Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/JMOK8ns3yG2Ll5LC15UBr-ynzqg.roa
File: JMOK8ns3yG2Ll5LC15UBr-ynzqg.roa (raw, json)
Hash identifier: 61YW0b+qB2x2IewKT6X3N4tXUXw/9J71wm5eXTXsO8Q=
Subject key identifier: 24:C3:8A:F2:7B:37:C8:6D:8B:97:92:C2:D7:95:01:AF:EC:A7:CE:A8
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 01937295F39715BF28B1E0EF25A280C6DA32
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/JMOK8ns3yG2Ll5LC15UBr-ynzqg.roa
Signing time: Thu 28 Nov 2024 11:44:09 +0000
ROA not before: Thu 28 Nov 2024 11:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47106
IP address blocks: 193.46.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:95:f3:97:15:bf:28:b1:e0:ef:25:a2:80:c6:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Nov 28 11:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24c38af27b37c86d8b9792c2d79501afeca7cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:70:3e:ca:c6:e0:27:b3:53:e8:40:2b:7d:
1a:7f:6c:4a:b7:bc:f4:1e:5f:07:48:f3:b7:1e:c2:
12:a0:30:0c:2f:94:92:4f:e0:ae:8e:1b:c5:b5:6c:
8e:b3:fd:83:a2:6f:83:96:4c:b2:88:f9:a5:ca:f3:
94:eb:11:d8:20:98:d6:42:6f:ed:4b:97:55:3f:1c:
37:2c:f8:44:97:57:9f:e4:ed:78:9d:a4:3b:13:ed:
02:45:60:e9:39:1a:17:7e:56:3d:10:e6:6d:bf:09:
b8:04:4e:e9:ab:87:ba:d8:55:9b:2b:72:0e:70:81:
ff:4b:75:cd:4f:84:19:3e:ed:a7:30:86:47:aa:65:
7e:01:d0:f1:7b:8a:0d:86:96:bd:67:c1:89:da:cd:
66:b5:b8:87:6f:94:72:e6:e8:bb:e1:7b:92:b2:d4:
ef:7b:51:d8:b6:e4:3a:03:1a:3e:1f:1d:42:26:b3:
bc:49:1f:18:00:69:f5:ad:c0:22:70:53:40:a9:1c:
70:04:fa:c7:8e:c4:43:24:fb:d5:0d:f8:09:96:fe:
35:8f:95:02:c3:d4:6a:c2:64:62:4e:ad:f9:56:a7:
7c:9b:72:4e:8f:f6:02:3c:27:5a:a3:22:8c:e4:ff:
b8:f0:98:13:cc:ea:6c:13:a7:26:61:a3:61:b8:56:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:8A:F2:7B:37:C8:6D:8B:97:92:C2:D7:95:01:AF:EC:A7:CE:A8
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/JMOK8ns3yG2Ll5LC15UBr-ynzqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f5:84:31:8a:93:22:71:75:b0:cb:71:9e:96:3b:fe:54:b0:
d4:85:e1:23:57:e4:35:c5:76:64:bd:9d:23:13:c9:d6:88:cc:
bd:da:d5:d1:bd:46:34:65:6a:9e:d1:3d:b8:7a:84:30:6e:b6:
9b:db:54:b8:c7:5e:c2:59:ea:67:27:4e:71:8e:7c:c2:01:32:
8b:69:53:2e:b3:ba:f4:20:98:33:15:17:18:16:44:b5:da:ab:
0e:be:27:ef:3d:95:e1:a3:5c:2a:5e:63:64:a0:a9:a8:63:82:
3b:4b:cd:25:23:61:8a:95:11:97:3a:5a:72:73:e4:8b:c2:7b:
7c:c5:5c:6f:56:33:9a:f8:08:ce:a3:2f:fa:0b:fc:4c:f2:68:
a8:13:e0:8a:c2:d6:83:e2:28:43:9d:18:ea:16:fb:87:16:1c:
6e:e5:69:a1:2f:95:89:ca:1d:00:52:1f:78:4d:95:2e:19:f1:
fe:51:c1:0d:9f:ea:8f:15:cb:6f:59:46:db:73:5b:38:a6:f1:
45:f0:ac:3f:da:8f:72:3f:22:9b:0f:f9:22:83:b3:0d:fc:71:
47:4a:71:cc:e9:10:a8:e3:5c:f4:00:25:47:33:f8:0a:0a:74:
78:89:ee:50:64:3f:58:e9:74:1e:7d:4e:32:2a:df:91:fe:95:
6a:6c:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net