Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/Hbs7DGiuTMhQoY4RnqdNOgiVToA.roa
File: Hbs7DGiuTMhQoY4RnqdNOgiVToA.roa (raw, json)
Hash identifier: m40Uo3P794FLYaPjfCx1LVa54muVBRVSy9cLZZcc8UE=
Subject key identifier: 1D:BB:3B:0C:68:AE:4C:C8:50:A1:8E:11:9E:A7:4D:3A:08:95:4E:80
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0193918F552B89DAD951568676627DE785EB
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/Hbs7DGiuTMhQoY4RnqdNOgiVToA.roa
Signing time: Wed 04 Dec 2024 12:05:09 +0000
ROA not before: Wed 04 Dec 2024 12:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44542
IP address blocks: 193.254.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:8f:55:2b:89:da:d9:51:56:86:76:62:7d:e7:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Dec 4 12:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dbb3b0c68ae4cc850a18e119ea74d3a08954e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:da:57:d2:cb:75:63:37:15:9c:29:59:b0:
9b:df:43:71:98:66:d8:69:93:a3:f0:de:c3:85:e1:
e8:aa:97:6a:e7:55:75:ac:09:98:ef:8b:84:e6:8b:
ce:8b:62:9f:49:fa:38:6a:aa:08:04:e2:45:48:9f:
f4:a6:d2:6d:aa:d6:4a:b0:76:5c:5a:7a:0b:20:8c:
af:49:e9:65:22:ed:4f:c3:1e:83:01:5b:22:50:e9:
dd:ae:47:50:3c:78:e9:a9:41:98:1e:10:76:c4:e5:
c8:26:0d:93:25:45:32:4b:1f:e8:47:8a:d8:12:55:
c9:cb:45:83:68:36:ba:32:43:40:3d:1c:d8:7a:11:
a9:aa:fe:ea:d8:c3:2b:d0:49:b6:da:31:a8:28:a1:
e6:62:07:7a:54:a7:15:a4:6c:82:ab:93:ed:fa:76:
81:f4:16:8a:80:d9:02:07:4b:69:e6:79:db:ce:60:
6e:b5:1c:ed:75:36:ee:5e:c5:79:ec:e7:30:82:d6:
36:23:32:ea:f7:78:bb:62:6a:7c:07:69:33:1f:7d:
c3:71:e6:6f:f6:1e:70:37:95:d0:c4:3d:e9:24:e5:
6f:1e:6b:c0:39:e5:00:df:a2:22:c0:dc:2f:78:c2:
e6:0a:b6:43:c4:43:a6:32:a1:46:af:79:75:10:79:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:3B:0C:68:AE:4C:C8:50:A1:8E:11:9E:A7:4D:3A:08:95:4E:80
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/Hbs7DGiuTMhQoY4RnqdNOgiVToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.208.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:1a:a9:7b:28:00:c3:00:00:2d:52:89:12:97:de:cd:b0:82:
20:0b:2e:0e:4e:97:34:4a:28:98:df:80:d5:c2:2b:9a:a2:5e:
19:db:09:c5:e7:70:a5:58:29:48:29:31:e3:cb:fb:0d:12:2a:
27:09:b6:3e:6c:dd:af:14:1b:bc:22:92:b2:06:aa:6b:53:62:
29:d6:8a:06:36:c8:c3:b5:97:9b:2f:b2:a5:a0:26:3a:00:4d:
b9:ee:81:49:96:89:08:86:15:63:00:4a:df:66:b4:e0:bf:ca:
05:b3:c5:b1:38:92:9e:ce:a2:59:a6:27:a2:7a:aa:e5:02:47:
f3:9f:79:43:9d:04:fe:57:6f:57:7f:16:e4:15:6c:72:67:87:
4f:24:66:69:8d:fc:cf:c8:aa:a4:b7:68:39:c3:c0:50:95:3a:
79:3e:fa:2d:e1:4d:78:6a:89:89:1d:4f:1e:05:98:8d:00:b6:
f4:ce:b1:68:86:eb:67:07:21:fe:fb:e3:e0:e1:4e:1a:2d:6f:
fd:32:7e:0c:2f:17:e4:94:0f:5c:dd:74:c5:5f:4c:22:6f:fa:
73:b3:06:bb:39:b4:59:36:13:44:50:80:49:b0:79:bc:21:1c:
d4:79:29:82:ed:a3:72:7f:86:6b:b6:5a:23:48:a9:fe:cd:c4:
6c:e2:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:35 2024 by rpki-client on console.sobornost.net