b:91:e1:fc:7b:69:84:1c:f9:37:86:44:09:81:60:63:3e:8c:
c6:c8:7e:59:a9:9f:b7:b9:8e:10:8d:e3:c9:c6:a8:6e:c7:ce:
ab:9e:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:18 2024 by rpki-client on console.sobornost.net