Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/lJkJYyhx9ror_FNPmFhMZB4k5p4.roa
File: lJkJYyhx9ror_FNPmFhMZB4k5p4.roa (raw, json)
Hash identifier: mh/om0Ax1aLf7YBqnFsOeUiVfeOIdxJAo14PLxOClfM=
Subject key identifier: 94:99:09:63:28:71:F6:BA:2B:FC:53:4F:98:58:4C:64:1E:24:E6:9E
Certificate issuer: /CN=c02e3bf979ea5119306e6ffea981fb0afaf75aa5
Certificate serial: 0289F7E3
Authority key identifier: C0:2E:3B:F9:79:EA:51:19:30:6E:6F:FE:A9:81:FB:0A:FA:F7:5A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC47-XnqURkwbm_-qYH7Cvr3WqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/lJkJYyhx9ror_FNPmFhMZB4k5p4.roa
Signing time: Sat 01 Jan 2022 00:53:49 +0000
ROA not before: Sat 01 Jan 2022 00:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198134
IP address blocks: 193.161.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42596323 (0x289f7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e3bf979ea5119306e6ffea981fb0afaf75aa5
Validity
Not Before: Jan 1 00:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=949909632871f6ba2bfc534f98584c641e24e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:f6:b1:46:93:cc:42:50:e2:1f:35:b3:dd:
f2:df:c4:ee:b4:2b:73:35:f3:2f:4a:93:63:2a:ba:
65:90:76:e3:3c:f4:86:5b:28:1c:49:25:54:a1:4b:
84:81:ed:d5:c2:db:bf:d1:ec:39:c8:13:59:b5:43:
a6:37:85:c1:95:03:91:93:68:5c:e3:50:d6:4e:6f:
79:bf:2d:b4:28:f1:a7:23:74:fb:a8:7b:f0:00:20:
75:0f:b2:34:73:8e:91:61:5c:af:83:88:52:2d:f2:
2a:d7:92:41:fb:d1:cc:05:e8:66:30:82:2f:fb:ac:
5e:d3:09:5b:28:94:5d:42:6c:a6:e0:77:46:2b:0e:
7e:73:1e:69:b9:c2:56:09:2d:1a:7d:ca:2f:e5:14:
fa:ef:36:9f:2d:02:b4:f0:22:f3:65:c3:2a:ca:a3:
c8:63:d2:f3:b2:f2:ea:b4:ac:d1:42:10:7f:6d:8d:
f0:3c:63:78:02:10:1e:1b:27:03:2f:ed:fb:13:5c:
8a:81:18:a0:05:77:b6:d2:d3:59:4d:ab:77:49:aa:
ab:6c:2a:37:9d:b0:b6:ad:ee:48:a8:58:df:8c:e2:
2f:60:4f:37:bb:f2:85:78:9c:0a:df:8c:92:e5:70:
7b:f0:bb:4e:7a:f7:29:3c:41:d3:eb:27:bf:7e:1f:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:09:63:28:71:F6:BA:2B:FC:53:4F:98:58:4C:64:1E:24:E6:9E
X509v3 Authority Key Identifier:
keyid:C0:2E:3B:F9:79:EA:51:19:30:6E:6F:FE:A9:81:FB:0A:FA:F7:5A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC47-XnqURkwbm_-qYH7Cvr3WqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/lJkJYyhx9ror_FNPmFhMZB4k5p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/wC47-XnqURkwbm_-qYH7Cvr3WqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.193.0/24
Signature Algorithm: sha256WithRSAEncryption
63:58:30:4a:3d:7c:5b:1b:38:2f:ca:a6:ed:7a:ea:6f:5d:ee:
4b:87:fa:b0:8b:9e:54:fe:94:47:4c:a5:34:34:fe:4e:6a:95:
58:ca:8d:c4:c5:ac:07:c8:5e:b8:eb:81:95:a7:b1:f8:09:4d:
a8:ed:d2:db:c0:8f:78:79:cf:ed:50:00:e7:82:36:b8:07:0a:
fc:03:38:80:a2:6c:2d:06:cf:da:b5:ff:f2:46:84:40:b4:29:
76:37:9d:d1:ca:e5:3b:cf:0e:46:ba:5f:c3:66:7d:b6:7d:69:
b9:7a:28:18:1c:6f:4f:0a:7b:ca:a5:7f:6d:fa:b0:e6:ec:ee:
19:d3:1e:67:ba:1a:42:08:10:5e:bd:5f:ba:fc:15:fb:15:f0:
d4:d4:c3:6b:a5:e8:51:d3:ee:42:ab:4c:02:bf:5b:e2:3f:b8:
ec:67:70:af:6e:c2:7d:0d:3e:98:ff:2b:9f:f3:e0:5b:51:a7:
7d:e3:eb:4b:86:df:42:c4:b6:7e:ad:54:c0:0b:45:a3:2b:3b:
4b:fa:37:eb:b3:4d:f3:aa:93:6b:3a:f6:69:50:57:ed:0b:c1:
5d:b1:80:a5:ed:2d:37:22:1b:ac:77:c8:c3:c2:65:b2:30:89:
0c:e5:ed:d1:f8:fb:ab:86:14:3d:da:d0:24:e4:40:6e:87:f2:
af:ee:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net