Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/J8PxpRHnK6zPA45Cw5CCl7D0lsc.roa
File: J8PxpRHnK6zPA45Cw5CCl7D0lsc.roa (raw, json)
Hash identifier: eKWrBIdbEmJoYZoaBDcxPd1BSXPU+/2T4NOPRhpDf4k=
Subject key identifier: 27:C3:F1:A5:11:E7:2B:AC:CF:03:8E:42:C3:90:82:97:B0:F4:96:C7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0193B5DF08300F8F2ABCA1C23CE78CF95F14
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/J8PxpRHnK6zPA45Cw5CCl7D0lsc.roa
Signing time: Wed 11 Dec 2024 13:18:32 +0000
ROA not before: Wed 11 Dec 2024 13:18:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13763
IP address blocks: 194.163.80.0/22 maxlen: 24
195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:df:08:30:0f:8f:2a:bc:a1:c2:3c:e7:8c:f9:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Dec 11 13:18:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c3f1a511e72baccf038e42c3908297b0f496c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:13:ef:80:78:53:13:d9:25:61:d2:af:c9:
7e:1a:f1:13:cb:76:3e:af:3a:61:52:d7:f3:d6:13:
04:a7:ff:81:ae:38:ff:70:91:82:2b:71:fd:ca:7b:
33:9a:d1:42:f7:93:40:67:45:73:62:e1:06:51:80:
f8:7e:98:32:20:7e:71:08:f4:6a:f3:49:5e:2b:5c:
8f:4a:63:5a:f9:d6:8e:60:a1:a3:88:cf:ea:5a:bc:
76:c5:64:07:0e:05:3b:1d:c3:56:f2:da:3a:66:14:
f6:86:5f:18:8f:f3:3e:68:66:37:0d:73:4f:c9:d8:
81:a3:fd:cc:a8:43:00:61:04:c6:90:22:79:85:3a:
46:05:7f:b2:d4:6e:4b:51:ca:ac:43:01:b0:d7:50:
02:13:d2:40:4d:1f:f4:38:8f:c6:46:e9:36:47:32:
d2:43:85:07:10:cb:59:b6:57:be:c0:9a:a8:70:c8:
07:33:a3:ed:6e:37:8b:32:97:86:92:a1:e5:ba:8a:
1e:90:d6:18:1d:6b:62:51:1e:68:4c:d0:7b:e3:59:
b0:a5:44:d0:0e:af:ea:8e:30:47:cc:27:fa:4b:be:
7b:7b:36:fe:9b:0d:24:fb:4e:73:fa:b8:e8:d5:09:
a9:30:2b:2f:be:0b:c0:d1:4f:f0:53:a7:de:b4:8e:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:F1:A5:11:E7:2B:AC:CF:03:8E:42:C3:90:82:97:B0:F4:96:C7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/J8PxpRHnK6zPA45Cw5CCl7D0lsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
58:71:12:3f:9b:74:7f:ac:15:7f:b2:41:20:34:e7:a3:06:5d:
4a:45:8b:51:94:52:93:67:7a:af:79:a4:2e:01:8b:e6:46:71:
1e:fa:90:7a:ae:54:f6:f9:e4:40:d9:7b:56:73:50:dc:58:64:
28:68:f2:b8:4e:a2:e8:d9:df:f2:85:52:32:78:a6:4f:c4:f6:
9f:ef:6f:4c:62:08:69:15:36:9e:6a:3f:43:bb:48:b9:73:fb:
7b:7c:5e:55:b1:2f:34:3c:69:3e:c3:6e:46:1e:a2:7c:62:61:
bb:cb:c0:50:07:bf:5d:10:fe:96:b3:68:59:90:64:85:6a:62:
ba:c1:9b:30:e4:8f:d1:40:cf:5f:91:e4:91:cc:37:df:25:69:
84:0d:43:0d:5d:15:f3:f8:ee:10:82:40:b1:8f:0b:0a:d5:50:
bc:cf:8f:00:1d:e9:83:b2:d9:62:db:94:1f:18:90:3e:85:47:
82:43:2b:5c:c4:04:4c:f2:16:9a:6e:6a:ae:27:92:83:cc:6b:
c2:55:b8:85:cd:a0:8a:2e:79:eb:20:8f:aa:58:64:43:60:29:
f0:6a:56:56:e4:2b:9f:40:66:9e:4e:b3:19:29:b0:f6:4b:3d:
2c:e4:56:df:13:64:8b:f4:0d:4d:b4:c0:a4:15:b7:f4:d2:23:
f7:21:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:44 2024 by rpki-client on console.sobornost.net