Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/lKDNG4U9xpQMn2MLwX1seShvix4.roa
File: lKDNG4U9xpQMn2MLwX1seShvix4.roa (raw, json)
Hash identifier: GwlMzeCh4qRsr4xz+giVIxE74+78IITRX3+DLoTic1U=
Subject key identifier: 94:A0:CD:1B:85:3D:C6:94:0C:9F:63:0B:C1:7D:6C:79:28:6F:8B:1E
Certificate issuer: /CN=1c14ea32ebe84556fd468f812eac103153789ed0
Certificate serial: A702CD
Authority key identifier: 1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/lKDNG4U9xpQMn2MLwX1seShvix4.roa
Signing time: Sat 01 Jan 2022 02:59:57 +0000
ROA not before: Sat 01 Jan 2022 02:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 188.244.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10945229 (0xa702cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c14ea32ebe84556fd468f812eac103153789ed0
Validity
Not Before: Jan 1 02:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a0cd1b853dc6940c9f630bc17d6c79286f8b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:12:0f:4e:51:9e:bc:3b:65:8b:09:a4:4c:
8d:10:37:90:a1:3f:ed:b4:f3:67:d2:1a:af:b9:3b:
1c:ab:a5:95:19:1a:b3:0c:99:1b:66:f1:25:50:9f:
fd:1d:79:bd:c4:33:71:12:59:00:dc:69:19:af:ef:
66:95:92:19:9c:a7:f0:37:65:3d:6a:52:b2:62:29:
5b:4b:d0:ba:67:1f:ea:6b:28:dd:22:5a:ed:7b:57:
9f:9d:94:a8:0d:d6:85:1c:e3:74:6d:04:ca:da:c6:
ec:a8:60:c1:0d:ba:bd:a5:93:dc:5a:ba:39:03:af:
2b:4c:a4:e8:6a:f2:de:9e:47:49:64:7f:ba:f3:3c:
b3:18:dd:5a:1a:4f:63:b9:e8:5a:90:36:bc:0f:85:
99:b0:3a:3f:02:89:4c:a5:e6:c4:1e:6c:72:f7:b2:
9d:89:c2:1d:46:2b:de:8a:b1:33:4b:70:9d:73:3d:
9c:27:c8:32:b3:8e:7c:09:7a:83:e6:95:9b:37:52:
a3:25:90:ac:e0:af:6f:d0:b6:a8:b5:6d:26:ee:f5:
bf:71:66:6b:49:16:04:01:3f:c1:45:91:65:36:19:
67:b6:00:a9:3f:cd:d6:3f:31:19:15:6c:b7:96:ea:
05:00:e6:45:4e:b1:7b:a8:3b:c4:c0:f3:8d:00:cb:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:CD:1B:85:3D:C6:94:0C:9F:63:0B:C1:7D:6C:79:28:6F:8B:1E
X509v3 Authority Key Identifier:
keyid:1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/lKDNG4U9xpQMn2MLwX1seShvix4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7b:1a:dd:8d:38:d2:44:b1:ef:2e:05:31:12:2d:70:b8:03:
ec:49:6e:59:82:24:78:54:1c:7d:53:77:fa:33:2c:e8:70:39:
10:c2:7a:09:50:ba:a3:33:4c:85:0d:60:ff:97:f1:de:3b:5e:
a7:65:35:7f:b8:8f:39:7c:58:a4:bf:6d:fe:5e:07:9e:5d:e0:
ef:5b:55:e6:1f:e2:a1:61:89:de:22:71:85:b8:91:b5:0e:f0:
00:7b:7b:7c:26:ed:7e:3a:36:95:3d:22:fd:b4:93:e0:6c:bf:
f6:17:c9:b4:38:90:b6:cb:ab:0a:02:1b:71:93:8e:38:fb:77:
32:0d:b7:9e:c8:e1:f1:8d:61:54:d0:4d:2b:c7:6c:92:6f:8f:
db:fb:7a:02:1f:bf:8d:fc:f3:67:1a:e8:89:82:9a:e9:16:c2:
d4:5d:d0:06:19:63:cb:49:d9:5a:43:04:0f:04:69:a3:9f:61:
31:95:f4:9f:34:a7:2d:4e:ba:28:e5:ea:71:ad:a8:91:23:9b:
07:e1:8f:4d:64:93:43:74:04:05:5d:39:b0:0a:d5:85:ae:39:
eb:a5:06:3b:1c:30:d1:61:3d:0e:a4:9d:89:32:b6:a8:e2:50:
a4:c0:63:db:ef:67:50:01:c3:81:44:bc:11:6a:43:55:f3:1e:
5e:50:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net